last executing test programs: 2m50.720192911s ago: executing program 32 (id=861): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup2(r0, r4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000280)={0x2, 0x2}, 0x4) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x70bd2a, 0xffffffff}, 0x18}}, 0x40084c0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYBLOB="02"], 0x9) r8 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r9 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000040)={r9, r10, r9}, &(0x7f0000000600)=""/100, 0x64, &(0x7f0000000180)={&(0x7f0000000400)={'xxhash64-generic\x00'}, &(0x7f00000005c0)="0900a9351a47", 0x6}) ioctl$sock_SIOCOUTQ(r8, 0x545c, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r11, @ANYBLOB="00bec59c5897e95fa2250d00000008000388", @ANYRES32=r12, @ANYBLOB="0500080003000000040028000400280004000b000a000600080211000001000014006e800400020004000100040002000400020009000700104e486db500000008006e800400020024005080100008800400020004000100040002000800030005ac0f000800088004000200"], 0x88}, 0x1, 0x0, 0x0, 0x4004}, 0x814) r13 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKRRPART(r13, 0x125f, 0x0) ioctl$BLKZEROOUT(r13, 0x127f, &(0x7f0000000100)={0xa00, 0xa0000}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r3, 0x2}, 0x8) 2m42.493517225s ago: executing program 33 (id=969): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'ip6gre0\x00', @ifru_addrs=@nfc={0x27, 0x0, 0x0, 0x7}}) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0c01657e67ce717eb34a87013860510f", "15f4807f", "d4c27feb98ae71cc"}, 0x28) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000003c80)=ANY=[@ANYRES32], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2m38.781099667s ago: executing program 34 (id=994): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900080000", @ANYRES32], 0x4c}}, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r3, 0x305, 0x0, 0x40000, {{}, {@val={0x2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP, @NL80211_ATTR_MPATH_NEXT_HOP, @NL80211_ATTR_MAC]}, 0x1c}}, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="170000001600010000000000000000000a00000086cdd1276fe059f626271f6c032ca126c7ceb77e301a21c7c5fd4dba2a9d7b62c8f3e64e3236f77da560c254f4d67b4170d63788ce0da356fb36c8dca173bb3220", @ANYRES32=0x0], 0x18}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2m36.656271416s ago: executing program 35 (id=1012): ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000000)) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x28) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0xe, &(0x7f00000000c0)=@raw=[@ldst={0x2, 0x3, 0x1, 0x7, 0x3, 0xffffffffffffffe0, 0x8}, @generic={0x4, 0x6, 0x5, 0x5, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3d70}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000140)='syzkaller\x00', 0x7ff, 0x22, &(0x7f0000000180)=""/34, 0x40f00, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x9, 0x3, 0x1ff}, 0x10, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000280)=[{0x2, 0x1, 0x7, 0x1}, {0x4, 0x2, 0x9, 0x7}, {0x4, 0x5, 0x0, 0x3}, {0x3, 0x3, 0xa, 0x6}, {0x2, 0x3, 0xd, 0x6}, {0x5, 0x1, 0xe, 0x5}], 0x10, 0x8000}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000003c0)={0xffffffffffffffff, r2}) getdents64(r1, &(0x7f0000000400)=""/103, 0x67) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r1) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20008040) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xd0}, 0x4080) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000006c0)=0x8, 0x4) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000700)=[0x2], 0x2) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000740)=0x2e9d) openat$vmci(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f00000007c0)=0x2) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000800)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000840)=0x2c) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10080004}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xac, r3, 0x10, 0x2, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ee}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4f}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6922}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0xac}, 0x1, 0x0, 0x0, 0x4088890}, 0x80) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000b40)={&(0x7f0000000a00), 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x200}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x93}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e80)={r1, 0x20, &(0x7f0000000e40)={&(0x7f0000000d40)=""/43, 0x2b, 0x0, &(0x7f0000000d80)=""/154, 0x9a}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9d58, 0x0, 0x0, 0x0, 0x5705e821}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c40)='syzkaller\x00', 0x8, 0x59, &(0x7f0000000c80)=""/89, 0x41100, 0x47, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000d00)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, r5, 0x0, 0x1, &(0x7f0000000ec0)=[r1, r1, r1, r1, r1, r1, 0xffffffffffffffff, r1, r1], &(0x7f0000000f00)=[{0x4, 0x3, 0xc, 0x6}], 0x10, 0x9}, 0x94) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000001000)=0x62b6) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001040)={0x0, 0x3a17a36}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000002040)=0xfffff001, 0x4) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000002080), &(0x7f00000020c0)=0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r1) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x38, r6, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x48}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000002240)) 2m33.264733477s ago: executing program 36 (id=1029): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x400, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x20000000) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000fcdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="2fe493501309e8666d625311775b90ed61acaa0fb3008795572f95476a87e46fdf06972f68b0737485c2f396dce3cce224157e6816f6e4cf"], 0x1c}}, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, '-~,:+]+'}, @NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, '}.\\/\'}(\'{:'}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '\\[.'}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4054) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x0) 2m33.208202199s ago: executing program 37 (id=1031): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x122}}, 0x4008090) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x3}, {}, {0x10, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x24040084) (async, rerun: 32) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f00000002c0)=[{0x0, 0x1}, {0x1, 0x2}], 0xdeadbeef, 0x8, 0x2}) (async, rerun: 32) write$proc_mixer(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b4552202743442043617074757265272030303030303030303133373433383935333437320a50484f4e454f55540a494d495820274344272030303030303030303030303030303030303030300a4c494e45202753796e74682720303030303030303030acbf2fe0e605d44e83583ee2f2cddf7992259ea84754fdd87564fbec262e05b993a949d5993c5c1ee4c22f6fd6e14288666bbacfdb6d858b3c1708f54d1bc0836a8549166c118b"], 0xaf) close(r0) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x66, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0x0, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f00000009c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf25010000002800028024000180080001000400000008000100040000000800010008000000080001000100000028000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="14000200657230000000000000000000280001800800019b", @ANYRES32=r10, @ANYBLOB="0800030001000000140002007369743000"/28], 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x40810) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000150000471a00000000000001"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x64, 0x19, 0x1, 0x70bd29, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0xf, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @fd=r11}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x804) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000480), 0x4) r12 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) (async) fchdir(0xffffffffffffffff) (async) read(0xffffffffffffffff, &(0x7f00000004c0)=""/228, 0xe4) 2m25.988233655s ago: executing program 38 (id=1084): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000540001610900000050005a0007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="000002000000000000000000000000000000000186"], 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000040000000000008c00000000000000005f"], 0x0, 0x2a}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000140)={{'\x00', 0x2}, {0xfffffffffffffff3}, 0x32, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)="b6e36a7de43a70f2e2ad4e7ac52ddf88d9e074aa8da8f43a5a352eaa87980f5ceb0d79851976150ec86d2d43149f448ef980dafe744ecf18ae58d521fe4cbfb59abd15f5969846c38268a4a6116f6420acbf7eb533b359f899cc4823ad35c7e2024b4bf04d6df05e5c9a9ac5508948c801f4", 0x72, 0x0, &(0x7f0000000300)={0x2, 0xff, {0x1, 0xc, 0x73, "0a862b9b1f914bc20a0594abc4a092de22c2f8fe3a8e312c98c822ebacdf8f708eb5bb3acef817676a4c8f33a1597ddf96083e2528e8e507481dc7e530ea06e3028fd881c6065fec1b613d7b66ef522229919e37ee3a3865b59e0c268fbc3f70087f9c3304d53733964b7466acdd95912ff110", 0x7f, "997ee08895cf87b135e8ac9318e926dd213f7a22fe090a872d5446c6c6eeac8ddb83f8f6fb940a70cd4ef78c9cf8b86aafd336b7a77ba1ac8f941d318a071d85be95df5d3ab2000dfb587c819bf7d7b3fafb52e236e2327274e584f251bd1b989701e6500c1057653e5f2601d64dca10a970cdefa8005726690e7ed57ce5f8"}, 0xb, "350cd256923dc0e6d26f8b"}, 0x116}) 2m24.950951806s ago: executing program 39 (id=1093): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x2000) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x400) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000580)={@private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x3f}, @loopback, 0x6, 0x0, 0x40, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0xf00) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000019d000/0x4000)=nil, 0x4000, &(0x7f0000000080)='rootmode') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 2m22.525456659s ago: executing program 40 (id=1108): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$selinux_context(r1, &(0x7f0000000040)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27) r2 = socket$kcm(0x29, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"314d0d84e70173437a5057ac93fdf778", 0x0, 0x0, {0x5}, {0x0, 0x8}, 0xfffffffffffffff8, [0x9, 0x6, 0x8f80, 0x0, 0x2, 0x1000, 0x8, 0x2, 0x7f, 0x8, 0x2, 0x8, 0xe, 0x80000000, 0xa, 0x80000001]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000200)={{r2}, r3, 0x16, @inherit={0x58, &(0x7f0000000180)={0x1, 0x2, 0xd06b, 0x2, {0x8, 0x1000, 0xfff, 0xffffffff, 0x4}, [0x7ff, 0xe366]}}, @name="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"}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001200)={'ipvlan1\x00'}) rename(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)='./file0\x00') ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f00000012c0)={0x3f3e, "13ae71610fafb09cee2946dba9bb0b897705054fb4462f3b8d3be67781728444", 0x800, 0x8000, 0x10001, 0x8, 0x7}) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000013c0)=0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000001400)=0x0) mount$tmpfs(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f0000001380), 0x8008, &(0x7f0000001440)={[{@mode={'mode', 0x3d, 0x7}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x39, 0x67, 0x78, 0x37, 0x38, 0x36]}}, {@grpquota}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@fowner_eq={'fowner', 0x3d, r5}}]}) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000014c0)={{0xa, 0x4e22, 0x3, @empty, 0x7}, {0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0xffffffffffffffff, {[0x4, 0x2, 0x7, 0x8, 0xd, 0xfffffffa, 0x8, 0x6]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000001540)={0x0, @in={{0x2, 0x4e20, @broadcast}}, [0x8, 0xf9c, 0x8000000000000001, 0x23b, 0x2860, 0x8, 0x1, 0xf, 0x6, 0x10001, 0x2000, 0x6, 0x0, 0xa0000, 0xfffffffffffffffd]}, &(0x7f0000001640)=0x100) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001680)={r6, 0x5b8, 0x9, 0x9}, &(0x7f00000016c0)=0x10) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000001700)=0xfc9) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000001800)={{{0x7}}, 0xc0, 0xfff80000, &(0x7f0000001740)="e47d40c1bcac86870ea89e218309b3c73a02a54a7ce485d8991d872f55e6d9ed401095db1761b80a1d9a418dac3430daa2f52dc08eadbb829f8f33058dce915ab12077ad17eaba480a74ffc882931d6ee72f1cedb5243276dcb34c0bc6c34f6ea0619b44fbcaf74a909c07a1405f6b145706cee5507303b229b8c0d3305973bb6e00996d325ebc2c30e803cc0d4437aa5328ce7e127c5a7879677811302956b4e804e6b890a79dcbb4ee4268d47e9423cfbf372c3b360f85484ea25c5c98bce5"}) statx(r1, &(0x7f0000001880)='./file0\x00', 0x800, 0x40, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000001840)='./file0\x00', r4, r7, 0x100) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f00000019c0)) fsetxattr$security_selinux(r1, &(0x7f0000001a00), &(0x7f0000001a40)='system_u:object_r:modules_object_t:s0\x00', 0x26, 0x1) write$vhost_msg(r1, &(0x7f0000001b80)={0x1, {&(0x7f0000001a80)=""/64, 0x40, &(0x7f0000001ac0)=""/145, 0x1, 0x2}}, 0x48) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000001c00), &(0x7f0000001c40)={'U+', 0x1}, 0x16, 0x2) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c80)={0x0, 0x5, 0x10}, 0xc) fcntl$getownex(r8, 0x10, &(0x7f0000001cc0)) write$UHID_CREATE2(r0, &(0x7f0000001d00)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x92, 0x7, 0x40, 0x1, 0x9, 0x9, "95ab2ef3d566334a78d0bf34dab907f81d604dc57417b64ca0a79e0ee9c034adcb11a461ebdc5594bd96e8a0869524297fcc106d159177071fb8bee23818b948286b451bdae1e01611e9bd77597764f832f15efbad5a3f3c2b4a1cc06c3b9fa9953d310646ad889f79e21cbf3ccdb308511690885e6d83a7977b4c4d59e9413dc72bfac7c40992076dc452d6d85ef1311cf1"}}, 0x1aa) fadvise64(r0, 0x9, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001ec0)={r6, 0x0, 0xda, 0x3}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 2m14.801615318s ago: executing program 41 (id=1137): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x2, 0x40440) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x3, 0xe, 0x4}, 0x18, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000100)={0x830, r2}, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x9, 0x0, 0x0, 0xa}) r4 = syz_clone(0x5008800, &(0x7f00000001c0)="d109e018b80c33824f34306ef6876a5935344b07b9a7bbd61f8d18d2426436c1c3e04a5d85a860e548784124134c203a10b39f6813d9b935b5efa39480d3db70bd9bf93c82333d7f53f214877499fc653c72cc4ace05132b2e5fb59cfc618c5451272c1ae5df4908515835913a7490f5bc67153a29033be90d61", 0x7a, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="046f29c19c98753cbde3c496ab8680291da5a635969fb2aea5b5fabc081fb6d191e6595fedfa973b00a6f4a8dd61091ad1f45a752e587fc849207813c298ef53bcaa766dc843ec85fbf5119910c4936b9fc0f25b7c2a23d0d446b7d665168268c835ba0484740cfd8e7c92efea1815f2ca826bb85a4e6e235567") r5 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x201, 0xb9) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000480)={0x28, 0x2, r7, r1, 0x0, 0x0, 0x0, 0x7e, &(0x7f0000000400)="b73f5bf0ca85d25574f79c1615f6fb5116c125bd50ab4a49ad0cce40c963f20c2e7d1d5a6317c6842832d89c2658c1fec0e2a7500880ec1fc731c74424708fd51f1af7d3effb9e7a7369076052ce4785261e3cd2703a4ae1f9927d6531959b877392384235868e0992c0e89a5b082ddb446cbef0cabd307b5e7b2480402e"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0x100, 0x1}) ptrace$cont(0x20, r4, 0x7af66ccc, 0x2) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000500)={0xc}) sendfile(r2, r5, &(0x7f0000000540)=0x8, 0x1) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000580)={'\x00', 0x6, 0x0, 0xffffffc0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000600)={0x48, 0xa, r6}) r8 = pidfd_getfd(r5, r2, 0x0) ioctl$BTRFS_IOC_SEND(r8, 0x40489426, &(0x7f00000006c0)={{r0}, 0x7, &(0x7f0000000680)=[0x7, 0x7, 0x5, 0xfffffffffffffe00, 0x3, 0x3, 0x0], 0x0, 0x8, 0x1}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r5) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000780), &(0x7f00000007c0)=0x4) socket$alg(0x26, 0x5, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000000a00)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f0000000a40)={"7b2f2cfcae8dbc7076cba4eb0619a10a", r10, r11, {0x6, 0x4}, {0x2, 0x7}, 0x7, [0x1a6, 0x8, 0x3, 0xcf, 0xc9, 0x0, 0x21, 0x9, 0x8, 0xe, 0x40, 0x6, 0x8, 0x56b, 0x3ff]}) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000b40)) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000b80)=0x1, 0x4) openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000bc0), 0x10681, 0x0) 2m8.083375991s ago: executing program 42 (id=1200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9900971dc20271f56b083294e6f7f22fea7d115e452b8b17d815c2e880df7cd6510d96ecda64fc0655f874b7f3b7e0d9cf796ff71b5fe4e7a5e8915672aca1d0673c3efc806ec49754b4939887f8e8b8957f40f9462690c440a8fc5a6d7e8ba0250221c78d67b132de0542a6b58f3c08000000d5e881461f992b6c191db17e7e75dbb005c55ff049d4a2acf47b94b7", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050008000000"], 0x24}}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x8, {0xff, 0xaee0, 0x4, 0x2}}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xc000000, {0x481c, 0x0, 0x200, 0x3}}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) 2m7.490182822s ago: executing program 43 (id=1205): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3, 0x0, r4}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 2m5.253124352s ago: executing program 44 (id=1211): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x8003, 0x2, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x1, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x24008881) fcntl$notify(r1, 0x402, 0x8000003d) socket$nl_generic(0x10, 0x3, 0x10) landlock_restrict_self(r0, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m3.874747447s ago: executing program 45 (id=1216): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) (async) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r6, 0x0, 0x10}, &(0x7f0000000040)=0xc) 2m0.677856912s ago: executing program 46 (id=1222): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) accept4$unix(r0, &(0x7f0000000380), 0x0, 0x800) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001405000008004e002d3501000000000095004100000000006916360000000000bf67200000000000350605000fff07206706000005000000160302000ee60060bf530000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1m55.326632463s ago: executing program 47 (id=1233): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$unix(r0, &(0x7f0000000240)=@abs, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[], 0x48}}, 0x0) (async, rerun: 32) sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x53f, 0xffffffff, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x40881}, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYRESOCT=r1], 0x44}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x2, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4288}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x5}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x26040090) (async) r5 = io_uring_setup(0x646a, &(0x7f0000000300)={0x0, 0xbef1, 0x10000, 0x2, 0x334}) syz_io_uring_setup(0x2fed, &(0x7f0000000000)={0x0, 0x9575, 0x0, 0x2, 0x3e6, 0x0, r5}, &(0x7f0000000080), &(0x7f00000000c0)) 1m53.98375542s ago: executing program 48 (id=1243): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x2c, 0x109, 0x0, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket(0x10, 0x3, 0x0) (async) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x2c, 0x109, 0x0, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) 1m51.402478634s ago: executing program 49 (id=1263): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x20080, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r4, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000001900)={0x1dec, 0xd, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1dbc, 0x3, 0x0, 0x1, [{0x150, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xfe, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x34, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x5e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_USERDATA={0x6c, 0x6, 0x1, 0x0, "3b443ddd2fe57f087c89c3fd5a34a52d857900d5b0902c5ba8ac336450492ca01c4c6bbdfba4e257f1443997d63ac80834e5fbb67d2ba24049ef3533a6c46613a53aabc6c032ac191867fd73c676a00ba93c683d3c34b4f3b88299d95e0877bcc22c0907edde2cd2"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x42}, @NFTA_SET_ELEM_KEY_END={0x318, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x6c, 0x1, "2e9f36efd497940c70132806523f3e2b380eb90b94c0691a46ae974f9812d675801b6420b9c59a65b74dd4e1a5b12ce4fb007cca5267ff357e6cf6400826d78a77530bd42694d3efdf0e6484d96d76847b4e0b0e452e59f462127dfa767c0b623d3cfb7496bb980d"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x102, 0x1, "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"}, @NFTA_DATA_VALUE={0xc7, 0x1, "69e1bef4a821e00ef67cf6aa98bf5c08d314554ccb32b129f6064646723192f92f9c0da450fe0017cfb46f33f8d34c20e0a0e7ea3a23c4d2e21c58b7fd5b03b301646d384222f39e0747740239a55feb3389c4292fb3eeaf1a464ccc9f1c12f70383a923719ae90736a8f0b2fddda7bbdef9c2e583522caead741d23535365083dd73aa48b595f2d390e0a6cf0ad3e471d362176817e50f9d4dc4d920a26f9f76413a313fc08f15d74ad927bf3016a0ac8287fef470ff0f30f87e58fd1aae34f8181cc"}]}, @NFTA_SET_ELEM_KEY={0x114, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "185999155513ba6e6c49e6113acafa27a6af9d6333e4ff19ba737133a4c0484af580489b0aa82765ff55654d09e5f80b3a34d949cfc03d98a916a37e26e5facc7fe94527516fdf5e8d"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY={0x10c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdd, 0x1, "2f8be6e9a10136ef97eae5fc64e0ee917f2e628d0a804e96f4d8dfbaecb8971101973f562846f1ba6f1ccad20a2d0e22f122bf63eb90cf5794d69e7c196c2efb1c956fdac067c5b9249eb0d50ae3206d1a595cb00498129411cf16e003e2e7e6cfbc6803f23a4a0f51fa0c8eba85af4c73bd2a5bf9d3d9de1a5e41d5ccd3a016229da47327d9852005cc8827873078a63a4c02d6d092ba5f5890f3b416f3f9874fe8aac456341046735c4c17b981f2b18e3d8418823efd604b0f8896bca928496e62214deb0d14ea11923f9f8e524bd7993e6c83b1d5ab0817"}, @NFTA_DATA_VALUE={0x26, 0x1, "1cfc42522c9b021e20d34e4e6529a983eae613e6d1d6e8abd0cda36b5edeba352e4f"}]}]}, {0xd4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_USERDATA={0x9c, 0x6, 0x1, 0x0, "e09261ff8e88a37af9c94c321747e08989d924cf2290985f827692e0ea6493302f6c70b969cc6acc74808bf1f6342c9602c97cfbb7e020a3e48d67204eac4f2671a59bbe131f9642ebc20dbcf262372076266849e7715522c9edb09ead9461b72af32eea438c94a4975c5c0e6ab96740ae354f5a3968037f2f227b84ec6c3f8c37a427edcf0590983514d15dd3cfcdf3ba6147c899ff994d"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x11b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1180, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x5e, 0x1, "bdd1411ff3ace3229288f9036fd5c2d0598bef5ee3f5d63e9ce338b91af07919d06da6a801b650c8d9607a8375628f230c49cb91acb8005dd145fe314f438e7d99eb8c79823b6015f6f01cdfe384f78362b638a07b48f49fe25a"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x9363599cfdbf7e90}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "c677b480d0a06895309cfd2e9da2d263962a8ed506005de31249a40a5510d1eec95eda6bf6c793f98641e30bc1cf3855135a25585def5257162f561473b2dca4ffaa868c98629a390dd88a292b4c31098b024147b3cc5341c3842d2259ee30a57d11ed971841004dbd2852185c78f577d0c4139c52792f5a64da9b3cd9d4b005eacf9904acfeedbd31b024e5840139fc59ebd284e1609989a0b9b5e12321de997a151cfd352961280763bf6c0ed0a731d9c838dbcb6b31c344432cfa593d02a3c5c00f349fc4049336b0a81b158d6cae85410fed1da7c7525310bae39a4d2be8f1919363eb5f33ab8ce3e267021fb7fc1b92fcd527c7d232861f7f73dc5b8d95d19d4c8ab25e8d12fea5f10792f9c5865c2e7b33aff31ced819ddc8a6641c9c0329cbb260a1ad2bbb6e21798c4b7589988c8f72733fcb29a929b05ce8e755bd13761d32fd5c06335e5adf1f66f04bdf5ffee8672de3999b0e853cc68a55ad2152404bc2aeb15eceb579055257109ba2e34d87f1d6e689ff9c366c7d465a576648b96e264605744871639e2ca67a82851739bd2d3d562e9a94b1789457b8b6e1a6a515139af78a033d0af2cd13be1f31fb96dc20020c7b15b2b7739813d685c9790bcbd0f19674f6a7c5f33a5142aaaa84cc7765ffd79257f16ac13373f22d7373f31fa0f4aeeecc684a35349603439b86274cdf379e1504f8b7068d9ea64d6f09d97daf0750a21b1cb51495004c6b6823a39c99103549e0a8e83b8b4f845c62675a6679594e2f880583dc6851a8f203bbe529c584dfab55266fd6e10e878ec79403b26d149c7d53db84e4d6c2d39026b891d7cd561da554fbfac92b56c9b27846cb36f561347cfc94de581690b78bd6840b3d9c22b48f8ff35fc9bab3642f8838c0e4475e50162253aa67189a39efa89beb0ee3f54b2af5ab66d4d567d444c27fcfa286b36709bf782d540b591ac95fa1dac99040602ba63b8fdd285bf6c877031a605da4121156f837e8f95fa33e02d5ba359108849c1b344179c0d7ac42f9478e5cb235eea36562f3b919739781e302311b6db70e3778c7f3985776a3ecdb3cd7e72021dda0a58b34add76aa9296afb8d573a55ba7cd66f4f84ba38d076a7c424a6e695508e7d4bb369fcd4264f44c688593843c5b354c90122160d2467812cd51b687b780a641364864712f9f74080c3d114e981cf95c5d37c129c8bbcfd309d6a82e33efed53f5b0b425ae322283b3e8e71e49303550672970e7abd539f004fbd9e4ddfd04afe14c955f628fdc804c84367771979bf5c03f75fffeff6f32eb92e0c400b7e89408a763bd5a3b394b16836d07a4d020834a4e3de61064c2b9fed9d7841af3ee12f40d23438e7a9abc49b0c47343e01ad8d54b52f53b70976bc33d07b968ccd0d8ec26e204b5a216a3304bb9a1854894816eb9800d23a8938982744b65541017473cab0ac0595e5e87218f7e92cacf3636cfeccc1bde0629266b76e48c0daa1149c5289e60cd38afb643b9aa6be27b88fe81ce6edeef199c347e6395de722822b9f0e45b81940cfeda869a452f6908d031b29e214fd60590129fe72d8658bacdc5ada788c6f07f3d0a0dd367ac82d1f97bd6ad65ac6b755997291a7d7b0042b08d8e2daf8a77cb10f742a15327de92506aac505c7dd74e091dbc73557f3e47d453430daca339016bf9506767419e5507a8419a5cd05881bfa6ff85d9814e739a6d69ccb8495fcdcd026cd89b02cd13f3230e8fb95a8587fe27cb8d26aa74a606557f46d4f69436fa561cb27d5c6c172687463a7c604802ca129d58b6ef11203f1657af6f12bab8a3b0351b7952680f74cf450e30ca2ce1ce8f2e266ac0b4df3eb9b45f82c74ebf3485cac5866dd6cf5d556162351825fccd279c0edc085619d1b83a1266a8570e49bf46353e05c2eab5a1f2755cc6c062c0cc59f89c630a7460837c9015cbe16db448e7128c882e2520c1bdf94a16cd5bfb7f547b3cbdb46aa6b4b2757ba8115fc2c11dbd9fbad7358f41a0b08e81d1f0dddd49f9290ba785d486b310c28b1d4c56155acdc1ee9b37a4328b0437745e08d474d0f8959a308ca8fd59f6bf0b027a05728ee6a323b184c40197d9b4641e98bdd2fe46bc79ffd1c2d46fa3ef1be961084aac01049841109bc694f445d3f50368e5e9fc777d1355ac2e2eaaf7d79b824ee0950b5f5ac031a3896595957f767c72a18a0c9f9346572169dc6951bf44c79d173ff399aea1ceb814050755bd38e62af7c2d27fee39a7a84a7c4466ebbb3c9ffd7255af6150ea9a4071bb208a50ea97cb33919b9316d932f14dfd35b5241feae15cd78b673340ab307049abf3d20a9420bfcc9f9a333f6fe6ea5b5a174e7d123e39fee61e383c69278221546ac1ae934024b29c11e3f9ef7f25fb31238ecfca64788e28931377b68625d4609891ad5ef6fc875419a869fc52d913cb28f39c12e24737a4186c29077faabfa32a805b122e8d0c61a4666211532e46642b302e900073516d9a0b503c6e25cc20c66af37fc4bd028043df1663dfd441977fd460fcb84d503d16d21bfeedc98b7a50585b294d656f8caece5a9f0d551edef44c447fde7a250f6ca7397a30f895c3d74742ef68a5669d0e54a723375ad9fee9f3323d46aa402eeb06602eee85f9a4afed854f3d552845c1819001f2efe0cdda42f39bcce7ace403a28aa877ff7dc86297f2ae1807c7973f4772fa5f8ff210fab2068f5fe54639756a9095d0481f747f131ba4ae4d15073c370af4a33ae9c9ab790b6ed97563b85efb989ae1f482c1f2854e9c235d15f2320774fb33173aa0410645f646098910823fc82bba4c232a9884ef1c675d84f5598213debaf52567b48a421d2fec2cc738daf5a3b103bdc8351b0d0cd9f99c5d1520e0d6ef7fe7583d13c008d9917ef01c7a8449efe30cb6f687a9d5ccb0e3eb6da27b1857e388967dca5dcdb83309933d32935b36e60982fc8d0a167d25369f0f3e690eead3e7b1ad394f8d9b6aaafedf1eef6eb82ca0acf3ed5c18264321bd4241b28f5c987cd040323b66e449b48305f325196787855f4456b59525d986402a5ac3f385e0513d0c2a350aee0ba175390eff86ff67e5b048e1ddfe52316435731c12db1215af0a2fbcb3181703fd765827d24a665e5a73199610d7a26b10f6ce382d8ae7df2a38e511702ff8fbe87c2572b2a46b7cc32e724b9a66b512a82343c1aeaf1515a63a7815962d556644a22e96eb3b61db4a9028631e8342e2883daa31c975c9ad35e05604e6728568222f708dd667fbc4df80e9eb71b70460e598998677d62203af34aa939a8b1d0455fb5897a9fbc31686b317d9dc8c5bc595adfaa043e68a7c4a35b22b1d0b89cf93d1ab5f7ad833b6f4ae1ba0b8134b9debedddf582ce42fac31f8154e91465768037905d3fa058e713cc299b5c89cb54d563525f92326f856579ac88d5940f4be8f3e763d5f3ec1ba429844f1a9daf54a9b0c9e03237e0d965cfa47b1e24a89260503bd44b01600bb95ff8b50bf16e4048bef8e828c43a472b35b60d32ddbe4f50149958e0a58a65a78dcfd8c08937bf9328c3976d12345e8cbee179dbf94cfc4c1e8ed3567ff73489264e94ba447b6b6d81da388b8f754aa4f50934d2f8f8a59ae73943ccaa694b6e2765a4a109cf9a5a5437e4880a7e366421862fe1b8c08d7068d762b13223462d48b899af02e8a1faae7e6b7563f0e97e3b3d59f60c79878cce87f043f5e947448051c037f705262ca8f18b366a581a0e32c2dca991a5ca8e0868623f71b24eb0baa72a2ab6c54962eed90b769684e17d9097876914bdd5e81395e5bbc81979076107b79e53b945eaf8315172c0c7d4cc5262d4ddb5085a5288ceb84eeb63808659bc00934467ca50a292ee64a79adddcf992331bf03a23c44eb11e028f4cbfa7708c6ba257b7458f7a6f5c4c6686dca3b4b704e3ae95d934cc36c31d6c79190ed59fbe772e2bb131c03ba0ae6894a73fb9e202acd24878e1c5a8ad83f1edd0bdbe8c1a0b7463099c681f67ceb48a94845439d6d49904b8177fc7e989f4864164d76d209597cb68b1b3298511c648ca81a55d4ec705682d4328446aa6d63f3a79a79f5cdc38ee02c5370051650da31f279b853733bd5f27559c35c8f2322e389af71d3493adf28b62288ee039617561835a4d42b547bb1a44ba86830739ad0b95956a7414c4d95282e3b3d9cc454564aeba8c24c228224c179657ac2aa576bc82e8f31be82853f347307e518791e527a007aea614f9bbe801e100d18ebd8faea90694eebde7440f8616ad43517115b13953f861ffb2a3a03877de455038812b052703d1a292033e89fdad68fbfe45dfe9b250bde31fc18b016d9586a20f744d06376eedf31b129136daaed172bd39190673cbbef7c9c3b31d35c1000c58193121532df95f0c5898e0db1734fcbd5213ff4550481ae19318873f87800409fbd1f0cf3918934270d5ae1e60d0f91c21e33083db7154d5de88e9fe7bccfccf5911468d4026410258b97c8d81bed2716893592127feec533b62f33a8a3f125ca7a2a93cf3fc449de8b5c9c326fce7f7222b46d3ee60808e4b66210ad3f6cfb68c8ae4ff7bc41bc74e4ef508218d1782c085ee44c49cac8df2e2fbaf93bdc23ae095e14731d85cd9421dd7dbed7668129e0d3f418dfe027abc2d221cfc680c6bea1d12400b97b5b8f88d986ac95005180c4e7d68fce187aaed55c758b6fb535e7ecb38a5b2e3024be9112e935bf92e3cec5047986b89dd2d3ed6dfe8f9b061be7de08992de6e16ae0e532e8d920d669334bce5d85810a8f4e58d64179e34a075d761e89f04c7764593c4d8c2e036e999b03a8bd3d2e6eadbba529b57cce4c1e7ecdea1bd9de6e6b8df7af1086649808663dd667f6314bf46bb6f3943760ab358b3cc6ac641bc95b7bced161dbf9c065a262948078aba02accb2cdd0e2eccd326329cd2e62fcb996e90119e215b380472d5b4256a37ae817beea4eb2ad014c046bb5b7d0c78574a9e19550a8990cc1f389c63f02e89e61f18f487d85d5ff4b0151e34a2a9b5a2c2dccd3f10d5f5c8ae51cf99d79f65cdbfd7050f24ef17f3f67cd48f367183e409db9e348645a93e8d39861fd2e64bc7ddbd33ebf22f65eab6bdea9657dc862871223dc5ed8d2b4a22766fb63482f4dd20b94e46cb0dd2e346e8be3ae4e9aafba3ab336f8b117f9932e654c014385ce7e737d195316d4982455de7b772f9c1c502fd6df12c49283ea1fa01f2526d7c94afa96bfdb0b20873a299b784319379c32118de9b4a507873c8056cb311bb0f5c9e28cf432c9d9dc4a5012c17f982201efc7281794b3ede28e9f40a631fad5783a177f7791019ed57075d841b41669078b1d9356a316ce9a28528d9147ca40a65ab86010c8f95c9a228c7da469fe42bce8408cdbd4bff5a47ebd3416507900935300e42ee4ae4ccc47e3bdcb499526381950d25fa17457d2e75b701c3d4fb0e2f72fcbd99e419036c786dcf676703bfa8a120db0bc7dfa6cdfd55ca29d7e4da89a22d505fe1e9f638b50d9382f73f19a9961947e7b1945ed7fb52363ca2e0cb32a69001fac7420dd3f8b1b18d66c71c5f32d149ff298d6777bf31ae2e50dd839ff340d44cd926fa8afd1edb8b8531db9243befd9a8a43c06f06d7569d5d89a421b707a642b2e98519e9a0675452158286a131eda8060dd3865e553cb7ebcb680bfab7c51dd11722a00fd5d3ac20bc943e3b80f2e88276636ede6a3bea9ba57b50be6c496eaea8779cfb39f544dbbe61a01c6773"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x23, 0x1, "e10fa61cd13654ef021ed001e5fc83b11025e85a3d7430137fcf4c5259ce8c"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @objref={{0xb}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x81}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}, {0x1a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4e}, @NFTA_SET_ELEM_DATA={0x198, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x96, 0x1, "05c9a75d260657c4113a87088547ccea7632543283b8ff3e607b8daffd6abe72c61f164f8f19e4450daeb1ac906b0867a8f167fa56c49a10c826199c5143e7a77da29b8be9060796ef6c7e15689c699c0893bf261b3fa267ec06ffea1a00c9ecaaa0b5c713d6d12a66e9a56e489ba0fcc97fe9a9a1b42178818ec2a3bafe1a9c3a30fbfcfe242ebb6f3068af48b2bf31eee2"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x19, 0x1, "9379b65d053522598e00b31b523a2bd7cee53e7461"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x4e, 0x1, "93745d8c354c83abdcb38217618453e2769c4e57f42f9402e54108e65bfbefdd5e334cf623361fa30fdebb7d454004df09bc3e1c8171bc31b795b1ad894e712c0ee252b40e7943536519"}]}]}, {0x210, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x10, 0x1, "85bda65e6adc8f69a50bd5e3"}, @NFTA_DATA_VALUE={0xa1, 0x1, "8bf4ab86185b92204e857acf6553e7c32f8ebc145ddaa2a89a42f03abd1b3a1e6c7ff0dbde9839cbc75a7f6778cb896d5d61d3d285cf685810bf6bd92597b6bc290b926b2e1fd56303bb1624c42294001d8766820ed89a7c2971121cc4c2addbaaef2b3e8ffc6ba72b7183c6178e73c6be5e75c7abd1ff11285bffa2413eff507ee65a89f23bfcaed9e127486f9c5625b0f5fc12fa3b363f79d1a52b96"}, @NFTA_DATA_VALUE={0x9f, 0x1, "fbf912997f34912a0eb4b19e8d87887e84c0b885a9c766f17b2707aee9650c6252b4ef99bb547b6a030a1a4133ed00fe404240854aee1aec2f2ff8d6ab003da233b739bd93fe457981aafc578095eccfe4c1531b3e3f9c9ac99dfcaf2048906572727ed624203e8068a2269c60c4a6344dee0562910b688544bb0ff49c8b43658e3ec4c34716e3de9136879b23c70d3412546027fb6f82589903b2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, 0x1dec}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000041) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41000000120003001800128008000100677470000c00028008000100", @ANYRES32=r3, @ANYBLOB="08000a0037156c3300d5b4065e9032acb10628773b04534b95fe7eb8841e4adc203281a949f32aa411e3752f229e15c53521df8ef48ded9cdc55c20255a1fbf9e3a21a9c2b1524973e217d02e0237dff94a9bb38e11287b4e9f4208053de1aa94d647ecf10fddc885d9d3086f0c582d1e3274fa218280b6574dcf5ea5b51db950b57a7d38c5b", @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x0) r5 = memfd_secret(0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc74539f2321f4b50, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x40000004000000e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="3666450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m51.131131393s ago: executing program 7 (id=1267): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/warn_count', 0x88000, 0x1) read$alg(r0, &(0x7f0000000e00)=""/59, 0x3b) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 1m51.039680815s ago: executing program 7 (id=1268): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002301d3500b0b2149f300003402000002", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 1m50.931140047s ago: executing program 7 (id=1269): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='binder\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000005c0), 0x8040, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}, {@workdir={'workdir', 0x3d, './bus'}}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) 1m50.930695964s ago: executing program 7 (id=1270): syz_80211_inject_frame(0x0, 0x0, 0x262) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) fstat(r0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) statx(0xffffffffffffffff, &(0x7f0000001280)='./file0\x00', 0x0, 0x4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240), 0x3080027, &(0x7f00000014c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d7f64653d3030303030303132303030302c757365725f69643d", @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',default_permissions,allow_other,default_permissions,smackfstransmute=syz,\x00']) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020}, 0x2020) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x26e1, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000011c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=@deltclass={0x74, 0x29, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2}, {0xf, 0xd}, {0x10, 0xfffd}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x34, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x934, 0x4, 0x5bc}}, @TCA_HFSC_FSC={0x10, 0x2, {0xff, 0x1, 0x80000001}}, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xaf, 0x6}}]}}, @TCA_RATE={0x6, 0x5, {0xe, 0x7}}, @TCA_RATE={0x6, 0x5, {0x0, 0xb}}]}, 0x74}}, 0x4000808) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) lsm_get_self_attr(0x67, &(0x7f0000000340)={0x0, 0x0, 0x94, 0x74, ""/116}, &(0x7f0000000100)=0x94, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000500)=ANY=[@ANYBLOB='a *'], 0x8) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200ba4b0c48f3f2592cf430c6c3a00800000000850000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0xffff, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x3, 0xfff3}}]}}]}, 0x3c}}, 0x24040080) (async) r8 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r8) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="b9ff03076844268cb89eccf888a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) 1m50.655447638s ago: executing program 7 (id=1271): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv4_newaddr={0x30, 0x14, 0x200, 0x70bd2a, 0x25dfdbff, {0x2, 0x80, 0x8, 0xfe, r4}, [@IFA_FLAGS={0x2, 0x8, 0x10}, @IFA_BROADCAST={0x0, 0x4, @empty}, @IFA_BROADCAST={0x8, 0x4, @multicast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x6088055}, 0x8000002) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000300)='.\x00', 0x8000, 0x14) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x149400, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xd0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) write$FUSE_NOTIFY_DELETE(r5, &(0x7f00000000c0)={0x2c, 0x6, 0x0, {0x3, 0x5, 0x3, 0x0, '\'^,'}}, 0x2c) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x91) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) r9 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xefR\xff\x00\x00\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03', 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r10) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000940)={0x0, 0x1f, &(0x7f0000000180)=[{&(0x7f0000000540)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$NFC_CMD_DISABLE_SE(r10, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r11, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044110}, 0x20000010) ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000100)={r9, 0x0, 0x0, 0x1000}) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f0000000640)) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) 1m50.519863524s ago: executing program 7 (id=1272): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800470000300000000000059078ac1e01010a0101008303e48902000000fffc0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0008006190780000"], 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x10) 1m46.301979091s ago: executing program 50 (id=1285): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x4}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f00000000c0)='GPL\x00', 0x6}, 0x80) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) 1m45.950463417s ago: executing program 51 (id=1289): socket(0x28, 0x5, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) (async) close(0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (rerun: 32) lseek(r0, 0x80000, 0x3) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x2000000000100000) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, 0x0) (async) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) (async) r4 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000280)={r7, r7, 0xc, 0x0, 0x0, 0xb, 0x1, 0x15c2, 0xc6e, 0x9, 0x1, 0x1, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, &(0x7f0000000480)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2, 0xa2ad, 0xffff, 0x7, 0x5, "73ec8f7f4f994242a51098ceaf1e64bc8bbe1d85db5442305fc1d2f24c2148137bef5226bd87d017bb706c11d81e2d42de8dc71a75039525f881f38d159d9637d4ad699d40686e10853ab4df2690870c77642d665b27274ba7666b41ce809b0bd692748f3449c8bbf1a8359e7cb5d1aa6f9fca89e86def465e67fbd5633ac48b"}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0x3, 0x0, 0x5, 0x7, 0x0, {0x0, r9}}) (async) io_uring_enter(r4, 0x47bc, 0xf5, 0x0, 0x0, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000400)={0x7, r0, 'id0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r11, 0x4004af61, &(0x7f0000000480)) 1m35.507741767s ago: executing program 52 (id=1272): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800470000300000000000059078ac1e01010a0101008303e48902000000fffc0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0008006190780000"], 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x10) 1m32.659935785s ago: executing program 8 (id=1365): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x54, r2, 0x111, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@default, @bcast, 0x2, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100), 0x8) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) syz_init_net_socket$ax25(0x3, 0x3, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r1) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x54, r2, 0x111, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000) (async) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@default, @bcast, 0x2, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100), 0x8) (async) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) (async) 1m32.560901667s ago: executing program 8 (id=1366): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto(r2, 0x0, 0x0, 0x40814, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000380)='bic', 0x56) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet6_tcp_int(r8, 0x6, 0x200000000000002d, &(0x7f0000000200)=0xb1e0, 0x4) dup(r8) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x4000000) add_key(&(0x7f0000002100)='asymmetric\x00', 0x0, &(0x7f0000000000)="0500"/11, 0xb6873941b92cf27a, 0xfffffffffffffffe) 1m32.491202584s ago: executing program 8 (id=1367): set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6) io_uring_setup(0x68b0, &(0x7f0000000480)={0x0, 0xffffffc, 0x1880, 0x2}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) shutdown(r0, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000479000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/184, 0xb8, 0x1, 0x0}, &(0x7f0000000340)=0x40) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000980)={0x80, 0xfd2c, 0x80, 0x3, 0x11dd33e3}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1000}, 0x4) write$nci(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="710505"], 0x61) 1m31.607704965s ago: executing program 8 (id=1373): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa) mount$bpf(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x40, &(0x7f0000000080)={[], [{@seclabel}]}) tkill(0x0, 0x16) syz_open_procfs(0x0, &(0x7f0000002280)='smaps_rollup\x00') write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) r1 = inotify_init() r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2092) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffd}, 0x20) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r4, 0x8b1a, &(0x7f0000000040)) write$FUSE_INIT(r2, &(0x7f00000046c0)={0x50, 0x0, r3, {0x7, 0x9, 0x4, 0x403a1810, 0xfffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) fstat(r1, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0xe0000217) 1m30.678615732s ago: executing program 8 (id=1381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRESDEC, @ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x40081}, 0x40010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r2, 0x320, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 1m29.339320974s ago: executing program 8 (id=1396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r1, &(0x7f0000002480)={0x2020}, 0x2020) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x1381, 0x10, 0x3, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/193, 0xc1}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r3, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) close(r2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x3, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}}, 0x40) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @empty, 0x6}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m29.258990485s ago: executing program 53 (id=1396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r1, &(0x7f0000002480)={0x2020}, 0x2020) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x1381, 0x10, 0x3, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/193, 0xc1}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r3, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) close(r2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x3, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}}, 0x40) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @empty, 0x6}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m24.189848128s ago: executing program 4 (id=1444): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) syncfs(r0) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000080), 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) r2 = accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x10, 0x800) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000180)={r2, 0x2, 0x3, "8c0529c41d8640ddd4a829a7da1c347a6d1a5353d9c5d6c0c50e0265b0e94a9e0c6e01176fedf6b5fe16c83780b31f4ca7d089820793f5b2ae6ff1c0d967f1399c1d9aac9948126a536b071094ec5a976fc21771b979e4807965f039a93166e5fcca7769e40d264412e1d8fea1a3c0109fe91ac004954eb287cda1ec71a1d8aa7e72e409ec1d6b52191afba3d802fb7ef425123946c01e81a9d848f4ee20b70b6725bd612f2498a126abb37d0e2d78626689c3c6ad5667fd9ba6d98e65257621b32caaab361e644e4a08c792de6ed197b1a143caaa19d3773d413f6758cd29c2d385e5fff0910058d71c3e8b"}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000002c0)={0x80, 0x10, '\x00', 0x0, &(0x7f0000000280)=[0x0, 0x0]}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x54002, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000340)={0x0, 0x1, {0x38, 0x33, 0x4, 0x3, 0x5, 0x7ff, 0x0, 0xb3, 0x1}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x800, 0xfff, 0xf, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000003c0)={r4}) getsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000000400), &(0x7f0000000440)=0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0x6e, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'pimreg1\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000840)={@local, 0x0}, &(0x7f0000000880)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000980)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, r5, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4044800) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000a80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a40)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000ac0)={0x10, 0x30, 0xfa00, {&(0x7f0000000a00), 0x3, {0xa, 0x4e22, 0xffff0001, @mcast1, 0x319}, r11}}, 0x38) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000b00), &(0x7f0000000b80)=0x68) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x7c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) read$FUSE(r9, &(0x7f0000000d80)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000002dc0)={0xec, 0x5, 0x1, 0x4, 0x2, 0x2, 0x2, 0xff, 0x4, 0x1, 0x2, 0x9, 0x8, 0xd8}, 0xe) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000002e40), r9) sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000002f00)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x24, r14, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x74}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008044}, 0x40) 1m23.310611808s ago: executing program 4 (id=1454): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02030003101000002cbd7000fbdbdf250200090040000000000894af9c0918bd05000600000000000a000000000000000040ef00000000000000000000000001023b6b5db31039011137f87ee9f275000000000000000200000000000010000007627e5d49e1a184910e07020000000005000500000000000a00001000000000fc01000000000000000000000000000107000000000000408f5e977620e99b5a4c067b020000000000000089c12c163d6ffad370b767f62a0f302ba23ac183c4ed6df0a5c1e175fb10305f507413b989866286520f955387eb6341dc53470f6606d0cdcfcc06905d58c06ecf771fad4182b2b0790932928fc270b47c76100e9025d8882c006b04a03d1ad5ae0cc1a697552972cdb0750ee573470950827b77d96b"], 0x80}, 0x1, 0x7}, 0x0) 1m23.310335188s ago: executing program 4 (id=1455): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaa7aaaaaa3481000600000000000000001611fffe8000000000000000000000000000bb438000000000f6ff00000000000000aa00000e2200169078020300"/80], 0x0) (async) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @private=0xa010100}, 0x2, 0x8, 0x0, 0x3}}, 0x26) (async) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000440)={'das16m1\x00', [0x4e27, 0x5, 0x3, 0x40300000, 0xe7, 0x8, 0x8, 0xa82, 0xff46, 0x100, 0xcf3, 0xb, 0x1db, 0x2, 0x6, 0x101, 0x1, 0x10087, 0x3, 0x0, 0x4, 0x80000001, 0x8, 0x2000007, 0xb, 0x80bfd, 0x3c, 0x5, 0x7fffffff, 0x0, 0xfffffff8]}) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="85ddaa4ca8f0ac5a9868af8b85f5e1a4004e7d84da4c9e10716b7f000000000000000000", @ANYRES16=r3, @ANYBLOB="00032bbd7000ffdbdf250800000014001f00ff01000000000000000000000000000108000c000100000006001b004e210000050013000200000014002000200100000000000000000000000000000c0016000900000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x2004e000}, 0x40001) (rerun: 64) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x6) (async) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) 1m23.220002897s ago: executing program 4 (id=1456): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xc0000484) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8943, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000600)=0xffffffffffffffff) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000000)=0x1) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m23.170866906s ago: executing program 4 (id=1457): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async) fstat(r1, &(0x7f0000000300)) (async) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x8}, 0x4) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000100)) 1m23.100723537s ago: executing program 4 (id=1458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000190095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 1m22.010260864s ago: executing program 9 (id=1474): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m21.938902511s ago: executing program 9 (id=1476): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180008a87ff2b9e40000000000001800000018000000020000000000000001000084040000010000000002"], 0x0, 0x32, 0x0, 0x1}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100005800c00068008"], 0x34}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', r2, 0x2f, 0x10, 0x79, 0x3, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x8, 0x80, 0xffff, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000640)={&(0x7f0000000140), 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x138, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000004}, 0x24020885) (async) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000640)={&(0x7f0000000140), 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x138, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000004}, 0x24020885) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0) (async) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r8, 0x80044dfc, &(0x7f0000001080)) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000100), 0x9, 0x2) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000080)={0x1000, "1ad1d1372bca8cb2172ff6007dc7f3feb8032d63f7901a00", 0x0, 0x36635222cc3d1498}) 1m21.859911688s ago: executing program 9 (id=1478): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, 0x0) unshare(0x62040200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000030000004c1db7a6c0498a"], 0x0, 0x27, 0x0, 0x1, 0x80}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000202030000050000043c00028000000340000400000c0002800500010017000000d4fcefceb9d367199ae6b938ab12dc8b71f898bf2c5371e6e001e200d28e67f9cff12c6b68364870e1e617baecb159b610c4f022aa40b4568856d9c0642d3f28a89ec63ddec3dc1f5ede9b0fad"], 0x70}, 0x1, 0x0, 0x0, 0x4c086}, 0x800c0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r1], 0xfdef) r3 = socket$inet6(0xa, 0x80001, 0xff) fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0xfc, 0x8}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x200, 0x2, 0x1, 0x3, 0x0, 0x0, {0x3}, [@CTA_PROTOINFO={0x1c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x18, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xbf}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7d11339a}]}}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_NAT_DST={0x1c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_LABELS_MASK={0x10, 0x17, [0x2, 0x80, 0x2]}, @CTA_TUPLE_MASTER={0x80, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x180}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x840}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x868}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x385}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4080}, 0x880) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r6, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r6}, @ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e22, @local}, {0x2, 0x4e20, @multicast2}, 0x12, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)='nr0\x00', 0x4, 0x1, 0x7}) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x4, 0x13}]}, 0x24}}, 0x0) bpf$BPF_PROG_DETACH(0x25, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x8, 0x10, 0x0, 0x9, {{0x2e, 0x4, 0x2, 0x23, 0xb8, 0x66, 0x0, 0xe, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1f, 0xf4, [@broadcast, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3a}, @remote]}, @timestamp_addr={0x44, 0x54, 0x41, 0x1, 0x4, [{@broadcast, 0x200044c}, {@broadcast, 0x3}, {@multicast1, 0x3}, {@private=0xa010100, 0x3}, {@multicast1, 0x2}, {@multicast1, 0x5}, {@loopback, 0x9}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote}]}, @timestamp_addr={0x44, 0x14, 0x63, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@empty, 0x1}]}, @ssrr={0x89, 0xf, 0xa6, [@multicast2, @remote, @loopback]}, @timestamp_prespec={0x44, 0xc, 0xbb, 0x3, 0x5, [{@multicast1, 0x9}]}]}}}}}) 1m21.63078082s ago: executing program 9 (id=1483): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa) mount$bpf(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x40, &(0x7f0000000080)={[], [{@seclabel}]}) tkill(0x0, 0x16) syz_open_procfs(0x0, &(0x7f0000002280)='smaps_rollup\x00') write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) r1 = inotify_init() r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2092) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0xe0000217) 1m20.764504611s ago: executing program 9 (id=1498): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vxcan0\x00'}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x4a67e3f2, @mcast2, 0xd}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x0) 1m20.760599214s ago: executing program 5 (id=1500): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x890d}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @local}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) dup(r0) 1m20.659743086s ago: executing program 5 (id=1501): syz_emit_ethernet(0x46, &(0x7f0000000680)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000000000103afffe8000000000000000000000000000aa0000000000000000000000000000000186009078002d06009909000032590000abf6d60b59c2471eea53374d12cf87955bb812f3c9db8b125788b34a1d70cb0b53a611f405ae39cbaa53522a017febe33c6452b2d9c0775c9874d9c2c5a8ba8c4397d8d593a52417a840fbd201ea9743000000"], 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000004380)={0x2020}, 0x2020) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x10000000000003e, 0x2) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6b, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67427ee7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1m20.550109738s ago: executing program 5 (id=1502): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, 0x0) unshare(0x62040200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000030000004c1db7a6c0498a"], 0x0, 0x27, 0x0, 0x1, 0x80}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000202030000050000043c00028000000340000400000c0002800500010017000000d4fcefceb9d367199ae6b938ab12dc8b71f898bf2c5371e6e001e200d28e67f9cff12c6b68364870e1e617baecb159b610c4f022aa40b4568856d9c0642d3f28a89ec63ddec3dc1f5ede9b0fad"], 0x70}, 0x1, 0x0, 0x0, 0x4c086}, 0x800c0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r2], 0xfdef) r4 = socket$inet6(0xa, 0x80001, 0xff) fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0xfc, 0x8}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x200, 0x2, 0x1, 0x3, 0x0, 0x0, {0x3}, [@CTA_PROTOINFO={0x1c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x18, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xbf}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7d11339a}]}}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_NAT_DST={0x1c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_LABELS_MASK={0x10, 0x17, [0x2, 0x80, 0x2]}, @CTA_TUPLE_MASTER={0x80, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x180}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x840}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x868}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x385}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4080}, 0x880) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) r6 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r7, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r7}, @ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e22, @local}, {0x2, 0x4e20, @multicast2}, 0x12, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)='nr0\x00', 0x4, 0x1, 0x7}) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x4, 0x13}]}, 0x24}}, 0x0) bpf$BPF_PROG_DETACH(0x25, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x8, 0x10, 0x0, 0x9, {{0x2e, 0x4, 0x2, 0x23, 0xb8, 0x66, 0x0, 0xe, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1f, 0xf4, [@broadcast, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3a}, @remote]}, @timestamp_addr={0x44, 0x54, 0x41, 0x1, 0x4, [{@broadcast, 0x200044c}, {@broadcast, 0x3}, {@multicast1, 0x3}, {@private=0xa010100, 0x3}, {@multicast1, 0x2}, {@multicast1, 0x5}, {@loopback, 0x9}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote}]}, @timestamp_addr={0x44, 0x14, 0x63, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@empty, 0x1}]}, @ssrr={0x89, 0xf, 0xa6, [@multicast2, @remote, @loopback]}, @timestamp_prespec={0x44, 0xc, 0xbb, 0x3, 0x5, [{@multicast1, 0x9}]}]}}}}}) 1m20.467602229s ago: executing program 9 (id=1503): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async, rerun: 64) close(0x3) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = accept4$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10, 0x80000) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x18, 0x7800, 0x1, 0x3, {{0x7, 0x4, 0x1, 0x0, 0x1c, 0x65, 0x0, 0xe3, 0x29, 0x0, @local, @empty, {[@rr={0x7, 0x7, 0x1f, [@loopback]}, @end]}}}}}) setsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000440)={r9, @loopback, @loopback}, 0xc) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x200000, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x66, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0x0, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m20.395124495s ago: executing program 54 (id=1503): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async, rerun: 64) close(0x3) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = accept4$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10, 0x80000) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x18, 0x7800, 0x1, 0x3, {{0x7, 0x4, 0x1, 0x0, 0x1c, 0x65, 0x0, 0xe3, 0x29, 0x0, @local, @empty, {[@rr={0x7, 0x7, 0x1f, [@loopback]}, @end]}}}}}) setsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000440)={r9, @loopback, @loopback}, 0xc) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x200000, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x66, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0x0, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m20.140048698s ago: executing program 5 (id=1507): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa) mount$bpf(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x40, &(0x7f0000000080)={[], [{@seclabel}]}) tkill(0x0, 0x16) syz_open_procfs(0x0, &(0x7f0000002280)='smaps_rollup\x00') write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) r1 = inotify_init() r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0xe0000217) 1m19.250514003s ago: executing program 5 (id=1515): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x401, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0xc0f85403, &(0x7f00000000c0)) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket(0x2b, 0x5, 0x5) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = socket$key(0xf, 0x3, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/sync_on_suspend', 0x48b82, 0x0) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r8}, {0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x793a677e, 0x6e6bb3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)="26d67fef5f202bdcc70deba5106557fb9d4277dee03a87", 0x17) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r9, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r9, 0x1) recvfrom(r9, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) sendmsg$802154_dgram(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14, &(0x7f0000000380)={&(0x7f0000000880)="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", 0x289}, 0x1, 0x0, 0x0, 0x44014}, 0x240420c4) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000500)={'comedi_test\x00', [0xa, 0x7fe, 0x1, 0x0, 0x0, 0x80000000, 0x8, 0xb, 0xa, 0xfc, 0x4, 0x8, 0xa, 0x4, 0x3, 0x80, 0xdf9, 0x1a449, 0x3, 0x40000007, 0x100, 0x2, 0xf27, 0x6, 0xa, 0x0, 0x5, 0x7, 0x4, 0x10000, 0x8]}) 1m18.807409791s ago: executing program 5 (id=1516): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@private0, @remote, @dev={0xfe, 0x80, '\x00', 0x33}, 0x90, 0x7015, 0x3, 0x400, 0x1, 0x4000002, r1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000ffff2bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000004002238030008000a00", @ANYRES32=r1, @ANYBLOB="1c071280028005000d0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1m18.665214797s ago: executing program 55 (id=1516): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@private0, @remote, @dev={0xfe, 0x80, '\x00', 0x33}, 0x90, 0x7015, 0x3, 0x400, 0x1, 0x4000002, r1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000ffff2bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000004002238030008000a00", @ANYRES32=r1, @ANYBLOB="1c071280028005000d0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1m7.749710642s ago: executing program 56 (id=1458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000190095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 27.388341773s ago: executing program 6 (id=1939): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000cf4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f00003c4000/0x3000)=nil) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x3, &(0x7f0000000080)={0x0, "7ea08680448ae1cd0313388152f6a5dcd36f82e3050721215ed97a9793ecd18a42"}}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000b40)="2bf5cee6", 0x4}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2000000200000000840000000200000100008000fd7fffffc3258e3f20883182a80bd078f8417ad6f665e594b7acd883ffc34ca2f9bb04d17c566a6ea5bd86f420ffaee4e8c42d45678a3248288f37d1a98190abbe4f2028faba8ee2686c96504e90554ca8dba2315f980383289c719a7027b30c7f574dd5ea7193d94bd25f987fcbe008336c2291d68f00", @ANYRES32=0x0], 0x20, 0xc054}, 0x2c0408d0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1000000000000000, 0x7, 0xffffffffffffff8b, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffc}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x34343459, 0x5, 0xb, [{0x6, 0xd37e}, {0xdc5, 0x45}, {0x0, 0x5}, {0x8, 0x1ff}, {0x1000, 0xcb}, {0x5, 0x6}, {0x1, 0x80000001}, {0x8003, 0x8000}], 0x7, 0xa, 0x2, 0x2, 0x3}}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)={0x30, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) ptrace(0x10, r5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ptrace$poke(0x5, r5, &(0x7f0000000080), 0x0) 27.310276357s ago: executing program 6 (id=1940): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x1f, &(0x7f0000000180)=[{&(0x7f0000000540)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791803a5ee4ce23a81b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xffffff7b}], 0x1}, 0x805) socket(0xb, 0x5, 0x0) (async) r3 = socket(0xb, 0x5, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7f8452b536ad5db2784a6945a7a1c790a421ea2a089f6ab00ada4e5605b2e7262aed82ccf355b354ad5e321029cc4c48e609000cf5329cb7f1821ec7"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20040020) (async) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7f8452b536ad5db2784a6945a7a1c790a421ea2a089f6ab00ada4e5605b2e7262aed82ccf355b354ad5e321029cc4c48e609000cf5329cb7f1821ec7"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20040020) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000001c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c5acdbc8334ec472d002008950ffec3a24e90de8b9a47734316769299486bd25d57d06088369c25e6b7aa1a78db61c", @ANYRES16=r0, @ANYBLOB="000125bd70002000000000090000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x12) (async) write$cgroup_pid(r8, &(0x7f00000000c0), 0x12) ioctl$KVM_GET_IRQCHIP(r6, 0xc208ae62, &(0x7f0000000300)={0x0, 0x0, @ioapic={0xffff1000, 0x5c3, 0x7ff, 0x5, 0x0, [{0x12, 0x7f, 0xd, '\x00', 0x5}, {0x8, 0x69, 0x7, '\x00', 0x8}, {0x1, 0x2, 0x6, '\x00', 0x3}, {0x0, 0x8, 0x2, '\x00', 0x7}, {0x9, 0xe, 0x9a, '\x00', 0x3}, {0xb, 0x7, 0x1, '\x00', 0x4}, {0x0, 0xfa, 0x8, '\x00', 0x4}, {0x2a, 0x65, 0x3}, {0x3, 0x3, 0xf4, '\x00', 0x8}, {0x0, 0x2, 0x69, '\x00', 0x6}, {0x2, 0x43, 0x0, '\x00', 0x1}, {0x70, 0x0, 0x7, '\x00', 0x1}, {0xe, 0xdd, 0xf9, '\x00', 0xff}, {0xaf, 0x2, 0x7, '\x00', 0x3}, {0xfe, 0xf9, 0xa3, '\x00', 0x5}, {0x8, 0xb, 0xd, '\x00', 0x2}, {0xb, 0x0, 0xa, '\x00', 0xb}, {0x3d, 0x1, 0x1, '\x00', 0x1}, {0x7, 0x14, 0x2, '\x00', 0x1}, {0x7, 0x4, 0x5, '\x00', 0xc4}, {0x6, 0x8, 0x2, '\x00', 0x7}, {0x7, 0x7, 0x80, '\x00', 0x7}, {0x1, 0xd, 0x40, '\x00', 0x6f}, {0x81, 0x73, 0x7, '\x00', 0xe}]}}) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2008020, &(0x7f0000000280)=ANY=[@ANYBLOB="73697a6508eb52ad09c7107b56d281113d35252c00"]) r9 = socket$nl_generic(0x10, 0x3, 0x10) setitimer(0x2, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r10}, &(0x7f00000000c0), &(0x7f0000000480)='%pB \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r10, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r11}, 0x4) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="20005e49020000007668030001dd12770817fbd5b54934307c95aba3843ad42deb5f91aad767ecb4b49ea04dd1cf67660379877b9bb414d82f2982ed2dcb4078cfe0f4774b3f07d338ec5acd1e7c5a607056000000000000002760a447e7eef3c5d1c01ac30fdce448bc53538333f348", @ANYRESOCT, @ANYBLOB="0c009900050000007b0000000800260080090000"], 0x30}}, 0x20000000) 27.140435429s ago: executing program 6 (id=1941): r0 = getuid() lchown(&(0x7f0000000000)='./file0\x00', r0, 0xffffffffffffffff) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, r0, &(0x7f0000000080)={0x4, 0x5, 0x6, 0x2c0, 0x80, 0x8, 0x2, 0x7, 0x10000}) setreuid(r0, r0) ioprio_set$uid(0x0, r0, 0x6000) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'system.', '/dev/loop'}, &(0x7f0000000180)='/dev/loop', 0x9, 0x5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) getresuid(&(0x7f0000002240)=0x0, &(0x7f0000002280), &(0x7f00000022c0)) lstat(&(0x7f0000002300)='./file0\x00', &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000023c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = getgid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004400)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004440)={0x0, 0x0, 0x0}, &(0x7f0000004480)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000004580)={0x340, 0x0, r3, [{{0x0, 0x0, 0x7, 0x2, 0x7, 0x0, {0x3, 0x6, 0x0, 0x2, 0x101, 0x3, 0x1, 0xffffff67, 0x6, 0x6000, 0x6, r4, r5, 0x2, 0x8}}, {0x1, 0x2, 0x9, 0x400, '/dev/loop'}}, {{0x0, 0x0, 0x8000, 0x7, 0x1, 0x5, {0x4, 0x4, 0x101, 0x101, 0x9, 0xd61, 0x7, 0x8, 0x4, 0x8000, 0x8, r0, r6, 0x1000, 0x8c}}, {0x3, 0xe723, 0x7, 0x7, 'system.'}}, {{0x5, 0x3, 0x8, 0xf5, 0x1, 0x2, {0x2, 0x2, 0x4, 0x7, 0xfb6, 0x6e6, 0x7, 0xffffff81, 0x9, 0xa000, 0x9, r0, r7, 0xff, 0x401}}, {0x1, 0x5, 0x1, 0x8, '^'}}, {{0x1, 0x2, 0x10000, 0x6, 0x9, 0x67, {0x1, 0x9, 0x6, 0x10000, 0x9, 0x6, 0x2, 0x8, 0x4, 0x8000, 0x7, r8, r9, 0x6, 0x3}}, {0x6, 0x0, 0x5, 0x80, '+!^\x81\xd0'}}, {{0x2, 0x1, 0x2, 0xf1, 0x1, 0x8, {0x1, 0x3, 0x4, 0xe00, 0x1, 0x81, 0x8, 0x100, 0x1, 0x4000, 0x8, r0, r10, 0x10000, 0x8}}, {0x0, 0x1, 0x9, 0x3, '/dev/loop'}}]}, 0x340) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000048c0)) recvmmsg$unix(r1, &(0x7f0000008200)=[{{&(0x7f0000004940)=@abs, 0x6e, &(0x7f0000004a40)=[{&(0x7f00000049c0)=""/111, 0x6f}], 0x1}}, {{&(0x7f0000004a80)=@abs, 0x6e, &(0x7f0000005cc0)=[{&(0x7f0000004b00)=""/28, 0x1c}, {&(0x7f0000004b40)=""/31, 0x1f}, {&(0x7f0000004b80)=""/29, 0x1d}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)}, {&(0x7f0000005c00)=""/168, 0xa8}], 0x6}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005ec0)=[{&(0x7f0000005dc0)=""/223, 0xdf}], 0x1, &(0x7f0000005f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000006000)=@abs, 0x6e, &(0x7f0000006340)=[{&(0x7f0000006080)=""/151, 0x97}, {&(0x7f0000006140)=""/109, 0x6d}, {&(0x7f00000061c0)=""/230, 0xe6}, {&(0x7f00000062c0)=""/98, 0x62}], 0x4, &(0x7f0000006380)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000063c0), 0x6e, &(0x7f0000006880)=[{&(0x7f0000006440)=""/160, 0xa0}, {&(0x7f0000006500)=""/173, 0xad}, {&(0x7f00000065c0)=""/155, 0x9b}, {&(0x7f0000006680)=""/221, 0xdd}, {&(0x7f0000006780)=""/202, 0xca}], 0x5, &(0x7f0000006900)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f00000069c0), 0x6e, &(0x7f0000007ec0)=[{&(0x7f0000006a40)=""/207, 0xcf}, {&(0x7f0000006b40)=""/57, 0x39}, {&(0x7f0000006b80)=""/252, 0xfc}, {&(0x7f0000006c80)=""/4096, 0x1000}, {&(0x7f0000007c80)=""/246, 0xf6}, {&(0x7f0000007d80)=""/31, 0x1f}, {&(0x7f0000007dc0)=""/137, 0x89}, {&(0x7f0000007e80)=""/48, 0x30}], 0x8}}, {{&(0x7f0000007f40), 0x6e, &(0x7f0000008140)=[{&(0x7f0000007fc0)=""/28, 0x1c}, {&(0x7f0000008000)=""/198, 0xc6}, {&(0x7f0000008100)=""/25, 0x19}], 0x3, &(0x7f0000008180)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x68}}], 0x7, 0x10040, &(0x7f00000083c0)={0x77359400}) read$FUSE(r15, &(0x7f0000008400)={0x2020}, 0x2020) syz_emit_vhci(&(0x7f000000a440)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f000000a480)=@HCI_VENDOR_PKT, 0x2) r23 = socket$netlink(0x10, 0x3, 0xb) quotactl_fd$Q_QUOTAON(r23, 0xffffffff80000202, r18, &(0x7f000000a4c0)='./file0\x00') r24 = bpf$TOKEN_CREATE(0x24, &(0x7f000000a500)={0x0, r17}, 0x8) quotactl_fd$Q_SETQUOTA(r24, 0x80001801, r18, &(0x7f000000a540)={0x3, 0x5b2a, 0x0, 0x6, 0x6, 0x7fffffffffffffff, 0x2, 0x7fffffffffffffff}) setsockopt$inet6_int(r12, 0x29, 0xc8, &(0x7f000000a5c0), 0x4) setsockopt$IP_VS_SO_SET_ZERO(r17, 0x0, 0x48f, &(0x7f000000a600)={0x87, @broadcast, 0x4e20, 0x2, 'fo\x00', 0x24, 0xfffffffd, 0x7d}, 0x2c) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f000000a640)=@nullb, r22, &(0x7f000000a680)='./file0\x00') ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f000000a6c0)={{r1}, "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"}) sendmsg$unix(0xffffffffffffffff, &(0x7f000000ba40)={&(0x7f000000b700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000b900)=[{&(0x7f000000b780)="f2adc06a7457f2d4876c581e005fcf5488d2860b7de2139954cebcea63edb24ae3df9f6d2786ddd322a623cbff2036965c8a7cccd875da9d82edd8eba2c5df6bd57d62ef8bef2fb55913bd784c105c7ec7b89fa3862133215f5547203363171304da76a377e2773e205fa8c2e28a3e5cde36c0a70bc53bafc71081b4d3e005b8ccba9a41e56dc1b7cd06ab3959dabd05656291bb50ccf33898f9a440f03bb0fe86a8576c91954170dee7a5f0b213d70f8635550f230c27c723dbe9b46bd667b1322dc9f59a40dcf063a6bae7a58780a06c623112c9d340f6edd537b9f69c8a", 0xdf}, {&(0x7f000000b880)="dc20a4682d36bfd0dd5d1dee3af2bca859897c6b61704c8f5af38eaf8b4fe889410d01547edc3c8a55a8dd7193648564f8503b45673ca9d2326482c72cf35e984a3361e979f34b12674c216fded23dc62c3fc5296d2a1db805", 0x59}], 0x2, &(0x7f000000b9c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r20, r19]}}, @rights={{0x28, 0x1, 0x1, [r11, 0xffffffffffffffff, r16, r21, r13, r14]}}], 0x48, 0x80}, 0x8890) 27.139657535s ago: executing program 6 (id=1942): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, 0x8001, 0xfffd, 0x35, 0x9, 0x20, 0xf, 0x7}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='vcan0\x00', 0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100), 0x4) syz_io_uring_setup(0x3e24, &(0x7f0000000140)={0x0, 0x3ff0, 0x1, 0x3, 0x341}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_io_uring_setup(0x148, &(0x7f0000000240)={0x0, 0x84fc, 0x2000, 0x91126857, 0x2d8}, &(0x7f00000002c0), &(0x7f0000000300)=0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000340), 0x100, 0x800) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_MSG_RING={0x28, 0xd, 0x0, r3, 0x0, &(0x7f0000000380)="a647dfbcfa46fd156c6aa43714fe73f55c050f08df743fd4deab5f85f435724b44e2acf78f6ce0e0d4ab45428026e8912782fbff4733c5dd8b3665aecbae5f19d3e9995248d07d66b65ab462cbb90343310f0d17462252bf48e5eaa65c34173b69233a61f6f5885d2bb6b548c8ee945db339a348d454b0c57aa7727dd30829a7613a04a3fd6a7f7607b1c08d79f40483dac267659d7f3dc6bd43b1e3c1775b6f452604a004dbb76a6061258805db3dddfdeff56a2d4620c93f8c5f302f637e0bc85893c3958f327aa0759271363aeb5ad4751caf4a58b773b9b38b88224b751035988e436b", 0xe5, 0x3, 0x1}) syz_io_uring_setup(0x70d1, &(0x7f00000004c0)={0x0, 0x264b, 0x0, 0x3, 0x170, 0x0, r3}, &(0x7f0000000540)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x110, &(0x7f00000005c0)=0x56ec, 0x0, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r3, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bind$packet(r3, &(0x7f00000006c0)={0x11, 0xf6, r5, 0x1, 0xea, 0x6, @multicast}, 0x14) r6 = syz_io_uring_setup(0x7cdd, &(0x7f0000000700)={0x0, 0x4b22, 0x40, 0x0, 0x376, 0x0, r3}, &(0x7f0000000780), &(0x7f00000007c0)) io_uring_register$IORING_REGISTER_PROBE(r6, 0x8, &(0x7f0000000800)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x11) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x24081, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000940)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xad, 0x5, 0x3, 0x8, 0x1, 0x1, "efe5837252a1ae24202cf2d78a5066e62f63f408c2a0f12674fdcf353d1670dd35f92dd94bb576d8def9e144b3d857a97a78f8f4d47bd10ea1116575e8ea38445431cdf6c62c85e2c3c2928e04d8b419bd2cce33ae13a0d8479f74e12deea59a96ef6ee3a6e451e915ca524b5538ce3d872b8308638554f1ad54602113e71d2b74c6d727b24f7849d517ca94a305691e81ce73809b20cbc93f2b59e375efb1a9577b13ae790c54eabcfda4796b"}}, 0x1c5) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000b40)=@arm64) ioctl$sock_netdev_private(r3, 0x89f9, &(0x7f0000000b80)="bc2b4ce87cb8417350b9a3f4b548666a249252eca51cb5a97925d36cfb70cd74571ab83c1795d2e9ead517e8e88935903477d87c90672daad978a635f4c1c14f5091a48e4e7313a1c9dcc5165fc673138bf885ea098d02afdd8c034f6c341833202b9388295199b86c8be2329dc46d050a145f510c5b1134ca25203105e5047a855bd17d9962cc72d9f03710adcda2cf2306ebfc201f6a81e12183425a386f63fb69727c3afa5f172fa9e6b05ff907f745b009bb39b57e580c") r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x11) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r9, 0x6628) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c40), r3) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000c80)={0x41e3, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e22, @empty}}}, 0x108) r10 = fcntl$getown(r0, 0x9) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000dc0)=r10) recvmmsg(r3, &(0x7f0000009080)=[{{&(0x7f0000000e00)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000e80)=""/248, 0xf8}, {&(0x7f0000000f80)=""/8, 0x8}, {&(0x7f0000000fc0)=""/73, 0x49}, {&(0x7f0000001040)=""/64, 0x40}, {&(0x7f0000001080)=""/83, 0x53}, {&(0x7f0000001100)=""/204, 0xcc}, {&(0x7f0000001200)=""/159, 0x9f}], 0x7, &(0x7f0000001340)=""/255, 0xff}, 0x7}, {{&(0x7f0000001440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000025c0)=[{&(0x7f00000014c0)=""/29, 0x1d}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/179, 0xb3}], 0x3}, 0x8001}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002600)=""/39, 0x27}, {&(0x7f0000002640)=""/21, 0x15}], 0x2, &(0x7f00000026c0)=""/56, 0x38}, 0xc}, {{&(0x7f0000002700)=@qipcrtr, 0x80, &(0x7f0000005c00)=[{&(0x7f0000002780)=""/5, 0x5}, {&(0x7f00000027c0)=""/66, 0x42}, {&(0x7f0000002840)=""/123, 0x7b}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000049c0)=""/131, 0x83}, {&(0x7f0000004a80)=""/212, 0xd4}, {&(0x7f0000004b80)=""/94, 0x5e}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0xa}, 0x3}, {{&(0x7f0000005cc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000006100)=[{&(0x7f0000005d40)=""/174, 0xae}, {&(0x7f0000005e00)=""/144, 0x90}, {&(0x7f0000005ec0)=""/192, 0xc0}, {&(0x7f0000005f80)=""/41, 0x29}, {&(0x7f0000005fc0)=""/17, 0x11}, {&(0x7f0000006000)=""/248, 0xf8}], 0x6, &(0x7f0000006180)=""/181, 0xb5}, 0x8}, {{&(0x7f0000006240)=@tipc=@id, 0x80, &(0x7f0000007380)=[{&(0x7f00000062c0)=""/4096, 0x1000}, {&(0x7f00000072c0)=""/147, 0x93}], 0x2}, 0x1}, {{&(0x7f00000073c0)=@isdn, 0x80, &(0x7f00000074c0)=[{&(0x7f0000007440)=""/86, 0x56}], 0x1, &(0x7f0000007500)=""/64, 0x40}, 0x3}, {{&(0x7f0000007540)=@ieee802154, 0x80, &(0x7f0000007a00)=[{&(0x7f00000075c0)=""/215, 0xd7}, {&(0x7f00000076c0)=""/132, 0x84}, {&(0x7f0000007780)=""/29, 0x1d}, {&(0x7f00000077c0)=""/245, 0xf5}, {&(0x7f00000078c0)=""/112, 0x70}, {&(0x7f0000007940)=""/180, 0xb4}], 0x6, &(0x7f0000007a80)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000008a80)=@generic, 0x80, &(0x7f0000008f00)=[{&(0x7f0000008b00)=""/228, 0xe4}, {&(0x7f0000008c00)=""/143, 0x8f}, {&(0x7f0000008cc0)=""/166, 0xa6}, {&(0x7f0000008d80)=""/203, 0xcb}, {&(0x7f0000008e80)=""/115, 0x73}], 0x5, &(0x7f0000008f80)=""/238, 0xee}, 0x3aa}], 0x9, 0x0, &(0x7f00000092c0)={0x77359400}) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) writev(r3, &(0x7f000000a500)=[{&(0x7f0000009300)="0a86de44d8b6c0617099de7635744fba8cad5eb3bf4453d5e6789b95280aefe5d1088b3d33bc3fef356801355a9b7d414fe736b2622f54f5f8aca05dae0ac777c88838cd37cb728413b6fa9ed5806079c91b3a46348476ce043a0df50ec3b18868a3506d5d71bdf7381ac3500ac1221759d99629a55e7631e3688eb1825ba58271ae72d58f9cbec575a70cecfcde35bdbc3468f64d4fc4ff6343e017e507e80783dfa07ce9b6e8a86dc25392f13e360784629486b8ac0c", 0xb7}, {&(0x7f00000093c0)="bfcf88e2576e0e825d4add6a", 0xc}, {&(0x7f0000009400)="f31ff0c358653012b52da4723c6f9bd793212e898d216ea913f54a9d55823b3f18ca60627ba7e4421546dd11e11c0670c5b8d4c5128c3750f9c30d5afd73755a861878a5d881378b9382edb6dfcbdc1e2792477f788ad18b483ba6d9a8eec02ad47e3fe569eb4f3222320da0cef50b3940", 0x71}, {&(0x7f0000009480)="ced8dfd0dde2720be3e06f530ecce742db5b912ac07871d557c8bba9e6f6b9a529a3e9452befd97d54c17644c7f61b75262063f9ed9bf5177abc3b23568c77441680d5d633bf36156dac49599ae0a4b738d4dd289a57efd4000eaae24e662d860294c6ff7d7ee3df19a4218055023794553b6c2c5db3e8e7473596e0dc9a77f09b92048a4eb6e6a1d95baa1dd65d158f05d98084139460a6d66db4be26de5058de4575921e075d49071ed15a6a36cede21ae05a5b3807138e6ab15e5ec59a99d6308c3c8be11b93547cf1cc4b19d9bc84aa1df55016fb928bb6d95220efcb77b8781be7c29e5bd2981c856e78c87e32c9b691961b1ef86eba40a033479ba752e6b83f4d00c5d483cd11b0e55df58099e45e6a482daa20367daf20e6998447dc7539266170805512895b93855885d2c2ef4e32f96a4deaf1ed129a8eedf5c1e26650bf26b852bceb1576af2a3248ce613c258d0bd0de622656963a4f6faf78fae7eaf9c6660678eba46842160dded3cade67b5ee23ac4b36856e7a95b8d4b10fb46dea3107dcb1059a53f6db0a32da53913b3ecdd21775b45180b3f13ac87e07134884a2ef6e823fd659be25bcb13db2e8e9c01aafa1454ac0d0782153a821bd5c72931e4452f6a27218f19d7387e4be8d36a8c265c45ca6542fc14298381257e1fb8b061b24c4d230e5ede8842ffbf0fe0b89474aacd58f9981da0e909bb11704e09122c56fc8ddb6ee04a1bffda1df0d64fc50a16ea6f2a58d78cd30eb31d1b2a7c369d45e7fd01da504c958111e956498a1df999f6bb30f372d85fe8d0dda4b8c66f78d24ab7570c92547d6d1f428711b43d149e92cb9da762a43202d867b5eba129ad9f7ff10645d9b6b2c3e1396a090fd95ddfd23de682022e085796926651d0c189d11441072acc2b7052a9c0361ca9d891ab72e38b16e163c43c1b72bcbae889209d578cc9f16165d9f4503e184512b0e585e5bd240b0f7e31c2f899ddc3549c7f29ddf36d512e87d8187216711134568f982d17b25cb76ff572af6fe67bd7f5dadc43e7a4c1ec1aea8799102b589f3cc3f513f22390c21d056792589e55564ab27b071660186a770b1fd79a321e53aec6acc835748783c53675a87780f89a18841bd020b6f9759c3e70aa7b68bc0ad2370dff10b86e6f735b91398c71d7070747de571f3df9495964e7cbfc780dd127216859365c620fc6ce37e24ead0b06854a72e6cf9cb9b5b8838b0b76ac9b8f240350a3e6ccf854434ff740a98cfc6f27e16231fbd39fba57b76683c487498067656780321331d2bb0bcd70cf25420e145dbc7a243af608848850222e34158aa69606bfbcf62c95585fd083febdc8e279114d14a003a82d705b1effa680592136d643dc454a55fa8a1524286d5d50b544d35ba887bcf2ca67122218e9829967b516523888ffaf0000c672680a45b3a2ce33ac191058bf731ee91842c0e63a570144c7cfb424679b7fb28d3bad615b5038f4f517ef5603a05bfdb5c0904aeb85c074c9e63662b30d9e1fbf96299b206d6c84835a221e174df8b55a51486d2a6c7bb2143651b75a9933631ff83c4b8220fd7e1df534a43cac2bc5a854d224fdd0109c35e21028744589c636a827a129d12d6aea4ea5c11d45e9c560e196f2171a68c0d71e62ef45771a3f8743287d4db9f93ab01fd83fa58550282a0ff8e0da8023b2f08717cb9c9a3b8760b8d719d63e384616f8c602cfe3481b4109ed07cda13f58e48afb2305d736c8f2b165f7511bab08eb85e36f16806bdcbee55f89062846f0453f349e9d558fa32e94d4a36b2387526dde02796115d9f417b181505764885419693d1c683da5e1e1b120833bd6d72a22bb3d0553ee739724a4acbf96b2e0d0220dc94b0e7296cead24a60b21e05f9db8b08af74fcdf826b9cfc1813b5d306198767eb3e135525f47b2ef9ec4741ef6ba2b966a21d2a5523bb92a5b9e31e6aa465269bc2801e3a06e1fd5cbbe15542c6c5598099d1083fa71b210e3acfb083a69fb06133190a07bfeed536efa1f624718f75b5b399fdc010a84bc364e75da6193e67b3a4f6c53870b78bd03e660cb9699bf24d081541dc693d76572a9fb4189e9fcc4be5712323f5ceb96ea77f483a289df5e9bdd5d8e9d4cb738af78b88013891e991542d18c384d8d0aa2981b85026a69792aa622dddfc65cc9ea2e11ba8e122ad42e0eb974aa77156e4933d076d569b96de64ad899c4e088327aa572ad1b0768059200de0398c09201fd74da853c79a9c9bb167585b9e696a74073d7f6b2d640b03af84f946b8ec41474240991dd7ba8ce3d27ff1e6aa2079929f5c5b9e5c66f50fe05a184328ee81b86acd625dcc136a86c5d84ff9961ff6ac0507f8a1e12a3b84c173c3042909a4d315118808c948c1a1e612945fbcc475a7dda75d2777e69aeb6f56c03fcf947cf3e564cf4f757c88bb7e77a32fcdcde9dbad4f6fc0078a9e798160a1b546fba798e44d6662cd78ebee10440d79220f2ddae04dfb55bc0ebcea412f89c16e07434866872f23132615d3e9a92fab648466ee522bbce758a823516c5e1aa3e989d75a0286757d086d82da41157d5b6b4641d3ceb72295a6064dc73bd81a18b75467f8395507a98a0ebd81b136bbbc17d201b0725bbcbcb7bad486711a519b34dba391264fb296490d8b9114fd144ab1c0f146cd8ac5eaa46b9c5367bcce0001cc38bd400ccefdca00474a4ec7938a9d63ba8b1398da747e98b82b6dff452acbd080b8ca0b01c42cf9d9a08191062e912511c898f827a1802133ffb54b3898caebce51ef1f96c8da315d4d0899bbe3eb624a26e6f3df73b49c084b4b9cb1ba01cb1a95bd02922695611b385a899048d06809e258a4c10cf28dea2ef71a5bcd57f7361d7ce6627cd521c470844eff9a79a9caa83fc42d38518ae9cacabee1a052f054a5445ee526735af53b66be2a83d15fd101e9b6af041cc4b9784b6449631a14a4e95306e15b33abeffbad04c1eed43aef5f83c166303b639001beda0a4084f87c2b423abbe3534f5d8ee8aef85df0f17a468241e893b8e6506c8cac47cbbc18b59473d4e81c763b49f100f1490c1884e3d3046ade8f744a6977582f011f93bd8381c8cbec920f1b347982c64ad384265487e639762f3837fd89258ad7bf1ad26c64092205ff5c1d15066fa731e2c9447e5dbe4abde33fcf313d9710ecd4d27d1ab4f44951ab971f22de239b8647d9f8671f9da5a48350c0f5dcbc1d9dc952854b1ef3d0bd9a55c42fd0318b7a0881cdaf03b4da1dea53701d33d7447ebf2ee6adb01d0f03a2a4da4658327ddeaf7e3ccc01e4b41eecb111d4769c1873717f88f8c54f50196c7d08b2d9bc48dd6b7247ff95375e6cad59e096212b26d62ff6178355e6a2f47966513789aaee756ed4ebe6de56ff12048b8690c9dd0342d1e7d85b7cdcf7cee0f13bc09181fa07a301fdfc744ba67a9e12b40275d91b0a0060708d2d381c14588e21cc1abe03db28e1957df5dd8578945ce3a1b583e4617fbf37c77ac798cfbf2cb3c9127649c589701c2939fecf0caa6af8608cb33db733aef1f1ce6a8d4877f3771980052aab7a488cf83e4dcecdd0445f3a90cd68c652285aa1312a9f79d17d2a71777db24c2eee644dd4071b823dcb89c3d51b7a2434f4401f9e234ba2e81bb0bd15cd83385a11791d84a3ec82b83ebd2591f4f437d07a88d2890486eab45dcc4a2f003c6153e9796b417a105d1bea6727a9f408162562b8556c8ba9cb41cf2e611a601ab14fd9c0cfb31a13eb55f4401c02388c8ec86f29812b2d3c25856f80b2078807872431b8ea35337bfbdbb5baa40bf5cb6d11c7b6d74f8b3cf1ae49f2afaf8aaaf9de3b4fd010ee9e5c5fcc2e237ae4b85460116db0b0308968dbe3ba628a647c426271297e49ccb03c88a58d2055bece15719225a0ad1ee6eb82e5a4e9717e0c39cfc892d50639390cbcb25cee61af064a3f27cc0ec10a3a60ccfb78c8cd67183c4a887ce2976a90bea2097ab3a6f2456167015ad857060d1aee5ad090338c4d5ced7972adddd8d13ed2a74cee5436aa680ac73c2e01de058819d7618b492d8b3c01d8d1a8603eb90a3b7543a8f64c9df5b3d924986f2227aab2e01a3769356e1097f301cc1a4699842ec1dc52485eeed9e0367770dcc21db680303aa85e80173bfd052b3b75ef4c28d6a733f74e1ffb7906ad2a8e39854ce878d468846054d336df59b74c1e9de7da5b8ed023cad650cafff5be95b6b3e317b2b103b7ce596a27295bf84c17bf429df45284743f9db75e2a4acca64b418b913dc4661eb25fb671177f9ea9ec4389750e36e82ac28c780c9a3055b01d225d919ade8e77ac758a2f3bc495c1dc4682cebda09d3e4ca1c887eb724ff7ba303a5feb65d28d29e0b7dee1732a84c71612b775d6cb5d43614380fbef7b31085b11593259b0cce38ed214a087cf7a7bc09bd5cc69020258a1e3dd645c8a02c30fa88a8765e6cb16b888cce42817089f8ab465763ca3ff42d3599304e812afef55e9719fdf8ef21fcb9748fb6943fc24c944d5f53d55dc9d42b7f7a685e7b43ffcc9f076a2e153078a714f5270187c0849e268d2d00c0278686b089997bf23c7b869299979ffea93e597a0a4b0c571bfda9f390bf2cd05f05ae8328652ed236953d4d7fd75148c0c4724db9fe32501d9c73d6756e87862147dbcd838ce56de25194527bf00e697a56d865637ea1066aeab7ead5dc8f2096c54c9ea40a98555f265bf6ea278032792c8e42b0914f099b46a6cb2f56886284bf7f639711713d793ae01959d1ac03cdb5fab03499ec4817a4157ce1b8f48127be9d9114c6c868074a63168c14531cf6960ee3e55e13f117d53be5a83f2198dbd5c19efce3ef06e0eac9592b046dce78b9030471c7795e078c094cc28ecbdd328ba239210379755da2a516ead66c8aefa288ec9c0882e57e2e9070575ca4be7af95703528870877ae2ff49548ed176547d678f2fbab53c96a613c87fb75cc384972cf87e71c219233dd812f69469b1b960796e537b19e5312b57cab7f217c52abf7b02b88ca716e8726afb64bbf7cd8c6e7b49c31f01a657c1cf390b69f24a17e0638765bf67fd72a81b3215e5170c062c67bf33648e5ad0534f3b3b126fc42b55a271e65c5bb4bdb300b9a876b87388802691da90fb1001b2d130fcc854582b9535c3543af4ed1a3c7d2e2ac9a06e487f60904e5e22e62d70774ef095e837e7121f8c9b0a5d8e951a7b3a9b0567f437e753afb62f8b3b78411640b698ba42048cf112c3697b89e3b9a29c725d9b9a1620aded429dfa2032675f02dd7bf691140edf5e3165a9ae1579b738e6b5c8552902862545d4f8fa80252956ad1fcec5a4891798deb0e5b432f53d2cc577a67ebf3d0bbbae12b18466b88a3866cbf13386e4e0f4d6b2f65de5fecb5f34e608473dd2d4712aba14679b8798f729647c1e54121f05e23e113e21dd5368d1aa689c89705a6dd2711783fa1c9bacf242b67712b5af90256137c5ef0da0cf138d5b2f899ea25b7019ac7851318975282ffddabb634daa1dbffddd6296044d200b32ceaf04fa9941f5405fd8d227520abaea3634951e049ae7b3820c8866617671c762647655cf1deb13f8d53be6aa912468ecb3b74aeac0276c0575595b6f12639b87f7fe3c25acafb1932ef936835566dfc258b3b2c2b30a05026b957deb173097ec2822f1c5bc4557c084515e5f77084ea42beba1830934dbd9e5497f555b1aed467ea78e895f570eed413b42ffbb9154d80a62772cbe28880f260b", 0x1000}, {&(0x7f000000a480)="d355e1d50ed07cfd5897748b756e", 0xe}, {&(0x7f000000a4c0)}], 0x6) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f000000a580)={0x200, 0x8002, 0x2, 0x7, 0x0}, &(0x7f000000a5c0)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f000000a600)={r13}, 0x8) 27.019009837s ago: executing program 6 (id=1943): r0 = socket$unix(0x1, 0x5, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x40000043, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x40187013, &(0x7f0000000040)={0x1, 0x0, {0x18, 0xfffffffb, 0xffffffff, 0x12, 0x5, 0xfffffffc}}) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0xc0049364, &(0x7f0000000180)) fstatfs(0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {}, {0x5, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x81, 0x8, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x20040054) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r7, 0x890c, &(0x7f00000004c0)={0x0, @bcast, @bpq0, 0xff, 'syz1\x00', @bcast, 0xeb1, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r8 = syz_open_procfs(0x0, &(0x7f0000002180)='net/dev\x00') openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x400002, 0x0) preadv(r8, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r10, r11, 0x100501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 25.979485101s ago: executing program 6 (id=1957): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) memfd_secret(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000a9b000/0x4000)=nil, 0x4000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x5}) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x96) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0x941d, 0x1000, 0x0, 0x359, 0x0, r1}, &(0x7f0000000080), &(0x7f0000ff4000)) close_range(r0, r0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x0, 0x2, 0x4, 0x24881, 0xffffffffffffffff, 0xee, '\x00', 0x0, r2, 0x1, 0x0, 0x1}, 0x50) r4 = userfaultfd(0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000003c0)={&(0x7f0000a92000/0x12000)=nil, &(0x7f0000478000/0x4000)=nil, 0x12000}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8000, 0x0, r3, 0xdacc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) 11.01482037s ago: executing program 57 (id=1957): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) memfd_secret(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000a9b000/0x4000)=nil, 0x4000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x5}) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x96) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0x941d, 0x1000, 0x0, 0x359, 0x0, r1}, &(0x7f0000000080), &(0x7f0000ff4000)) close_range(r0, r0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x0, 0x2, 0x4, 0x24881, 0xffffffffffffffff, 0xee, '\x00', 0x0, r2, 0x1, 0x0, 0x1}, 0x50) r4 = userfaultfd(0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000003c0)={&(0x7f0000a92000/0x12000)=nil, &(0x7f0000478000/0x4000)=nil, 0x12000}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8000, 0x0, r3, 0xdacc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) 3.039641788s ago: executing program 3 (id=2276): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000039c0)={0x1, &(0x7f0000003980)=[{0x34, 0x6, 0xe, 0x4}]}) r0 = gettid() (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f000000000000020003"], 0x78) (async, rerun: 64) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) (async, rerun: 64) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000880), 0x280, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000ec0)={0xffffffffffffffff, 0x2, {0x0, 0x0, 0x0, 0x6540000000, 0xfffffffffffffff5, 0x0, 0x2, 0x11, 0xc, "41d0bc8a658635a8284faa9680ffd8ae1019e683c9ce1688599c2ff36e163e643155b04f99c6db5bd97b4f1bea35f631cef2ac8b956accb93fee1f23d23b9b13", "a5a73aead9c30def9d7a4f89f914b4db341dcea6d8b4891ff5d146d20c0c01e52888e45349ab782e88e7058a9b58c0dfc9a9a292430cbafef2b4fb3b37edcbb7", "cfa2d9dcf3ad287122b02c9325d08d6d0064568342802135bf2c187fa989e6d9", [0xe44, 0x3d2b]}}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000000c0)='fd', 0x0, r4) (async, rerun: 64) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000000)='fd', 0x0, r4) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r4}) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800) (rerun: 64) 2.980122109s ago: executing program 3 (id=2278): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd, 0x0, 0x0, 0x1, 0x1}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd, 0x0, 0x0, 0x1, 0x1}) r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r4, 0x30b}, 0x14}}, 0x4000040) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) open(&(0x7f0000000280)='.\x00', 0x0, 0xd6) (async) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0xd6) fcntl$notify(r5, 0x402, 0x8000003d) close_range(r5, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.850146108s ago: executing program 3 (id=2281): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000a80)=0x1, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = mq_open(&(0x7f0000000180)=',\xa0&^]-\x00', 0x43, 0x138, &(0x7f00000001c0)={0xfffffffffffffff9, 0x9, 0x9, 0x2}) mq_getsetattr(r4, &(0x7f0000000200)={0x0, 0xd38, 0x2, 0x8000}, &(0x7f0000000240)) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000029000b0027bd7000004000000201"], 0x1c}}, 0x4040080) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, r5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfffe, 0x4}, 0x6) r6 = fsmount(r0, 0x0, 0x1) fchdir(r6) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 2.438897671s ago: executing program 3 (id=2289): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000000000a000800060001003a00000008000a00", @ANYRES32=r0], 0x24}}, 0x8010) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000000000a000800060001003a00000008000a00", @ANYRES32=r0], 0x24}}, 0x8010) (async) 2.355422934s ago: executing program 3 (id=2291): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) io_setup(0x43, &(0x7f0000000000)=0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r0, 0x0}, 0x0]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f0000000b80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r6, r6, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@cgroup=r5, r6, 0x2f, 0x18, 0x4}, 0x20) ptrace$pokeuser(0x6, r4, 0x2, 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) 2.270449306s ago: executing program 1 (id=2293): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x38, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0x409e, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) lsm_list_modules(&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=0x20, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000001c0)=0x6316, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r1, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e", 0x5f, 0x4008044, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) getsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000200), &(0x7f00000002c0)=0x4) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d00}]}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22528, 0x800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}}, 0x800) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xf, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x124, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000080)) 2.030009697s ago: executing program 3 (id=2294): r0 = syz_open_dev$video(&(0x7f0000000000), 0xfffffffffffffe01, 0x100) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'veth0_to_bridge\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "bf154d1e5eb690f2e1da6e80d4eeeb4ee3625db00a9c02f989ce7cd426e12d7a", "150597ff1669ddf075c831db91c1b35b2020b3a20900e0e15914761bb796d5b4", "51d69efb5efa9a135efe7e26043c85de2873302d21f60d591e5d1960b2be66a4", "0a0d35b8f4de55fdcb7c85289cad39e5997b53d23747079e64d05cf4a7df8f7c", "f7703fd2fd3c7c25801ed6461ae5509e8a5f13e2cba7946ad5548de31a79b706", "1442633b91312f79f3e54744", 0xe, 0x4, 0x9, 0x5, 0x2}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_virt_wifi\x00', 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000000240)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = epoll_create1(0x0) r4 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000300)=0xb4) r5 = socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RNDCLEARPOOL(r6, 0x5206, &(0x7f0000000380)=0x5) r8 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r8, &(0x7f0000000580)={0x14, &(0x7f0000000400)={0x40, 0x21, 0x102, {0x102, 0xc, "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"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}}, &(0x7f0000000840)={0x34, &(0x7f00000005c0)={0x40, 0x17, 0xff, "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"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000780)={0xc0, 0xa1, 0x4, 0x200}, &(0x7f00000007c0)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000000800)={0xc0, 0xa2, 0x2f, "619fc817fa5d5a15a72827f2d75b723d2778b471b77c173c67d7ec1b58725c62bc493ea2f90364abd895e9dd9cbf4c"}}) recvfrom$rose(r6, &(0x7f0000000880)=""/48, 0x30, 0x0, &(0x7f00000008c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}, 0x40) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, &(0x7f0000000900)) r9 = accept4$inet(r6, &(0x7f0000000940)={0x2, 0x0, @multicast1}, &(0x7f0000000980)=0x10, 0x0) ioctl$KDADDIO(r6, 0x4b34, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@ifindex, 0x363ad0ec78343975, 0x1, 0x5, &(0x7f00000009c0)=[0x0], 0x1, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)={@fallback=r6, r6, 0x10, 0x2000, 0x0, @value=r6, @void, @void, @void, r10}, 0x20) read$FUSE(r6, &(0x7f0000000b40)={0x2020}, 0x2020) sendto$rose(0xffffffffffffffff, &(0x7f0000002b80)="7efae258f84848cf09102fc8e0dbe978203ba4164c29c2b5bb37f40d5a27378f1936779dd7c09a63b79257207a942940cbfb2488e64cfe4cd69ac6e6e68f7dd956b3e84f345e9320cc73787c16ec10263c7890c37041d2ab47594abeb5173b83baa93d1ff066de8eb0ddde2f6081ecc459fafd01c885c42243e2c1806bc6a8a1902cffa176e85d1e398f669d8ae01efb8d3afd7b2aec4fdf381d6ea5e35cdddc3386202a9b42eb24b2c53cb97ff92a1810a9953fce3c31dd48c96548fd0dec3234671d5fffd8ec1577d42e3b0e0835d07df43cdd9f0f", 0xd6, 0x44, 0x0, 0x0) ioctl$KDENABIO(r6, 0x4b36) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000002d00)={'gre0\x00', &(0x7f0000002c80)={'ip_vti0\x00', r2, 0x10, 0x40, 0x5, 0x7ff, {{0x12, 0x4, 0x1, 0x5, 0x48, 0x64, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @remote, {[@timestamp_addr={0x44, 0x2c, 0x94, 0x1, 0xf, [{@loopback, 0xfffff4a6}, {@multicast2, 0x7}, {@rand_addr=0x64010102, 0xf}, {@private=0xa010100, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0xe70c}]}, @timestamp={0x44, 0x8, 0xed, 0x0, 0x4, [0x7f]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000002dc0)={'gre0\x00', &(0x7f0000002d40)={'erspan0\x00', r11, 0x10, 0x10, 0x2, 0x4, {{0xb, 0x4, 0x3, 0x1, 0x2c, 0x65, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, @local, {[@lsrr={0x83, 0x13, 0xb3, [@multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}]}}}}}) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000002e00)) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r7, 0x57b90000) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000002e40)) 1.350037435s ago: executing program 1 (id=2300): sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="45d94d52a98d4908726ae5c6224144dd37392669f6a41a9d3eadda17a9a56c0bed361684d5e928a58363711c4fa9339f1830425ed916a9e2f6d47a2864db18e3b2f3979528309e05a9840fcf49f4a48efa440ffd5cadce6cb8f19e8eb1f8f7661a6c448f79178002bcb1cbf1c71b19a322eb1bc2822f3a8f001b5c3d6bc1312df08545d7b73b40c9e2de8cd9c81f9139a5db8532d322dd474956c0be6bdd54c6040622893c0000af0a300a4f9dfbb32f1411a19fd0b67eb44785bc68abf443", 0xbf}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) modify_ldt$write(0x1, &(0x7f0000000180)={0x94, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) r0 = syz_clone(0x4a56b00, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r2 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6070eae400080001ff02000000000000000000000000000100000000000000000000ffffac1e00890000050000000000"], 0x0) r3 = fsmount(r2, 0x0, 0x18) r4 = memfd_create(&(0x7f00000012c0)='\\*$,!\x00', 0x0) clock_nanosleep(0x9, 0x1, &(0x7f00000002c0)={0x77359400}, 0x0) lseek(r4, 0x9, 0x1) symlinkat(&(0x7f0000000340)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0/../file0\x00') r5 = openat2(r3, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)={0x2380}, 0x18) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x2, {0x3, 0x0, 0x4}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r8 = openat$cgroup_ro(r3, &(0x7f0000000400)='pids.events\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000700)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x1004, 0x0, 0x0, 0x3, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b0000000000000000020000000000000100", "90be8b1c55fb3f6c7f00e3000000000000000000800000000000000062008200", [0x4, 0x40000000000003]}}) read$FUSE(r8, &(0x7f00000013c0)={0x2020, 0x0, 0x0}, 0x2020) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_INIT(r10, &(0x7f0000000200)={0x8, 0x0, r9, {0x7, 0x2d, 0xfffffffa, 0x80a2042, 0xd, 0x0, 0x6, 0x3e, 0x0, 0x0, 0x40, 0xc}}, 0xfffffffffffffce4) r11 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) r12 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xd, 0x1010, r3, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x80, &(0x7f0000000040)=0x9116, 0x0, 0x4) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000001280)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0xe24]}}) 970.020841ms ago: executing program 0 (id=2304): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, 0x0) unshare(0x62040200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000030000004c1db7a6c0498a"], 0x0, 0x27, 0x0, 0x1, 0x80}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x800c0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r2], 0xfdef) r4 = socket$inet6(0xa, 0x80001, 0xff) fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0xfc, 0x8}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x200, 0x2, 0x1, 0x3, 0x0, 0x0, {0x3}, [@CTA_PROTOINFO={0x1c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x18, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xbf}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7d11339a}]}}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_NAT_DST={0x1c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_LABELS_MASK={0x10, 0x17, [0x2, 0x80, 0x2]}, @CTA_TUPLE_MASTER={0x80, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x180}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x840}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x868}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x385}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4080}, 0x880) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) r6 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r7, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r7}, @ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e22, @local}, {0x2, 0x4e20, @multicast2}, 0x12, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)='nr0\x00', 0x4, 0x1, 0x7}) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x4, 0x13}]}, 0x24}}, 0x0) bpf$BPF_PROG_DETACH(0x25, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x8, 0x10, 0x0, 0x9, {{0x2e, 0x4, 0x2, 0x23, 0xb8, 0x66, 0x0, 0xe, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1f, 0xf4, [@broadcast, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3a}, @remote]}, @timestamp_addr={0x44, 0x54, 0x41, 0x1, 0x4, [{@broadcast, 0x200044c}, {@broadcast, 0x3}, {@multicast1, 0x3}, {@private=0xa010100, 0x3}, {@multicast1, 0x2}, {@multicast1, 0x5}, {@loopback, 0x9}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote}]}, @timestamp_addr={0x44, 0x14, 0x63, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@empty, 0x1}]}, @ssrr={0x89, 0xf, 0xa6, [@multicast2, @remote, @loopback]}, @timestamp_prespec={0x44, 0xc, 0xbb, 0x3, 0x5, [{@multicast1, 0x9}]}]}}}}}) 882.005216ms ago: executing program 2 (id=2306): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000000)=0xffffffff, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@nat={'nat\x00', 0x670, 0x5, 0x468, 0x0, 0x190, 0xffffffff, 0x0, 0x230, 0x3d0, 0x3d0, 0xffffffff, 0x3d0, 0x3d0, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {}, 0x16}, 0x0, 0x158, 0x190, 0x48, {}, [@common=@ttl={{0x28}, {0x2, 0x4}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xff, 0xffffffff], @ipv4=@private=0xa010102, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff, 0xff000000, 0xff], @ipv4=@local, [0xffffffff, 0x0, 0xff], 0x4c8, 0x1, 0x87, 0x4e1b, 0x4e23, 0x4e24, 0x4e21, 0x814, 0x20c0}, 0x80, 0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @rand_addr=0x64010100, @local, @port=0x4e21, @port=0x4e21}}}}, {{@ip={@multicast1, @rand_addr=0x64010101, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x5}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "1542", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x0, 0x0, 0x6, 0x0, 0x6, 0x2], 0x6, 0x4}, {0x3, [0x5, 0x0, 0x1, 0x2, 0x0, 0x2], 0x0, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) 822.910018ms ago: executing program 2 (id=2307): syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x8, 0xffff}}}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x12) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r1, 0x800, 0x70bd27, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x2002c080}, 0x4004000) r3 = syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x8000, 0x800}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010102}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x24040810) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000040)={0xf0, 0x40000}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0004000000881f73ed22000000", @ANYRESDEC=r3], 0x48) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r9, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r9) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r9, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)={0x2d8, r10, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6c, 0x40}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x5a, 0xfc, "28a2331831e55cd4e38367241d2c1826e370cb09c5a4d6a35541922ecf71449fc289778891ae54f13d1fd16b4016a88f5e7ed2fd27690c134ff5bd212bd9f6f4516840e5c7e46743e10aaf7130177b3f2ec2c80023a4"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "e2e6a0d2c90fa3d4f0b084"}, @NL80211_ATTR_FILS_ERP_REALM={0x77, 0xfa, "f662a664a5cfe417571489fbff51ac4803a002ce7a13efffb1c524af24ec9970e6af363529e31c62dc0a0620c2daafd24ed6aca49e6b3bf9497c047d602d4b5941fc0d546aa4f11c146e876efdb80b2790a4d8abaf2c7619fc5fe406c532b7136489c6732011e812df14309aba5ef7a0dd21e9"}, @NL80211_ATTR_FILS_ERP_RRK={0xd1, 0xfc, "bf8dfe658e976821a7cc26838711bc263dfc38620380734e909b62196f03bf6edd83d0b7752d3838d9ae9f8644cb92092cf400e90b8fdb028d13c5badaa39d36279e691a9270917d197f5a86d4320d8588c7b6d3105b4aaf6ce12cb25192240375d14d0b3e16f44e552c2ba8d79738ef992a22952923f35e276007f0eae70bf30cca086eab83fd28cfeee2db4678ed4fb2054d52ea8d375fce3cbc08cc1ba8fc1152116a30ed3301aa3e927644f8bd06f71ea7c637d52b3a4bd1e61a7e93b4d6f4a944a2edece2651fbfe49247"}, @NL80211_ATTR_FILS_ERP_REALM={0x45, 0xfa, "6742b15d1f44009aa59e5917d07aa8ea0793a4d7af099f131582676bc493408e06167526385321160e11c9db017a36417c02f95c1f10f72cd5f90216861fbe127a"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x81c}, @NL80211_ATTR_FILS_ERP_RRK={0x5c, 0xfc, "65d854b30c22794f558d325792f3af061d7b930dcfb71e0d0f4d2fac6cf7b9b36cfb0b549c78bb666368e7cce9f216a7b9dc5ba7b959819d49f359d4d109a1cf7f0dfa29b2dcc2f7ea2403b9a43da90d943f96826d5d1105"}, @NL80211_ATTR_FILS_ERP_RRK={0x4b, 0xfc, "4eae4f06632a3125acc78d3d4d863b997ab34b46869f5780902f37b60d201e4663fa7aecb632cc642615df6a9eb9337eea61253e9c42900576de87dac7b5694ebf417603ed024b"}]]}, 0x2d8}, 0x1, 0x0, 0x0, 0x20040800}, 0x80) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r10, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x1c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) pread64(r8, &(0x7f0000001300)=""/4118, 0x1016, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r7, &(0x7f0000000500)}, 0x20) 739.928263ms ago: executing program 2 (id=2308): r0 = syz_open_dev$sndpcmc(&(0x7f00000010c0), 0x7, 0x40001) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f0000000040)=0x1) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000f3, 0x0, 0x400006}]}) chdir(&(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)=""/4092, 0xffc) 639.462822ms ago: executing program 0 (id=2309): syz_emit_ethernet(0x27e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/638], 0x0) 638.660819ms ago: executing program 0 (id=2310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4048aec9, &(0x7f0000000780)={0x6}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4048aec9, &(0x7f0000000780)={0x6}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) 589.264173ms ago: executing program 2 (id=2311): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r1, &(0x7f0000002240)={0x2020}, 0x2020) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="742bdc", 0x3}], 0x1) openat$ptp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) (async) r3 = openat$ptp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, 0x0) (async) ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2, 0x600aa}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x2}]}}}]}, 0x40}}, 0x24008040) 490.391067ms ago: executing program 1 (id=2312): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000004000a0002"], 0x28}}, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x4008af25, &(0x7f0000000040)) 489.998501ms ago: executing program 2 (id=2313): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x2b) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) (async) r2 = syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x0, 0x3010, 0x0, 0x0, 0x2, 0x0, 0x2}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000300)=@ethtool_wolinfo={0x5, 0x7ff, 0xfffffa40, "999540b44119"}}) 489.553638ms ago: executing program 1 (id=2314): syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0x98}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000540)=@arm64_ccsidr={0x6020000000110009, 0x0}) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='nfs\x00', 0x1218081, 0x0) 440.563254ms ago: executing program 2 (id=2315): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[], 0x0}, 0x94) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1, 0xf9}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16, @ANYBLOB="01"], 0xb0}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) r2 = socket(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000480)={0x1f, 0xeb, &(0x7f0000000800)="6ca034df47ff4fe2a8151b6cf6806f479449970b21a66ecec203c3d0da0ee3ca20504468e32d6f8661a005d7c3d8a6822cd6dccbd027a604515adf2bb1c3f271d7434188ccbd1e7e928da92b71cb8503574eed458e7cd15f6e63f4bbca26167d6811c5487813967220bda7d8069c1a1d42b4ad98de83fdb49bb0f6f517b835736659e5232a7d706c44680f9b07cc776d00452bb60d4319f64bae552ae582c79ff817f0022bf77e54205deecf5407ee81d3e26f0ea0977fc918eb2af287d367c8d432235d1b6267f487544a4762a9f1745530b65e447091ee36b452abca679bb9c0d98799ac73dcbea21fe3"}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000040)=@buf={0xfc, &(0x7f0000000300)="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"}) write(r4, &(0x7f0000000100)="3b29c8e50e7250d2180072200a089aa4221a85fa21f199a1a3f71ceb3d2ab3654bed8329e503815d58882c0bbfc7ee943c0cc88a138598364d8176d6ed77e8b7a310efe78edae4ded5dca3d1c62a7f2138b36f8c4c9ad969ff6da0af494fa3a0f7f5eb2260fb1db5e9d608f3139c42845a9e3adf4e8797d87ddcd7eddd13b53fb414ec6d7da60c213195650ae6ea3c9e01aab7452cc13de56b08dc3adfe4b6c73dfc6ead77d58e1c7839b5", 0xab) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x120, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000400), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0xff, 0xffffff00, 'syzkaller0\x00', 'veth0\x00', {0xff}, {}, 0x89, 0x0, 0x6a}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@dscp={{0x28}, {0x9}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0xb, 0x5, [0x7, 0x3b, 0x8, 0x1b, 0x3, 0x36, 0x38, 0x2f, 0x13, 0x3f, 0xc, 0x34, 0x24, 0x21, 0x2b, 0x29], 0x2, 0x8, 0xa9}}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001900010029bd70000000972c1d0109004d000f80080021003141d0ae919b926dd9cf75a4413ca7834e27bab29c04f97462e1d4d1790e42bcfc7e30fbd9e30eda3ade1cd06fd5f2a23ea8cd52ac5351e7da768eff740b0da61457e4128d62570dc3b62f1ff23093def30ed481300275dae2bbc009b4cef0a7d36422afcac9083f6276a803f0883a4fd2c2a5d408e88e0caa9fa3a18e9703e9d58d0cbcf971dbd3ad00ba74240b64faec6abb4db57f2e5d025e29bde1539dd443549fede22d71404601", @ANYRES32=r2, @ANYBLOB="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db000000"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x804) 350.024936ms ago: executing program 0 (id=2316): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x400000, 0x0, 0x0, 0x2, 0x400008002d}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x39}, @fda={0x66646185, 0x5, 0x0, 0x4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 349.569959ms ago: executing program 1 (id=2317): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, 0x0) unshare(0x62040200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000030000004c1db7a6c0498a"], 0x0, 0x27, 0x0, 0x1, 0x80}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x800c0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r2], 0xfdef) r4 = socket$inet6(0xa, 0x80001, 0xff) fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0xfc, 0x8}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x200, 0x2, 0x1, 0x3, 0x0, 0x0, {0x3}, [@CTA_PROTOINFO={0x1c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x18, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xbf}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7d11339a}]}}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_NAT_DST={0x1c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_LABELS_MASK={0x10, 0x17, [0x2, 0x80, 0x2]}, @CTA_TUPLE_MASTER={0x80, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x180}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x840}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x868}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x385}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4080}, 0x880) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) r6 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r7, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r7}, @ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e22, @local}, {0x2, 0x4e20, @multicast2}, 0x12, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)='nr0\x00', 0x4, 0x1, 0x7}) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x4, 0x13}]}, 0x24}}, 0x0) bpf$BPF_PROG_DETACH(0x25, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x8, 0x10, 0x0, 0x9, {{0x2e, 0x4, 0x2, 0x23, 0xb8, 0x66, 0x0, 0xe, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1f, 0xf4, [@broadcast, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3a}, @remote]}, @timestamp_addr={0x44, 0x54, 0x41, 0x1, 0x4, [{@broadcast, 0x200044c}, {@broadcast, 0x3}, {@multicast1, 0x3}, {@private=0xa010100, 0x3}, {@multicast1, 0x2}, {@multicast1, 0x5}, {@loopback, 0x9}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote}]}, @timestamp_addr={0x44, 0x14, 0x63, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@empty, 0x1}]}, @ssrr={0x89, 0xf, 0xa6, [@multicast2, @remote, @loopback]}, @timestamp_prespec={0x44, 0xc, 0xbb, 0x3, 0x5, [{@multicast1, 0x9}]}]}}}}}) 348.859287ms ago: executing program 0 (id=2318): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x13, r0, 0xffffc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) io_setup(0x409, &(0x7f0000000600)) 189.370427ms ago: executing program 0 (id=2319): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000001040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0xfffffff9, @loopback, 0x80}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffb, @empty, 0x3}, 0x1c) writev(r2, &(0x7f0000003800)=[{&(0x7f0000000400)=',', 0x1}], 0x1) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000100)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x4, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x346, 0x8, 0x0, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r7, &(0x7f00000000c0), 0x2) r8 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_int(r8, 0x1, 0x3c, 0x0, &(0x7f0000000040)) close_range(r6, r7, 0x0) recvfrom$packet(r6, &(0x7f0000001080)=""/4096, 0x1000, 0x100, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="9c050000000ef97b1f007e7775471cc10d3b000041", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r9, &(0x7f0000000080), 0x8) 0s ago: executing program 1 (id=2320): r0 = fsopen(&(0x7f0000000000)='omfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000240)=r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, r0}, 0x18) io_setup(0xeb0, &(0x7f0000000140)=0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800020000000000", 0x24) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) setns(r7, 0x24020000) umount2(&(0x7f00000000c0)='.\x00', 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r4, 0x1, &(0x7f0000001780)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) io_cancel(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000100), &(0x7f00000001c0)=r3}, 0x20) 0s ago: executing program 1 (id=2321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) (async) r4 = fcntl$dupfd(r3, 0x0, r3) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000000)) ioctl$TCFLSH(r4, 0x400455c8, 0x2) (async) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r10, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x2) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private1, @in6=@private2, 0x4e20, 0x6, 0x4e23, 0xb, 0x2, 0xa0, 0x80, 0x3b}, {0x8, 0x8001, 0x0, 0x5e, 0x3, 0x1, 0x8, 0x3}, {0xffffffffffffffff, 0xfff, 0xfff, 0x2}, 0x9, 0x6e6bbc, 0x1, 0x1}, {{@in6=@loopback, 0x4d5, 0x16d8aafaf62166fd}, 0x2, @in6=@mcast1, 0x3500, 0x3, 0x1, 0x0, 0x80, 0x534d, 0x9}}, 0xe8) (async) sendto$rose(r2, &(0x7f00000002c0)="752631143194f808d68a29a7d7e2fee287024e9c451c7677de6545ec2e18", 0x1e, 0x10, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x400}) (async) close(r0) kernel console output (not intermixed with test programs): value: 9 [ 231.601413][T11027] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.606937][T11027] usb 5-1: config 0 interface 0 has no altsetting 0 [ 231.611830][T11027] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.617318][T11027] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.622370][T11027] usb 5-1: config 0 interface 0 has no altsetting 0 [ 231.626314][T11027] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.631464][T11027] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.638344][T11027] usb 5-1: config 0 interface 0 has no altsetting 0 [ 231.642966][T11027] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.647777][ T40] audit: type=1326 audit(1769359394.407:34848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13369 comm="syz.6.1583" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a2839acb9 code=0x0 [ 231.649495][T11027] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.660700][T11027] usb 5-1: config 0 interface 0 has no altsetting 0 [ 231.665018][T11027] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.669396][T11027] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.674316][T11027] usb 5-1: config 0 interface 0 has no altsetting 0 [ 231.678281][T11027] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.681945][T11027] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.687977][T11027] usb 5-1: config 0 interface 0 has no altsetting 0 [ 231.691834][T11027] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.696147][T11027] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.701221][T11027] usb 5-1: config 0 interface 0 has no altsetting 0 [ 231.705834][T11027] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.709439][T11027] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.715201][T11027] usb 5-1: config 0 interface 0 has no altsetting 0 [ 231.720629][T11027] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 231.724716][T11027] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 231.728074][T11027] usb 5-1: Product: syz [ 231.729774][T11027] usb 5-1: Manufacturer: syz [ 231.732779][T11027] usb 5-1: SerialNumber: syz [ 231.742579][T11027] usb 5-1: config 0 descriptor?? [ 231.749274][ T40] audit: type=1400 audit(1769359394.507:34849): avc: denied { mounton } for pid=13369 comm="syz.6.1583" path=2F70726F632F34322F7461736B2F3433202864656C6574656429 dev="proc" ino=59688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 231.751177][T11027] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 231.757233][ T40] audit: type=1400 audit(1769359394.507:34850): avc: denied { mount } for pid=13369 comm="syz.6.1583" name="/" dev="pstore" ino=2642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 231.757262][ T40] audit: type=1400 audit(1769359394.507:34851): avc: denied { write } for pid=13369 comm="syz.6.1583" name="snmp" dev="proc" ino=4026534502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 231.949947][T11027] usb 5-1: USB disconnect, device number 21 [ 231.956067][T11027] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 232.217404][ T5945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.223136][ T5945] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.226705][ T5945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.229651][ T5945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.233650][ T5945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.285143][T13385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.359824][T13388] __nla_validate_parse: 4 callbacks suppressed [ 232.359835][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1587'. [ 232.396079][T13381] chnl_net:caif_netlink_parms(): no params data found [ 232.565030][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.569115][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.647050][T13381] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.650352][T13381] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.654315][T13381] bridge_slave_0: entered allmulticast mode [ 232.663515][T13381] bridge_slave_0: entered promiscuous mode [ 232.668925][T13381] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.671916][T13381] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.675666][T13381] bridge_slave_1: entered allmulticast mode [ 232.679897][T13381] bridge_slave_1: entered promiscuous mode [ 232.715276][T13400] netlink: 'syz.6.1589': attribute type 9 has an invalid length. [ 232.738628][T13381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.758817][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.764364][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.802581][T13381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.889789][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.894276][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.907379][T13381] team0: Port device team_slave_0 added [ 232.915087][T13381] team0: Port device team_slave_1 added [ 232.940005][T13381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.943009][T13381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.962527][T13381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.968593][T13381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.971607][T13381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.984253][T13413] netlink: 'syz.6.1593': attribute type 11 has an invalid length. [ 232.986870][T13381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.022149][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.027256][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.074747][T13381] hsr_slave_0: entered promiscuous mode [ 233.075479][T13381] hsr_slave_1: entered promiscuous mode [ 233.075848][T13381] debugfs: 'hsr0' already exists in 'hsr' [ 233.092299][T13381] Cannot create hsr debugfs directory [ 233.505842][ T12] bridge_slave_1: left allmulticast mode [ 233.508558][ T12] bridge_slave_1: left promiscuous mode [ 233.513277][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.524560][ T12] bridge_slave_0: left allmulticast mode [ 233.526954][ T12] bridge_slave_0: left promiscuous mode [ 233.529594][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.989357][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.994515][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.998824][ T12] bond0 (unregistering): Released all slaves [ 234.003862][ T12] bond1 (unregistering): Released all slaves [ 234.014792][T13449] workqueue: name exceeds WQ_NAME_LEN. Truncating to: πFVluc'f`ކ;1 [ 234.225006][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1610'. [ 234.287584][T13495] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1613'. [ 234.347619][ T5940] Bluetooth: hci4: command tx timeout [ 234.501039][T13519] input: syz1 as /devices/virtual/input/input18 [ 234.604938][ T12] hsr_slave_0: left promiscuous mode [ 234.608043][ T12] hsr_slave_1: left promiscuous mode [ 234.610827][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.614546][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.630886][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.641480][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.660234][T13528] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1623'. [ 234.675887][ T12] veth1_macvtap: left promiscuous mode [ 234.677750][ T12] veth0_macvtap: left promiscuous mode [ 234.679620][ T12] veth1_vlan: left promiscuous mode [ 234.681584][ T12] veth0_vlan: left promiscuous mode [ 234.784882][T13541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8208 sclass=netlink_route_socket pid=13541 comm=syz.1.1625 [ 234.835526][T13543] overlayfs: missing 'lowerdir' [ 234.902544][ T6044] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 235.067157][ T6044] usb 5-1: config 255 has an invalid interface number: 24 but max is 1 [ 235.069907][ T6044] usb 5-1: config 255 has no interface number 1 [ 235.071915][ T6044] usb 5-1: config 255 interface 0 altsetting 1 endpoint 0x5 has an invalid bInterval 94, changing to 10 [ 235.075453][ T6044] usb 5-1: config 255 interface 0 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 235.079557][ T6044] usb 5-1: config 255 interface 0 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0 [ 235.083857][ T6044] usb 5-1: config 255 interface 24 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 235.087966][ T6044] usb 5-1: config 255 interface 24 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 235.092601][ T6044] usb 5-1: config 255 interface 24 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 235.096019][ T6044] usb 5-1: config 255 interface 0 has no altsetting 0 [ 235.098176][ T6044] usb 5-1: config 255 interface 24 has no altsetting 0 [ 235.102104][ T6044] usb 5-1: New USB device found, idVendor=16d0, idProduct=0f30, bcdDevice=59.bf [ 235.106695][ T6044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.109259][ T6044] usb 5-1: Product: и [ 235.110560][ T6044] usb 5-1: Manufacturer: ࠌ [ 235.112117][ T6044] usb 5-1: SerialNumber: ఊ [ 235.142464][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 235.170814][ T12] team0 (unregistering): Port device team_slave_1 removed [ 235.208875][ T12] team0 (unregistering): Port device team_slave_0 removed [ 235.348780][ T6044] gs_usb 5-1:255.0: Required endpoints not found [ 235.367266][ T6044] usb 5-1: USB disconnect, device number 22 [ 235.721198][T13558] SELinux: unknown common [ 235.740192][T13558] SELinux: failed to load policy [ 235.915748][T13581] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1633'. [ 236.104574][T13598] overlayfs: missing 'lowerdir' [ 236.240332][T13601] vxcan1 speed is unknown, defaulting to 1000 [ 236.252145][T13601] vxcan1 speed is unknown, defaulting to 1000 [ 236.291973][T13601] vxcan1 speed is unknown, defaulting to 1000 [ 236.422780][ T5940] Bluetooth: hci4: command tx timeout [ 236.458817][T11027] vxcan1 speed is unknown, defaulting to 1000 [ 236.461658][T13601] infiniband syz2: set down [ 236.465325][T13601] infiniband syz2: added vxcan1 [ 236.534393][T13601] RDS/IB: syz2: added [ 236.537056][T13601] smc: adding ib device syz2 with port count 1 [ 236.540163][T13601] smc: ib device syz2 port 1 has no pnetid [ 236.564878][T13601] vxcan1 speed is unknown, defaulting to 1000 [ 236.575773][ T40] kauditd_printk_skb: 340 callbacks suppressed [ 236.575795][ T40] audit: type=1400 audit(1769359399.337:35192): avc: denied { read write } for pid=12897 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.591188][T10426] vxcan1 speed is unknown, defaulting to 1000 [ 236.595218][ T40] audit: type=1400 audit(1769359399.337:35193): avc: denied { open } for pid=12897 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.604640][ T40] audit: type=1400 audit(1769359399.337:35194): avc: denied { ioctl } for pid=12897 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.614066][T13631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1646'. [ 236.619203][ T40] audit: type=1400 audit(1769359399.377:35195): avc: denied { create } for pid=13630 comm="syz.0.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 236.627452][ T40] audit: type=1400 audit(1769359399.377:35196): avc: denied { ioctl } for pid=13630 comm="syz.0.1646" path="socket:[59238]" dev="sockfs" ino=59238 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 236.685694][T13631] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.734761][T13381] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 236.737465][ T40] audit: type=1400 audit(1769359399.497:35197): avc: denied { create } for pid=13381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 236.748577][ T40] audit: type=1400 audit(1769359399.497:35198): avc: denied { write } for pid=13381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 236.760452][T13381] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 236.767628][T13381] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 236.770528][ T40] audit: type=1400 audit(1769359399.497:35199): avc: denied { read } for pid=13381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 236.786199][T13381] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 236.839826][T13601] vxcan1 speed is unknown, defaulting to 1000 [ 236.875642][T13381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.884669][ T40] audit: type=1400 audit(1769359399.637:35200): avc: denied { ioctl } for pid=13649 comm="syz.6.1648" path="socket:[61108]" dev="sockfs" ino=61108 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 236.898576][T13381] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.905755][ T7705] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.908171][ T7705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.947630][ T7705] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.949975][ T7705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.017653][ T40] audit: type=1400 audit(1769359399.777:35201): avc: denied { module_request } for pid=13381 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 237.065182][T13601] vxcan1 speed is unknown, defaulting to 1000 [ 237.072203][T13664] tipc: Started in network mode [ 237.080393][T13664] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 237.096954][T13664] tipc: Enabled bearer , priority 10 [ 237.127144][T13668] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 237.129781][T13668] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 237.132225][T13668] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 237.134722][T13668] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 237.137265][T13668] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 237.139753][T13668] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 237.142297][T13668] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 237.144805][T13668] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 237.147498][T13668] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 237.190238][T13381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.228921][T13381] veth0_vlan: entered promiscuous mode [ 237.241634][T13381] veth1_vlan: entered promiscuous mode [ 237.248070][T13668] netlink: 'syz.0.1652': attribute type 15 has an invalid length. [ 237.250439][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 237.264505][T13668] netlink: 'syz.0.1652': attribute type 15 has an invalid length. [ 237.271475][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 237.274596][T13381] veth0_macvtap: entered promiscuous mode [ 237.290161][T13381] veth1_macvtap: entered promiscuous mode [ 237.300264][T13381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.324817][T13381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.339385][T13601] vxcan1 speed is unknown, defaulting to 1000 [ 237.344739][T12434] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.349412][T12434] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.359787][ T7705] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.367534][ T7705] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.410043][ T7701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.413058][ T7701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.435428][ T7703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.438007][ T7703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.470896][T13684] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1655'. [ 237.546356][T13691] sctp: [Deprecated]: syz.2.1585 (pid 13691) Use of int in maxseg socket option. [ 237.546356][T13691] Use struct sctp_assoc_value instead [ 237.575649][T13601] vxcan1 speed is unknown, defaulting to 1000 [ 237.697270][T13601] vxcan1 speed is unknown, defaulting to 1000 [ 237.704083][T13697] program syz.2.1657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.874228][T13601] vxcan1 speed is unknown, defaulting to 1000 [ 238.057785][T13719] net_ratelimit: 45 callbacks suppressed [ 238.057792][T13719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.070122][T13723] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1663'. [ 238.095800][T13716] vxcan1 speed is unknown, defaulting to 1000 [ 238.135501][T11027] IPVS: starting estimator thread 0... [ 238.166634][T13736] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 238.169068][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1661'. [ 238.169487][T13736] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 238.216512][T13740] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 238.219107][T13740] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 238.225320][T13740] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 238.232367][T13730] IPVS: using max 29 ests per chain, 69600 per kthread [ 238.232600][ T1333] tipc: Node number set to 4269801494 [ 238.502539][ T5940] Bluetooth: hci4: command tx timeout [ 239.029065][T13783] overlayfs: failed to resolve './bus': -2 [ 239.362331][T13813] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 239.365000][T13813] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 239.396774][T13818] FAULT_INJECTION: forcing a failure. [ 239.396774][T13818] name failslab, interval 1, probability 0, space 0, times 0 [ 239.401948][T13818] CPU: 1 UID: 0 PID: 13818 Comm: syz.2.1677 Not tainted syzkaller #0 PREEMPT(full) [ 239.401972][T13818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.401983][T13818] Call Trace: [ 239.401999][T13818] [ 239.402007][T13818] dump_stack_lvl+0x100/0x190 [ 239.402050][T13818] should_fail_ex.cold+0x5/0xa [ 239.402082][T13818] should_failslab+0xc2/0x120 [ 239.402105][T13818] ? tomoyo_realpath_from_path+0xb6/0x690 [ 239.402131][T13818] __kmalloc_noprof+0xf6/0x9c0 [ 239.402158][T13818] ? tomoyo_realpath_from_path+0xb6/0x690 [ 239.402177][T13818] tomoyo_realpath_from_path+0xb6/0x690 [ 239.402203][T13818] tomoyo_path_number_perm+0x23c/0x580 [ 239.402230][T13818] ? tomoyo_path_number_perm+0x22e/0x580 [ 239.402274][T13818] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 239.402348][T13818] ? find_held_lock+0x2b/0x80 [ 239.402372][T13818] ? hook_file_ioctl_common+0x146/0x410 [ 239.402397][T13818] ? __fget_files+0x215/0x3d0 [ 239.402423][T13818] ? __fget_files+0x21f/0x3d0 [ 239.402449][T13818] security_file_ioctl+0xd3/0x230 [ 239.402468][T13818] __x64_sys_ioctl+0xb7/0x210 [ 239.402488][T13818] do_syscall_64+0xc9/0xf80 [ 239.402518][T13818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.402536][T13818] RIP: 0033:0x7f45e7b9acb9 [ 239.402550][T13818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.402566][T13818] RSP: 002b:00007f45e8ac9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.402583][T13818] RAX: ffffffffffffffda RBX: 00007f45e7e15fa0 RCX: 00007f45e7b9acb9 [ 239.402595][T13818] RDX: 0000200000000100 RSI: 00000000c0745645 RDI: 0000000000000003 [ 239.402605][T13818] RBP: 00007f45e8ac9090 R08: 0000000000000000 R09: 0000000000000000 [ 239.402615][T13818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.402625][T13818] R13: 00007f45e7e16038 R14: 00007f45e7e15fa0 R15: 00007fffb36e3128 [ 239.402650][T13818] [ 239.475943][T13818] ERROR: Out of memory at tomoyo_realpath_from_path. [ 239.518555][T13824] fuse: Bad value for 'fd' [ 239.540950][T13825] sp0: Synchronizing with TNC [ 239.558276][T13822] [U] [ 239.652343][ T59] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 239.804462][ T59] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 239.808444][ T59] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.822438][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.848018][T13855] overlayfs: missing 'lowerdir' [ 239.874588][T13852] vxcan1 speed is unknown, defaulting to 1000 [ 239.879785][T13857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13857 comm=syz.1.1690 [ 239.885485][T13857] netlink: 'syz.1.1690': attribute type 1 has an invalid length. [ 239.942546][T13857] smc: adding net device bond0 with user defined pnetid SYZ2 [ 239.974620][T13860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.006914][T13863] bond0: (slave bridge3): making interface the new active one [ 240.012927][T13863] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 240.133342][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1687'. [ 240.190063][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1695'. [ 240.360745][T13896] atomic_op ffff888055062198 conn xmit_atomic 0000000000000000 [ 240.582353][ T5940] Bluetooth: hci4: command tx timeout [ 240.784981][T13920] netlink: 'syz.0.1678': attribute type 1 has an invalid length. [ 240.811395][T13920] bond3: (slave geneve2): making interface the new active one [ 240.814579][T13920] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 240.817651][ T7701] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 240.818564][T13920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=13920 comm=syz.0.1678 [ 240.821403][ T7701] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 240.836436][ T7701] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 240.840238][ T7701] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 241.180417][T13942] veth0_to_bond: entered allmulticast mode [ 241.437901][T13971] overlayfs: failed to resolve './file1/file0': -2 [ 241.584114][ T40] kauditd_printk_skb: 401 callbacks suppressed [ 241.584128][ T40] audit: type=1400 audit(1769359404.347:35603): avc: denied { read write } for pid=13986 comm="syz.2.1716" name="video2" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 241.586022][T13987] netlink: 'syz.2.1716': attribute type 11 has an invalid length. [ 241.586103][ T40] audit: type=1400 audit(1769359404.347:35604): avc: denied { open } for pid=13986 comm="syz.2.1716" path="/dev/video2" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 241.625091][ T40] audit: type=1400 audit(1769359404.347:35605): avc: denied { ioctl } for pid=13986 comm="syz.2.1716" path="/dev/video2" dev="devtmpfs" ino=957 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 241.633924][ T40] audit: type=1400 audit(1769359404.387:35606): avc: denied { create } for pid=13988 comm="syz.6.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 241.640110][ T40] audit: type=1400 audit(1769359404.387:35607): avc: denied { read write } for pid=13988 comm="syz.6.1717" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 241.650250][ T40] audit: type=1400 audit(1769359404.387:35608): avc: denied { open } for pid=13988 comm="syz.6.1717" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 241.660380][ T40] audit: type=1400 audit(1769359404.387:35609): avc: denied { ioctl } for pid=13988 comm="syz.6.1717" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 241.673369][ T40] audit: type=1400 audit(1769359404.397:35610): avc: denied { watch watch_reads } for pid=13990 comm="syz.2.1718" path="/23" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 241.683029][ T40] audit: type=1400 audit(1769359404.417:35611): avc: denied { read } for pid=13990 comm="syz.2.1718" dev="nsfs" ino=4026533002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 241.691584][ T40] audit: type=1400 audit(1769359404.417:35612): avc: denied { open } for pid=13990 comm="syz.2.1718" path="net:[4026533002]" dev="nsfs" ino=4026533002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 241.862746][ T4166] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 241.878565][T13999] netlink: 'syz.2.1721': attribute type 4 has an invalid length. [ 241.971458][T14003] overlayfs: missing 'workdir' [ 242.034568][ T4166] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 242.038526][ T4166] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 242.042759][ T4166] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 242.046512][ T4166] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.054004][T13989] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 242.061913][ T4166] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 242.114121][T14009] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1725'. [ 242.267195][T10305] usb 11-1: USB disconnect, device number 6 [ 242.269718][T14011] netlink: 'syz.1.1726': attribute type 178 has an invalid length. [ 242.331868][T14013] vxcan1 speed is unknown, defaulting to 1000 [ 242.363618][T14015] overlayfs: overlapping lowerdir path [ 242.380600][T14016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.425321][ T6044] usb 5-1: USB disconnect, device number 23 [ 242.508138][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1727'. [ 242.601579][T14029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1731'. [ 242.700378][T14034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1733'. [ 242.977937][T14050] tipc: Started in network mode [ 242.980117][T14050] tipc: Node identity 863a1f7c72c, cluster identity 4711 [ 242.987391][T14050] tipc: Enabled bearer , priority 0 [ 242.991353][T14050] syzkaller0: entered promiscuous mode [ 242.994277][T14050] syzkaller0: entered allmulticast mode [ 243.035890][T14049] tipc: Resetting bearer [ 243.051585][T14053] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 243.072961][T14049] tipc: Disabling bearer [ 243.082491][T14055] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1739'. [ 243.089767][T14055] Cannot find add_set index 1 as target [ 243.191979][T14053] QAT: failed to copy from user. [ 243.256044][T14068] vxcan1 speed is unknown, defaulting to 1000 [ 243.270672][T14074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1744'. [ 243.307053][T14075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.313486][T14076] ufs: You didn't specify the type of your ufs filesystem [ 243.313486][T14076] [ 243.313486][T14076] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 243.313486][T14076] [ 243.313486][T14076] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 243.407717][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1742'. [ 243.415304][T14084] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1747'. [ 243.740072][T14116] xt_CONNSECMARK: invalid mode: 0 [ 244.007416][T14131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.033159][T14128] vxcan1 speed is unknown, defaulting to 1000 [ 244.083919][T14131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1759'. [ 244.288948][T14152] netlink: 'syz.1.1761': attribute type 4 has an invalid length. [ 244.462403][T10525] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 244.641859][T10525] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 244.646525][T10525] usb 5-1: config 0 interface 0 has no altsetting 0 [ 244.656148][T10525] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 244.660015][T10525] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 244.668392][T10525] usb 5-1: Product: syz [ 244.670236][T10525] usb 5-1: Manufacturer: syz [ 244.672515][T10525] usb 5-1: SerialNumber: syz [ 244.682811][T10525] usb 5-1: config 0 descriptor?? [ 244.685769][T14148] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 244.693489][T10525] usb 5-1: selecting invalid altsetting 0 [ 245.011908][T14205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1770'. [ 245.029411][ T6205] usb 5-1: USB disconnect, device number 24 [ 245.059734][T12434] smc: removing ib device syz2 [ 245.168846][T14214] syzkaller0: entered promiscuous mode [ 245.171542][T14214] syzkaller0: entered allmulticast mode [ 245.387900][ T5940] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 245.390824][ T5940] Bluetooth: hci1: Injecting HCI hardware error event [ 245.394642][ T5940] Bluetooth: hci1: hardware error 0x00 [ 245.666524][T14244] FAULT_INJECTION: forcing a failure. [ 245.666524][T14244] name failslab, interval 1, probability 0, space 0, times 0 [ 245.673550][T14244] CPU: 3 UID: 0 PID: 14244 Comm: syz.2.1775 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.673571][T14244] Tainted: [L]=SOFTLOCKUP [ 245.673575][T14244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 245.673582][T14244] Call Trace: [ 245.673586][T14244] [ 245.673591][T14244] dump_stack_lvl+0x100/0x190 [ 245.673627][T14244] should_fail_ex.cold+0x5/0xa [ 245.673647][T14244] should_failslab+0xc2/0x120 [ 245.673662][T14244] kmem_cache_alloc_noprof+0x83/0x780 [ 245.673680][T14244] ? getname_flags.part.0+0x4c/0x540 [ 245.673700][T14244] ? getname_flags.part.0+0x4c/0x540 [ 245.673715][T14244] getname_flags.part.0+0x4c/0x540 [ 245.673733][T14244] __x64_sys_unlinkat+0x1c2/0x250 [ 245.673749][T14244] do_syscall_64+0xc9/0xf80 [ 245.673769][T14244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.673780][T14244] RIP: 0033:0x7f45e7b9acb9 [ 245.673789][T14244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.673800][T14244] RSP: 002b:00007f45e8ac9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 245.673811][T14244] RAX: ffffffffffffffda RBX: 00007f45e7e15fa0 RCX: 00007f45e7b9acb9 [ 245.673818][T14244] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 245.673825][T14244] RBP: 00007f45e8ac9090 R08: 0000000000000000 R09: 0000000000000000 [ 245.673831][T14244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.673837][T14244] R13: 00007f45e7e16038 R14: 00007f45e7e15fa0 R15: 00007fffb36e3128 [ 245.673851][T14244] [ 245.845161][T14249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 246.324906][ T7703] bond0 (unregistering): Released all slaves [ 246.331220][ T7703] bond1 (unregistering): Released all slaves [ 246.456366][T14274] FAULT_INJECTION: forcing a failure. [ 246.456366][T14274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.461769][T14274] CPU: 3 UID: 0 PID: 14274 Comm: syz.1.1785 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.461798][T14274] Tainted: [L]=SOFTLOCKUP [ 246.461804][T14274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.461815][T14274] Call Trace: [ 246.461821][T14274] [ 246.461829][T14274] dump_stack_lvl+0x100/0x190 [ 246.461880][T14274] should_fail_ex.cold+0x5/0xa [ 246.461911][T14274] strncpy_from_user+0x3b/0x2d0 [ 246.461943][T14274] getname_flags.part.0+0x8f/0x540 [ 246.461974][T14274] __x64_sys_unlinkat+0x1c2/0x250 [ 246.461998][T14274] do_syscall_64+0xc9/0xf80 [ 246.462027][T14274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.462046][T14274] RIP: 0033:0x7f01a439acb9 [ 246.462058][T14274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.462072][T14274] RSP: 002b:00007f01a52f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 246.462087][T14274] RAX: ffffffffffffffda RBX: 00007f01a4615fa0 RCX: 00007f01a439acb9 [ 246.462096][T14274] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 246.462105][T14274] RBP: 00007f01a52f8090 R08: 0000000000000000 R09: 0000000000000000 [ 246.462114][T14274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.462123][T14274] R13: 00007f01a4616038 R14: 00007f01a4615fa0 R15: 00007ffc2a792758 [ 246.462163][T14274] [ 246.540276][ T7703] bond2 (unregistering): Released all slaves [ 246.667352][ T7703] bond3 (unregistering): (slave veth5): Releasing active interface [ 246.671236][ T7703] bond3 (unregistering): Released all slaves [ 246.677916][ T7703] bond4 (unregistering): Released all slaves [ 246.691977][T14238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.760574][ T40] kauditd_printk_skb: 244 callbacks suppressed [ 246.760591][ T40] audit: type=1400 audit(1769359409.527:35857): avc: denied { write } for pid=14282 comm="syz.2.1788" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 246.774961][ T29] libceph: connect (1)[c::]:6789 error -101 [ 246.778521][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 246.790361][ T7703] tipc: Disabling bearer [ 246.833118][ T7703] tipc: Left network mode [ 246.862633][ T9657] libceph: connect (1)[c::]:6789 error -101 [ 246.866100][ T9657] libceph: mon0 (1)[c::]:6789 connect error [ 246.884333][ T40] audit: type=1400 audit(1769359409.647:35858): avc: denied { setopt } for pid=14282 comm="syz.2.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 246.884804][T14295] usb usb8: usbfs: process 14295 (syz.2.1788) did not claim interface 0 before use [ 246.892098][ T40] audit: type=1400 audit(1769359409.647:35859): avc: denied { mounton } for pid=14282 comm="syz.2.1788" path="/51/file0" dev="tmpfs" ino=342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 246.905856][ T40] audit: type=1400 audit(1769359409.667:35860): avc: denied { accept } for pid=14292 comm="syz.1.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 246.914158][ T40] audit: type=1400 audit(1769359409.667:35861): avc: denied { create } for pid=14292 comm="syz.1.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 246.921799][ T40] audit: type=1400 audit(1769359409.667:35862): avc: denied { ioctl } for pid=14292 comm="syz.1.1789" path="socket:[64013]" dev="sockfs" ino=64013 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 246.931843][ T40] audit: type=1400 audit(1769359409.677:35863): avc: denied { create } for pid=14298 comm="syz.6.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 246.939879][ T40] audit: type=1400 audit(1769359409.677:35864): avc: denied { create } for pid=14297 comm="syz.0.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 246.949238][ T40] audit: type=1400 audit(1769359409.677:35865): avc: denied { ioctl } for pid=14297 comm="syz.0.1791" path="socket:[65088]" dev="sockfs" ino=65088 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 246.959583][ T40] audit: type=1400 audit(1769359409.677:35866): avc: denied { module_request } for pid=14297 comm="syz.0.1791" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 247.073007][T14310] SELinux: policydb version 1512045667 does not match my version range 15-35 [ 247.076747][T14310] SELinux: failed to load policy [ 247.085500][T10426] libceph: connect (1)[c::]:6789 error -101 [ 247.088212][T10426] libceph: mon0 (1)[c::]:6789 connect error [ 247.126442][ T9657] libceph: connect (1)[c::]:6789 error -101 [ 247.128666][ T9657] libceph: mon0 (1)[c::]:6789 connect error [ 247.168532][ T7703] hsr_slave_0: left promiscuous mode [ 247.172137][ T7703] hsr_slave_1: left promiscuous mode [ 247.197784][ T7703] veth1_macvtap: left promiscuous mode [ 247.200375][ T7703] veth0_macvtap: left promiscuous mode [ 247.202920][ T7703] veth1_vlan: left promiscuous mode [ 247.205183][ T7703] veth0_vlan: left promiscuous mode [ 247.532328][ T9657] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 247.594782][T14284] ceph: No mds server is up or the cluster is laggy [ 247.596464][T10426] libceph: connect (1)[c::]:6789 error -101 [ 247.602403][T14288] ceph: No mds server is up or the cluster is laggy [ 247.602813][T10426] libceph: mon0 (1)[c::]:6789 connect error [ 247.614215][T14334] __nla_validate_parse: 2 callbacks suppressed [ 247.614231][T14334] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1799'. [ 247.622621][ T5940] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 247.633191][ T6205] libceph: connect (1)[c::]:6789 error -101 [ 247.635668][ T6205] libceph: mon0 (1)[c::]:6789 connect error [ 247.694837][ T9657] usb 6-1: Using ep0 maxpacket: 8 [ 247.698520][ T9657] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 247.701362][ T9657] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.711132][ T9657] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 247.714534][ T9657] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.717766][ T9657] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.722133][ T9657] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 247.726495][ T9657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.940508][ T9657] usb 6-1: usb_control_msg returned -32 [ 247.943112][ T9657] usbtmc 6-1:16.0: can't read capabilities [ 248.263086][T14329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.324902][T14353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1804'. [ 248.365969][T14354] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14354 comm=syz.2.1804 [ 248.458039][T14358] bridge0: port 3(syz_tun) entered blocking state [ 248.460122][T14358] bridge0: port 3(syz_tun) entered disabled state [ 248.463498][T14358] syz_tun: entered allmulticast mode [ 248.466284][T14358] syz_tun: entered promiscuous mode [ 248.468238][T14358] bridge0: port 3(syz_tun) entered blocking state [ 248.470251][T14358] bridge0: port 3(syz_tun) entered forwarding state [ 248.474269][T14358] netlink: 'syz.2.1805': attribute type 30 has an invalid length. [ 248.485151][T14358] bond1: option arp_missed_max: invalid value (0) [ 248.487302][T14358] bond1: option arp_missed_max: allowed values 1 - 255 [ 248.491636][T14358] bond1 (unregistering): Released all slaves [ 248.750492][T14363] usb usb8: usbfs: process 14363 (syz.6.1807) did not claim interface 0 before use [ 248.757231][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1808'. [ 248.761029][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1808'. [ 248.827391][T14372] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1807'. [ 249.545169][T14395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.615058][T14394] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1815'. [ 249.930087][T14404] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 250.274792][ T6205] usb 6-1: USB disconnect, device number 16 [ 250.342458][ T5940] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 265.113120][ T40] kauditd_printk_skb: 142 callbacks suppressed [ 265.113138][ T40] audit: type=1400 audit(1769359427.877:36009): avc: denied { create } for pid=14444 comm="syz.6.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 265.125825][ T40] audit: type=1400 audit(1769359427.877:36010): avc: denied { write } for pid=14444 comm="syz.6.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 265.136306][ T40] audit: type=1400 audit(1769359427.877:36011): avc: denied { read } for pid=14444 comm="syz.6.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 265.146268][ T40] audit: type=1400 audit(1769359427.877:36012): avc: denied { create } for pid=14444 comm="syz.6.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 265.164678][ T40] audit: type=1400 audit(1769359427.877:36013): avc: denied { setopt } for pid=14444 comm="syz.6.1820" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 265.192772][ T40] audit: type=1400 audit(1769359427.887:36014): avc: denied { create } for pid=14444 comm="syz.6.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 265.200157][ T40] audit: type=1400 audit(1769359427.887:36015): avc: denied { create } for pid=14448 comm="syz.0.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 265.207633][ T40] audit: type=1400 audit(1769359427.887:36016): avc: denied { ioctl } for pid=14444 comm="syz.6.1820" path="socket:[65599]" dev="sockfs" ino=65599 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 265.216329][ T40] audit: type=1400 audit(1769359427.887:36017): avc: denied { allowed } for pid=14445 comm="syz.1.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 265.224674][ T40] audit: type=1400 audit(1769359427.887:36018): avc: denied { create } for pid=14449 comm="syz.2.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 265.277887][T14456] netlink: 'syz.0.1823': attribute type 7 has an invalid length. [ 265.378209][T14469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.422850][T14473] syz.6.1827 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 265.434259][T14471] openvswitch: netlink: EtherType 50a is less than min 600 [ 265.498504][ T6007] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 265.502675][T14466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1826'. [ 265.570403][T14478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1829'. [ 265.584072][T14478] bridge0: entered promiscuous mode [ 265.587061][T14478] macsec1: entered allmulticast mode [ 265.589355][T14478] bridge0: entered allmulticast mode [ 265.597362][T14478] bridge0: port 3(macsec1) entered blocking state [ 265.600261][T14478] bridge0: port 3(macsec1) entered disabled state [ 265.621004][T14478] bridge0: left allmulticast mode [ 265.624710][T14478] bridge0: left promiscuous mode [ 265.664421][ T6007] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 265.667733][ T6007] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 265.670873][ T6007] usb 7-1: config 0 interface 0 has no altsetting 0 [ 265.674834][ T6007] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 265.677906][ T6007] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 265.680600][ T6007] usb 7-1: Product: syz [ 265.682010][ T6007] usb 7-1: Manufacturer: syz [ 265.683942][ T6007] usb 7-1: SerialNumber: syz [ 265.687772][ T6007] usb 7-1: config 0 descriptor?? [ 265.693148][ T6007] hub 7-1:0.0: bad descriptor, ignoring hub [ 265.695198][ T6007] hub 7-1:0.0: probe with driver hub failed with error -5 [ 265.699054][ T6007] usb 7-1: selecting invalid altsetting 0 [ 265.724894][T14480] /dev/sr0: Can't open blockdev [ 265.874755][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.877328][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.019361][T14517] netlink: 'syz.1.1840': attribute type 30 has an invalid length. [ 266.097761][T14520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1841'. [ 266.109958][ T7700] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.110079][T14520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1841'. [ 266.113824][ T7700] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.119793][ T7700] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.122963][ T7700] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.316867][T14458] usb 7-1: reset high-speed USB device number 6 using dummy_hcd [ 266.364790][T14526] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(18) [ 266.367561][T14526] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 266.370721][T14526] vhci_hcd vhci_hcd.0: Device attached [ 266.505362][T14458] usb 7-1: device firmware changed [ 266.512205][ T53] usb 7-1: USB disconnect, device number 6 [ 266.544535][T14546] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 266.546647][T14546] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 266.549312][T14546] vhci_hcd vhci_hcd.0: Device attached [ 266.554099][T14546] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(8) [ 266.556235][T14546] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 266.558688][T14546] vhci_hcd vhci_hcd.0: Device attached [ 266.561077][T14546] trusted_key: encrypted_key: keylen parameter is missing [ 266.565475][T14549] vhci_hcd: connection closed [ 266.565986][T14547] vhci_hcd: connection closed [ 266.568544][ T7701] vhci_hcd vhci_hcd.6: stop threads [ 266.572131][ T7701] vhci_hcd vhci_hcd.6: release socket [ 266.576481][ T7701] vhci_hcd vhci_hcd.6: disconnect device [ 266.579015][ T7701] vhci_hcd vhci_hcd.6: stop threads [ 266.581139][ T7701] vhci_hcd vhci_hcd.6: release socket [ 266.584177][ T7701] vhci_hcd vhci_hcd.6: disconnect device [ 266.602489][T10426] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 266.672340][ T53] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 266.675056][T14552] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 266.714491][T14555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1848'. [ 266.718376][T14555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1848'. [ 266.722517][T14530] vhci_hcd: connection reset by peer [ 266.724976][T12432] vhci_hcd vhci_hcd.0: stop threads [ 266.726694][T12432] vhci_hcd vhci_hcd.0: release socket [ 266.728767][T12432] vhci_hcd vhci_hcd.0: disconnect device [ 266.823833][ T53] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 266.828748][ T53] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 266.833564][ T53] usb 7-1: config 0 interface 0 has no altsetting 0 [ 266.839144][ T53] usb 7-1: string descriptor 0 read error: -22 [ 266.841253][ T53] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 266.845312][ T53] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 266.850261][ T53] usb 7-1: config 0 descriptor?? [ 266.854012][ T53] hub 7-1:0.0: bad descriptor, ignoring hub [ 266.856246][ T53] hub 7-1:0.0: probe with driver hub failed with error -5 [ 266.860994][ T53] usb 7-1: selecting invalid altsetting 0 [ 266.965112][T14570] netlink: 'syz.1.1852': attribute type 13 has an invalid length. [ 266.977403][T14570] gretap0: refused to change device tx_queue_len [ 266.979493][T14570] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 267.053142][T14575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1854'. [ 267.062509][T10525] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 267.081624][T14575] netlink: 'syz.1.1854': attribute type 5 has an invalid length. [ 267.232629][T10525] usb 5-1: Using ep0 maxpacket: 8 [ 267.235876][T10525] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 267.238416][T10525] usb 5-1: config 0 has no interface number 0 [ 267.240762][T10525] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 267.244603][T10525] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 267.248405][T10525] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 267.251825][T10525] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 267.256177][T10525] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 267.259091][T10525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.269048][T10525] usb 5-1: config 0 descriptor?? [ 267.278872][T10525] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 267.476814][T14562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.478558][T14616] autofs: Bad value for 'fd' [ 267.480970][T14562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.490545][T14562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.496773][T14562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.501619][T14562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.509441][T14562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.514309][T14562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.518314][T14562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.521458][T14562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.535715][T14562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.546924][T14621] input: syz1 as /devices/virtual/input/input20 [ 267.563931][T14562] veth1_macvtap: left promiscuous mode [ 267.566389][T14562] macsec0: entered promiscuous mode [ 267.568773][T14562] macsec0: entered allmulticast mode [ 267.576857][T14621] input: syz1 as /devices/virtual/input/input21 [ 267.614351][T11027] usb 5-1: USB disconnect, device number 25 [ 267.627117][T11027] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 267.907965][T14663] fuse: Bad value for 'fd' [ 267.925561][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1870'. [ 268.078119][T14674] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1872'. [ 268.112423][ T1333] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 268.115686][T14676] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.158475][T14676] bridge_slave_0 (unregistering): left allmulticast mode [ 268.160920][T14676] bridge_slave_0 (unregistering): left promiscuous mode [ 268.163773][T14676] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.248796][T14688] loop5: detected capacity change from 0 to 4095 [ 268.282315][ T1333] usb 5-1: Using ep0 maxpacket: 8 [ 268.289294][ T1333] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.295735][ T1333] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.302227][T14692] binder: BINDER_SET_CONTEXT_MGR already set [ 268.304241][T14692] binder: 14691:14692 ioctl 4018620d 200000000040 returned -16 [ 268.316375][ T1333] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 268.320117][ T1333] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 268.323739][ T1333] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.328060][ T1333] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 268.330877][ T1333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.379954][ T10] usb 7-1: USB disconnect, device number 7 [ 268.506241][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1883'. [ 268.546792][ T1333] usb 5-1: GET_CAPABILITIES returned 0 [ 268.549241][ T1333] usbtmc 5-1:16.0: can't read capabilities [ 268.700539][T14719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.752323][ T1333] usb 5-1: USB disconnect, device number 26 [ 269.175296][T14736] netlink: 'syz.6.1891': attribute type 4 has an invalid length. [ 269.187927][T14736] netlink: 'syz.6.1891': attribute type 4 has an invalid length. [ 269.371132][T14743] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 269.522851][T14748] netlink: 'syz.6.1895': attribute type 1 has an invalid length. [ 269.536974][T14748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.539739][T14748] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 269.545971][T14748] bond1: entered allmulticast mode [ 269.555940][T14748] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 269.611000][T14763] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 269.694460][T14772] overlayfs: conflicting lowerdir path [ 269.831928][T14777] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 269.853457][ T6019] IPVS: starting estimator thread 0... [ 269.886602][T14785] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14785 comm=syz.0.1905 [ 269.893356][T14785] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1542 sclass=netlink_tcpdiag_socket pid=14785 comm=syz.0.1905 [ 269.897655][T14785] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14785 comm=syz.0.1905 [ 269.963163][T14782] IPVS: using max 43 ests per chain, 103200 per kthread [ 270.129300][ T40] kauditd_printk_skb: 447 callbacks suppressed [ 270.129310][ T40] audit: type=1400 audit(1769359432.887:36466): avc: denied { write } for pid=14798 comm="syz.6.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 270.141018][T14799] netlink: 'syz.6.1909': attribute type 10 has an invalid length. [ 270.249295][T14804] netlink: 'syz.6.1910': attribute type 15 has an invalid length. [ 270.315658][ T40] audit: type=1400 audit(1769359433.077:36467): avc: denied { setopt } for pid=14802 comm="syz.6.1910" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 270.398982][ T40] audit: type=1400 audit(1769359433.157:36468): avc: denied { read } for pid=14805 comm="syz.6.1911" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 270.407990][ T40] audit: type=1400 audit(1769359433.157:36469): avc: denied { open } for pid=14805 comm="syz.6.1911" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 270.416259][ T40] audit: type=1400 audit(1769359433.177:36470): avc: denied { ioctl } for pid=14805 comm="syz.6.1911" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 270.424767][ T40] audit: type=1400 audit(1769359433.177:36471): avc: denied { write } for pid=14805 comm="syz.6.1911" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 270.432986][ T40] audit: type=1400 audit(1769359433.177:36472): avc: denied { map } for pid=14805 comm="syz.6.1911" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 270.464629][ T40] audit: type=1400 audit(1769359433.227:36473): avc: denied { bind } for pid=14807 comm="syz.6.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 270.471184][ T40] audit: type=1400 audit(1769359433.227:36474): avc: denied { listen } for pid=14807 comm="syz.6.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 270.477706][ T40] audit: type=1400 audit(1769359433.237:36475): avc: denied { create } for pid=14807 comm="syz.6.1912" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 270.588229][T14812] netlink: 'syz.6.1914': attribute type 1 has an invalid length. [ 270.605526][T14812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.612441][T14812] bond2: option tlb_dynamic_lb: unable to set because the bond device is up [ 270.646199][T14812] kvm: pic: non byte write [ 271.072790][ T1333] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 271.223255][ T1333] usb 5-1: Using ep0 maxpacket: 8 [ 271.228156][ T1333] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 271.232196][ T1333] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 271.236369][ T1333] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.241141][ T1333] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.246816][ T1333] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 271.250545][ T1333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.320708][T14826] netlink: 'syz.6.1918': attribute type 1 has an invalid length. [ 271.460087][ T1333] usb 5-1: usb_control_msg returned -32 [ 271.461466][T14829] sysfs: Unknown parameter 'fd' [ 271.463044][ T1333] usbtmc 5-1:16.0: can't read capabilities [ 271.496858][ T6019] usb 5-1: USB disconnect, device number 27 [ 271.556122][T14831] veth3: entered promiscuous mode [ 271.692582][T10426] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 271.819997][ T6007] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 271.823280][ T6007] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 271.826374][ T6007] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 271.829615][ T6007] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 271.833045][ T6007] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 271.836164][ T6007] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 271.839281][ T6007] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 271.843163][ T6007] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 271.846251][ T6007] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 271.849356][ T6007] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 271.880751][ T6007] hid-generic 0005:00B6:0009.0004: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 271.927350][T14843] fido_id[14843]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 271.944046][ T1333] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 271.996089][T14852] netlink: 'syz.1.1925': attribute type 3 has an invalid length. [ 271.998958][T14852] __nla_validate_parse: 7 callbacks suppressed [ 271.998967][T14852] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1925'. [ 272.094788][ T1333] usb 7-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 272.095512][T14861] netlink: 'syz.1.1930': attribute type 11 has an invalid length. [ 272.099187][ T1333] usb 7-1: config 0 interface 0 has no altsetting 0 [ 272.116206][ T1333] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 272.121172][ T1333] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 272.127042][ T1333] usb 7-1: Product: syz [ 272.129091][ T1333] usb 7-1: Manufacturer: syz [ 272.131199][ T1333] usb 7-1: SerialNumber: syz [ 272.138717][ T1333] usb 7-1: config 0 descriptor?? [ 272.141811][T14839] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 272.151848][ T1333] usb 7-1: selecting invalid altsetting 0 [ 272.347974][T14839] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 272.350975][T14839] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 272.354917][T14839] netlink: 'syz.2.1922': attribute type 10 has an invalid length. [ 272.365018][ T6007] usb 7-1: USB disconnect, device number 8 [ 272.438731][T14889] sp0: Synchronizing with TNC [ 272.548056][T14898] hugetlbfs: Unknown parameter 'sizeR {Vҁ' [ 272.768548][T11027] hid-generic 0005:0003:0008.0005: item fetching failed at offset 10/173 [ 272.778615][T11027] hid-generic 0005:0003:0008.0005: probe with driver hid-generic failed with error -22 [ 273.138361][T14883] [U] [ 273.328605][T14919] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 273.345189][T14922] nbd: must specify at least one socket [ 273.411166][T14927] veth1_to_bond: entered allmulticast mode [ 273.415267][T14926] veth1_to_bond: left allmulticast mode [ 273.420342][T14928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1947'. [ 273.469528][T14931] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 273.548601][T14935] Cannot find del_set index 4 as target [ 273.788575][T14950] XFS (nbd2): SB validate failed with error -5. [ 273.832798][T14950] openvswitch: netlink: Key type 31 is not supported [ 273.844157][T14950] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1955'. [ 273.870512][T14950] bridge0: port 3(syz_tun) entered disabled state [ 273.873601][T14950] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.877199][T14950] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.012538][ T9657] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 274.143071][ T9657] usb 6-1: device descriptor read/64, error -71 [ 274.169809][T14973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1962'. [ 274.219102][T14975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1963'. [ 274.299973][T14982] netlink: 'syz.2.1965': attribute type 63 has an invalid length. [ 274.305256][T14982] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1965'. [ 274.308894][T14982] gretap0: entered allmulticast mode [ 274.311461][T14982] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 274.390924][T14987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1967'. [ 274.402466][ T9657] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 274.542461][ T9657] usb 6-1: device descriptor read/64, error -71 [ 274.589416][T15003] bridge0: port 3(syz_tun) entered blocking state [ 274.592171][T15003] bridge0: port 3(syz_tun) entered listening state [ 274.594990][T15003] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.597921][T15003] bridge0: port 2(bridge_slave_1) entered listening state [ 274.601056][T15003] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.604287][T15003] bridge0: port 1(bridge_slave_0) entered listening state [ 274.611796][T15003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.650100][T15005] nbd: must specify at least one socket [ 274.653147][ T9657] usb usb6-port1: attempt power cycle [ 274.707290][T15002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1972'. [ 274.756907][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1975'. [ 274.760417][T15013] openvswitch: netlink: Flow actions attr not present in new flow. [ 274.763772][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1975'. [ 274.767579][T15013] openvswitch: netlink: Flow actions attr not present in new flow. [ 274.771109][T15013] openvswitch: netlink: Flow actions attr not present in new flow. [ 274.776899][T15013] openvswitch: netlink: Flow actions attr not present in new flow. [ 274.780378][T15013] openvswitch: netlink: Flow actions attr not present in new flow. [ 274.785201][T15013] openvswitch: netlink: Flow actions attr not present in new flow. [ 274.881956][T15017] Invalid logical block size (6) [ 275.024731][T15029] netlink: 'syz.2.1981': attribute type 1 has an invalid length. [ 275.028506][T15029] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 275.033240][ T9657] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 275.063559][ T9657] usb 6-1: device descriptor read/8, error -71 [ 275.136326][ T40] kauditd_printk_skb: 417 callbacks suppressed [ 275.136343][ T40] audit: type=1400 audit(1769359437.897:36893): avc: denied { ioctl } for pid=15041 comm="syz.0.1985" path="socket:[68167]" dev="sockfs" ino=68167 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 275.150689][ T40] audit: type=1400 audit(1769359437.897:36894): avc: denied { mount } for pid=15041 comm="syz.0.1985" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 275.190342][ T40] audit: type=1400 audit(1769359437.947:36895): avc: denied { mounton } for pid=15041 comm="syz.0.1985" path="/118/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 275.202598][ T40] audit: type=1400 audit(1769359437.967:36896): avc: denied { bind } for pid=15045 comm="syz.2.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 275.210997][ T40] audit: type=1400 audit(1769359437.967:36897): avc: denied { unmount } for pid=12897 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 275.240820][ T40] audit: type=1400 audit(1769359437.997:36898): avc: denied { mount } for pid=15051 comm="syz.0.1987" name="/" dev="9p" ino=72614077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 275.244992][T15052] netfs: Duplicate cookie detected [ 275.252494][T15052] netfs: O-cookie c=00000008 [fl=4008 na=0 nA=0 s=-] [ 275.254801][T15052] netfs: O-cookie V=0000000b [9p,syz,] [ 275.254816][ T40] audit: type=1400 audit(1769359437.997:36899): avc: denied { remove_name } for pid=15051 comm="syz.0.1987" name="file1" dev="9p" ino=72614155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 275.256666][T15052] netfs: O-key=[8] '0901540400000000' [ 275.266231][T15054] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 275.267771][T15052] netfs: N-cookie c=00000009 [fl=8 na=0 nA=0 s=-] [ 275.268033][ T40] audit: type=1400 audit(1769359437.997:36900): avc: denied { unlink } for pid=15051 comm="syz.0.1987" name="file1" dev="9p" ino=72614155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 275.268078][ T40] audit: type=1400 audit(1769359437.997:36901): avc: denied { add_name } for pid=15051 comm="syz.0.1987" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 275.268114][ T40] audit: type=1400 audit(1769359438.007:36902): avc: denied { create } for pid=15051 comm="syz.0.1987" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 275.293490][T15052] netfs: N-cookie V=0000000b [9p,syz,] [ 275.295431][T15052] netfs: N-key=[8] '0901540400000000' [ 275.332497][ T9657] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 275.353428][ T9657] usb 6-1: device descriptor read/8, error -71 [ 275.411926][ T9] libceph: connect (1)[c::]:6789 error -101 [ 275.414806][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 275.463398][ T9657] usb usb6-port1: unable to enumerate USB device [ 275.513754][T15071] bond0: entered promiscuous mode [ 275.515884][T15071] bond_slave_0: entered promiscuous mode [ 275.518367][T15071] bond_slave_1: entered promiscuous mode [ 275.672679][ T9657] libceph: connect (1)[c::]:6789 error -101 [ 275.674728][ T9657] libceph: mon0 (1)[c::]:6789 connect error [ 276.194455][ T9] libceph: connect (1)[c::]:6789 error -101 [ 276.197097][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 276.222415][T15061] ceph: No mds server is up or the cluster is laggy [ 276.298194][T15076] overlayfs: failed to resolve './file1/file0': -2 [ 276.306470][T15077] binder: BINDER_SET_CONTEXT_MGR already set [ 276.308895][T15077] binder: 15074:15077 ioctl 4018620d 200000000040 returned -16 [ 276.351165][T15084] netlink: 'syz.0.1996': attribute type 12 has an invalid length. [ 276.601469][T15094] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.604067][T15094] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.615633][T15094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15094 comm=syz.0.2001 [ 276.662372][ C3] bridge0: port 1(bridge_slave_0) entered learning state [ 276.665545][ C3] bridge0: port 2(bridge_slave_1) entered learning state [ 276.667961][ C3] bridge0: port 3(syz_tun) entered learning state [ 276.700353][T15101] binder: BINDER_SET_CONTEXT_MGR already set [ 276.703385][T15101] binder: 15098:15101 ioctl 4018620d 200000000040 returned -16 [ 276.745789][T15105] fuse: Bad value for 'fd' [ 276.749432][T15105] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 276.752443][T15105] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 276.869655][T15124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15124 comm=syz.1.2011 [ 277.042002][T15131] vcan0: tx address claim with dlc 0 [ 277.087652][T15133] syzkaller0: entered promiscuous mode [ 277.090110][T15133] syzkaller0: entered allmulticast mode [ 277.137190][T15133] tipc: Started in network mode [ 277.139462][T15133] tipc: Node identity 668b98c40f92, cluster identity 4711 [ 277.142921][T15133] tipc: Enabled bearer , priority 0 [ 277.150861][T15132] tipc: Resetting bearer [ 277.164661][T15132] tipc: Disabling bearer [ 277.174594][T10426] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 277.324361][T10426] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 277.328084][T10426] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.332556][T10426] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 277.336468][T10426] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.341121][T10426] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.347002][T10426] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 277.350832][T10426] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 277.354389][T10426] usb 5-1: Product: syz [ 277.356221][T10426] usb 5-1: Manufacturer: syz [ 277.366218][T10426] cdc_wdm 5-1:1.0: skipping garbage [ 277.368585][T10426] cdc_wdm 5-1:1.0: skipping garbage [ 277.380260][T10426] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 277.383030][T10426] cdc_wdm 5-1:1.0: Unknown control protocol [ 277.564474][T15126] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 277.657121][ T9] usb 5-1: USB disconnect, device number 28 [ 278.240409][T15171] __nla_validate_parse: 41 callbacks suppressed [ 278.240428][T15171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2025'. [ 278.246707][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2025'. [ 278.249614][T15171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2025'. [ 278.257173][T15171] netlink: 210960 bytes leftover after parsing attributes in process `syz.1.2025'. [ 278.350096][T15177] overlayfs: missing 'lowerdir' [ 278.397258][T15180] fuse: Unknown parameter 'fd0x0000000000000004' [ 278.400309][T15180] fuse: Unknown parameter 'fd0x0000000000000004' [ 278.403193][T15180] fuse: Unknown parameter 'fd0x0000000000000004' [ 278.742486][ C3] bridge0: port 3(syz_tun) entered forwarding state [ 278.745330][ C3] bridge0: topology change detected, propagating [ 278.748342][ C3] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.751203][ C3] bridge0: topology change detected, propagating [ 278.754042][ C3] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.757009][ C3] bridge0: topology change detected, propagating [ 279.150920][T15190] netlink: 'syz.0.2032': attribute type 21 has an invalid length. [ 279.629510][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2037'. [ 280.198435][ T40] kauditd_printk_skb: 196 callbacks suppressed [ 280.198452][ T40] audit: type=1400 audit(1769359442.957:37099): avc: denied { map_create } for pid=15224 comm="syz.2.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 280.405703][ T40] audit: type=1400 audit(1769359443.167:37100): avc: denied { name_bind } for pid=15227 comm="syz.1.2044" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 280.420381][ T40] audit: type=1400 audit(1769359443.177:37101): avc: denied { ioctl } for pid=15227 comm="syz.1.2044" path="socket:[66442]" dev="sockfs" ino=66442 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 280.476265][T15235] usb usb8: usbfs: process 15235 (syz.0.2047) did not claim interface 0 before use [ 280.486529][ T40] audit: type=1400 audit(1769359443.247:37102): avc: denied { create } for pid=15234 comm="syz.0.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 280.494730][ T40] audit: type=1400 audit(1769359443.247:37103): avc: denied { setopt } for pid=15234 comm="syz.0.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 280.494783][ T40] audit: type=1400 audit(1769359443.247:37104): avc: denied { map } for pid=15234 comm="syz.0.2047" path="socket:[68466]" dev="sockfs" ino=68466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 280.511868][ T40] audit: type=1400 audit(1769359443.247:37105): avc: denied { read accept } for pid=15234 comm="syz.0.2047" path="socket:[68466]" dev="sockfs" ino=68466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 280.554601][T15239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2048'. [ 280.557472][T15239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2048'. [ 280.608810][ T40] audit: type=1400 audit(1769359443.367:37106): avc: denied { read } for pid=15244 comm="syz.0.2050" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 280.619506][ T40] audit: type=1400 audit(1769359443.367:37107): avc: denied { open } for pid=15244 comm="syz.0.2050" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 280.630952][ T40] audit: type=1400 audit(1769359443.367:37108): avc: denied { ioctl } for pid=15244 comm="syz.0.2050" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64bf scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 280.711270][T15247] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2051'. [ 280.717004][T15247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2051'. [ 280.819776][T15250] overlay: ./file0 is not a directory [ 280.934162][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2052'. [ 281.032786][T15256] loop4: detected capacity change from 0 to 7 [ 281.146082][T14459] Dev loop4: unable to read RDB block 7 [ 281.148017][T14459] loop4: unable to read partition table [ 281.149891][T14459] loop4: partition table beyond EOD, truncated [ 281.254447][T15256] Dev loop4: unable to read RDB block 7 [ 281.256307][T15256] loop4: unable to read partition table [ 281.258211][T15256] loop4: partition table beyond EOD, truncated [ 281.260319][T15256] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 281.295260][T15273] binder: BINDER_SET_CONTEXT_MGR already set [ 281.297880][T15273] binder: 15272:15273 ioctl 4018620d 200000000040 returned -16 [ 281.451399][T15292] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 281.549439][T15298] xt_hashlimit: size too large, truncated to 1048576 [ 281.571460][T15300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15300 comm=syz.1.2067 [ 281.619202][T15303] netlink: 'syz.1.2068': attribute type 8 has an invalid length. [ 281.685077][T15305] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 281.774664][T15310] digital: digital_start_poll: Unknown protocol [ 281.781510][T15311] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 281.860418][T15320] pim6reg: entered allmulticast mode [ 281.898234][T15326] loop9: detected capacity change from 0 to 7 [ 281.907780][T14459] Dev loop9: unable to read RDB block 7 [ 281.909734][T14459] loop9: unable to read partition table [ 281.911688][T14459] loop9: partition table beyond EOD, truncated [ 281.914892][T15328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15328 comm=syz.0.2076 [ 281.929186][T15326] Dev loop9: unable to read RDB block 7 [ 281.931359][T15326] loop9: unable to read partition table [ 281.937147][T15326] loop9: partition table beyond EOD, truncated [ 281.940470][T15326] loop_reread_partitions: partition scan of loop9 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 282.097803][T15338] netlink: 'syz.1.2079': attribute type 2 has an invalid length. [ 282.331450][T15360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15360 comm=syz.1.2087 [ 282.452332][ T1333] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 282.487270][T15362] netlink: 'syz.1.2088': attribute type 11 has an invalid length. [ 282.490608][T15362] netlink: 'syz.1.2088': attribute type 11 has an invalid length. [ 282.522038][T15367] bond4 (unregistering): Released all slaves [ 282.582499][ T1333] usb 7-1: device descriptor read/64, error -71 [ 282.584259][T15370] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 282.773955][T15385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15385 comm=syz.1.2096 [ 282.832532][ T1333] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 282.972421][ T1333] usb 7-1: device descriptor read/64, error -71 [ 283.027022][T15402] binder: Bad value for 'max' [ 283.082565][ T1333] usb usb7-port1: attempt power cycle [ 283.102813][T11027] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 283.237633][T15411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15411 comm=syz.0.2105 [ 283.274927][T15413] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 283.275757][T11027] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 283.278678][T15413] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 283.286477][T11027] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 283.290852][T11027] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 283.296337][T11027] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 283.300938][T11027] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 283.307541][T11027] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 283.312152][T11027] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 283.315789][T11027] usb 6-1: Product: syz [ 283.317660][T11027] usb 6-1: Manufacturer: syz [ 283.326239][T11027] cdc_wdm 6-1:1.0: skipping garbage [ 283.328466][T11027] cdc_wdm 6-1:1.0: skipping garbage [ 283.332768][T11027] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 283.335297][T11027] cdc_wdm 6-1:1.0: Unknown control protocol [ 283.350049][T15415] __nla_validate_parse: 8 callbacks suppressed [ 283.350061][T15415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2107'. [ 283.422391][ T1333] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 283.442888][ T1333] usb 7-1: device descriptor read/8, error -71 [ 283.538595][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 283.540271][ T9657] usb 6-1: USB disconnect, device number 21 [ 283.541455][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 283.546069][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 283.682540][ T1333] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 283.714561][ T1333] usb 7-1: device descriptor read/8, error -71 [ 283.822538][ T1333] usb usb7-port1: unable to enumerate USB device [ 284.254119][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2112'. [ 284.280816][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2113'. [ 284.730999][ T9657] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 284.884682][ T9657] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 284.888471][ T9657] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 284.892853][ T9657] usb 5-1: config 0 interface 0 has no altsetting 0 [ 284.897867][ T9657] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 284.901931][ T9657] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 284.905612][ T9657] usb 5-1: Product: syz [ 284.907501][ T9657] usb 5-1: Manufacturer: syz [ 284.909561][ T9657] usb 5-1: SerialNumber: syz [ 284.922865][ T9657] usb 5-1: config 0 descriptor?? [ 284.927314][ T9657] hub 5-1:0.0: bad descriptor, ignoring hub [ 284.929904][ T9657] hub 5-1:0.0: probe with driver hub failed with error -5 [ 284.936876][ T9657] usb 5-1: selecting invalid altsetting 0 [ 284.946719][T15481] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 284.961511][T15481] kvm: pic: non byte read [ 285.163890][T15489] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2127'. [ 285.216596][ T40] kauditd_printk_skb: 280 callbacks suppressed [ 285.216612][ T40] audit: type=1400 audit(1769359447.977:37389): avc: denied { create } for pid=15490 comm="syz.1.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 285.241431][ T40] audit: type=1400 audit(1769359447.977:37390): avc: denied { getopt } for pid=15490 comm="syz.1.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 285.251942][ T40] audit: type=1400 audit(1769359447.977:37391): avc: denied { read } for pid=15490 comm="syz.1.2128" dev="nsfs" ino=4026532994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 285.264574][ T40] audit: type=1400 audit(1769359447.977:37392): avc: denied { open } for pid=15490 comm="syz.1.2128" path="net:[4026532994]" dev="nsfs" ino=4026532994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 285.276375][ T40] audit: type=1400 audit(1769359448.007:37393): avc: denied { create } for pid=15490 comm="syz.1.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 285.284318][ T40] audit: type=1400 audit(1769359448.007:37394): avc: denied { shutdown } for pid=15490 comm="syz.1.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 285.289870][T15493] loop4: detected capacity change from 0 to 7 [ 285.290711][ T40] audit: type=1400 audit(1769359448.047:37395): avc: denied { read } for pid=15492 comm="syz.2.2130" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 285.299147][T15495] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2129'. [ 285.301259][ T40] audit: type=1400 audit(1769359448.047:37396): avc: denied { read open } for pid=15492 comm="syz.2.2130" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 285.307311][T15495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15495 comm=syz.1.2129 [ 285.313021][ T40] audit: type=1400 audit(1769359448.047:37397): avc: denied { ioctl } for pid=15492 comm="syz.2.2130" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 285.321222][T15495] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2129'. [ 285.327957][ T40] audit: type=1400 audit(1769359448.047:37398): avc: denied { read } for pid=15492 comm="syz.2.2130" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.472407][T15463] usb 5-1: reset high-speed USB device number 29 using dummy_hcd [ 285.523854][T15507] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2133'. [ 285.559141][T15506] ceph: No source [ 285.570774][T15493] Dev loop4: unable to read RDB block 7 [ 285.573254][T15493] loop4: unable to read partition table [ 285.575710][T15493] loop4: partition table beyond EOD, truncated [ 285.580931][T15493] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 285.622397][T15463] usb 5-1: device descriptor read/64, error -71 [ 285.837528][T15524] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2139'. [ 285.841911][T15524] bridge0: port 3(syz_tun) entered disabled state [ 285.844810][T15524] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.847857][T15524] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.864184][T15524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15524 comm=syz.2.2139 [ 285.869442][T15524] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2139'. [ 285.873467][T15463] usb 5-1: reset high-speed USB device number 29 using dummy_hcd [ 285.878310][T15526] netlink: 'syz.1.2140': attribute type 4 has an invalid length. [ 285.883565][T15526] netlink: 'syz.1.2140': attribute type 4 has an invalid length. [ 285.940960][T15530] syzkaller0: entered promiscuous mode [ 285.942915][T15530] syzkaller0: entered allmulticast mode [ 286.000030][ T1151] Bluetooth: hci0: Frame reassembly failed (-84) [ 286.005763][T15463] usb 5-1: device descriptor read/64, error -71 [ 286.008545][T15530] Bluetooth: hci0: Frame reassembly failed (-84) [ 286.252388][ T6007] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 286.252392][T15463] usb 5-1: reset high-speed USB device number 29 using dummy_hcd [ 286.273464][T15463] usb 5-1: device descriptor read/8, error -71 [ 286.402845][ T6007] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 286.406172][ T6007] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.409476][ T6007] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.413055][ T6007] usb 7-1: config 0 interface 0 has no altsetting 0 [ 286.415941][ T6007] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.419096][ T6007] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.423279][ T6007] usb 7-1: config 0 interface 0 has no altsetting 0 [ 286.426164][ T6007] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.429228][ T6007] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.432811][ T6007] usb 7-1: config 0 interface 0 has no altsetting 0 [ 286.436000][ T6007] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.439730][ T6007] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.444369][ T6007] usb 7-1: config 0 interface 0 has no altsetting 0 [ 286.448220][ T6007] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.451972][ T6007] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.456536][ T6007] usb 7-1: config 0 interface 0 has no altsetting 0 [ 286.460641][ T6007] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.463662][ T6007] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.467075][ T6007] usb 7-1: config 0 interface 0 has no altsetting 0 [ 286.470592][ T6007] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.474595][ T6007] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.478965][ T6007] usb 7-1: config 0 interface 0 has no altsetting 0 [ 286.484402][ T6007] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.488017][ T6007] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.492500][ T6007] usb 7-1: config 0 interface 0 has no altsetting 0 [ 286.497237][ T6007] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 286.500909][ T6007] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 286.504417][ T6007] usb 7-1: Product: syz [ 286.506140][ T6007] usb 7-1: Manufacturer: syz [ 286.508126][ T6007] usb 7-1: SerialNumber: syz [ 286.512041][ T6007] usb 7-1: config 0 descriptor?? [ 286.517365][ T6007] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 286.522675][T15463] usb 5-1: reset high-speed USB device number 29 using dummy_hcd [ 286.543614][T15463] usb 5-1: device descriptor read/8, error -71 [ 286.653630][ T4166] usb 5-1: USB disconnect, device number 29 [ 286.820434][ C3] usb 7-1: yurex_control_callback - control failed: -71 [ 286.826001][ T6007] usb 7-1: USB disconnect, device number 13 [ 286.829915][ T4166] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 286.832848][T15542] yurex 7-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 286.833780][ T6007] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 286.972404][ T4166] usb 5-1: device descriptor read/64, error -71 [ 287.212374][ T4166] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 287.342400][ T4166] usb 5-1: device descriptor read/64, error -71 [ 287.452594][ T4166] usb usb5-port1: attempt power cycle [ 287.713445][T15550] net_ratelimit: 29 callbacks suppressed [ 287.713456][T15550] sock: sock_set_timeout: `syz.0.2147' (pid 15550) tries to set negative timeout [ 287.721990][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2148'. [ 287.745410][T15552] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 287.841157][T15560] bond4: Removing last arp target with arp_interval on [ 287.849701][T15560] Invalid argument reading file caps for ./file0 [ 287.878954][T15558] macsec1: entered promiscuous mode [ 287.881303][T15558] macsec1: entered allmulticast mode [ 287.883599][T15558] veth1_macvtap: entered allmulticast mode [ 287.888130][T15558] veth1_macvtap: left allmulticast mode [ 287.888272][T15565] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 287.997409][T15567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15567 comm=syz.2.2153 [ 288.022419][ T5945] Bluetooth: hci0: command 0x1003 tx timeout [ 288.024699][ T5940] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 288.138463][T15574] geneve2: entered promiscuous mode [ 288.142088][T12432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.152343][T12432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.156076][T12432] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.159930][T12432] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.226714][T15581] --map-set only usable from mangle table [ 288.233046][T15578] 8021q: VLANs not supported on ip6_vti0 [ 288.527791][T15594] __nla_validate_parse: 3 callbacks suppressed [ 288.527803][T15594] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2163'. [ 288.546801][T15594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15594 comm=syz.1.2163 [ 288.550775][T15594] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2163'. [ 288.635939][T15602] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2165'. [ 288.644092][T15602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2165'. [ 288.807675][T15616] 9pnet_virtio: no channels available for device syz [ 288.938998][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 288.944275][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 288.947482][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 288.950521][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 288.954636][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 289.079125][T15623] chnl_net:caif_netlink_parms(): no params data found [ 289.097083][T15634] cgroup: subsys name conflicts with all [ 289.162370][T10426] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 289.207453][T15623] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.209721][T15623] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.211922][T15623] bridge_slave_0: entered allmulticast mode [ 289.214308][T15639] vxfs: unable to read disk superblock at 1 [ 289.214862][T15623] bridge_slave_0: entered promiscuous mode [ 289.218201][T15639] vxfs: unable to read disk superblock at 8 [ 289.220369][T15623] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.221433][T15639] vxfs: can't find superblock. [ 289.224238][T15623] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.228036][T15623] bridge_slave_1: entered allmulticast mode [ 289.230707][T15623] bridge_slave_1: entered promiscuous mode [ 289.250873][T15623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.255517][T15623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.271293][T15623] team0: Port device team_slave_0 added [ 289.274597][T15623] team0: Port device team_slave_1 added [ 289.294236][T15623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.296423][T15623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.304206][T15623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.308552][T15623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.310592][T15623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.313057][T10426] usb 7-1: Using ep0 maxpacket: 32 [ 289.319305][T15623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.327697][T10426] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 289.333436][T10426] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 289.339754][T10426] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 289.342876][T10426] usb 7-1: Product: syz [ 289.344283][T10426] usb 7-1: Manufacturer: syz [ 289.345801][T10426] usb 7-1: SerialNumber: syz [ 289.359986][T10426] usb 7-1: config 0 descriptor?? [ 289.363912][T15622] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 289.479533][T12432] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.483637][T12432] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.516830][T15623] hsr_slave_0: entered promiscuous mode [ 289.519830][T15623] hsr_slave_1: entered promiscuous mode [ 289.521963][T15623] debugfs: 'hsr0' already exists in 'hsr' [ 289.524069][T15623] Cannot create hsr debugfs directory [ 289.577690][T15622] netlink: 'syz.2.2173': attribute type 1 has an invalid length. [ 289.585904][T15622] veth0_to_bond: left allmulticast mode [ 289.692831][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2173'. [ 289.694465][T12432] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.697374][T15646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2173'. [ 289.700494][T12432] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.715658][ T53] usb 7-1: USB disconnect, device number 14 [ 289.827007][T12432] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.830375][T12432] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.916840][T15655] 9pnet_virtio: no channels available for device syz [ 289.945157][T12432] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.949122][T12432] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.017352][T15663] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 290.103344][T15666] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2179'. [ 290.228988][ T40] kauditd_printk_skb: 243 callbacks suppressed [ 290.229001][ T40] audit: type=1400 audit(1769359452.987:37642): avc: denied { read } for pid=15681 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.241127][ T40] audit: type=1400 audit(1769359452.997:37643): avc: denied { setopt } for pid=15675 comm="syz.0.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 290.249617][ T40] audit: type=1400 audit(1769359452.997:37644): avc: denied { map_create } for pid=15675 comm="syz.0.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 290.272983][T12432] bridge_slave_1: left allmulticast mode [ 290.275049][T12432] bridge_slave_1: left promiscuous mode [ 290.276930][T12432] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.280984][ T40] audit: type=1400 audit(1769359453.037:37645): avc: denied { create } for pid=15686 comm="syz.0.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 290.304042][ T40] audit: type=1400 audit(1769359453.047:37646): avc: denied { bind } for pid=15686 comm="syz.0.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 290.311121][ T40] audit: type=1400 audit(1769359453.047:37647): avc: denied { accept } for pid=15686 comm="syz.0.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 290.326106][ T40] audit: type=1400 audit(1769359453.047:37648): avc: denied { read } for pid=15686 comm="syz.0.2183" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 290.357395][T15697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15697 comm=syz.1.2186 [ 290.359362][ T40] audit: type=1400 audit(1769359453.047:37649): avc: denied { open } for pid=15686 comm="syz.0.2183" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 290.382334][ T40] audit: type=1400 audit(1769359453.047:37650): avc: denied { ioctl } for pid=15686 comm="syz.0.2183" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 290.389653][ T40] audit: type=1400 audit(1769359453.047:37651): avc: denied { set_context_mgr } for pid=15686 comm="syz.0.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 290.463674][T15709] tmpfs: Unknown parameter 'grpquota_block_hardlimio' [ 290.520555][T12432] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 290.788553][T12432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.793013][T12432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.796738][T12432] bond0 (unregistering): Released all slaves [ 290.886745][T12432] bond1 (unregistering): Released all slaves [ 290.922487][T10305] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 290.979050][T12432] bond2 (unregistering): Released all slaves [ 290.982501][ T5940] Bluetooth: hci0: command tx timeout [ 290.985817][T12432] bond3 (unregistering): Released all slaves [ 291.016452][T15623] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 291.021462][T15623] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 291.053540][T15623] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 291.064807][T15623] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 291.084487][T12432] tipc: Disabling bearer [ 291.086480][T12432] tipc: Left network mode [ 291.088009][T10305] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 291.091602][T10305] usb 6-1: config 0 has no interface number 0 [ 291.112372][T10305] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 291.117373][T10305] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 291.121633][T10305] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 291.134440][T10305] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 291.138367][T10305] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 291.141700][T10305] usb 6-1: Product: syz [ 291.143930][T10305] usb 6-1: SerialNumber: syz [ 291.153621][T10305] usb 6-1: config 0 descriptor?? [ 291.159156][T10305] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 291.165948][T10305] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input23 [ 291.243602][T15623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.258121][T15623] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.279335][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.281623][ T7701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.332197][T15737] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 291.336594][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.337038][T15737] overlayfs: failed to set xattr on upper [ 291.338873][ T7701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.340694][T15737] overlayfs: ...falling back to redirect_dir=nofollow. [ 291.345310][T15737] overlayfs: ...falling back to index=off. [ 291.347350][T15737] overlayfs: ...falling back to uuid=null. [ 291.368993][T15716] netlink: 'syz.1.2190': attribute type 11 has an invalid length. [ 291.410993][T12432] hsr_slave_0: left promiscuous mode [ 291.411763][T12432] hsr_slave_1: left promiscuous mode [ 291.412401][T12432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.419181][T12432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.432839][T12432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.432855][T12432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.435539][T12432] veth1_macvtap: left promiscuous mode [ 291.435577][T12432] veth0_macvtap: left promiscuous mode [ 291.435648][T12432] veth1_vlan: left promiscuous mode [ 291.435697][T12432] veth0_vlan: left promiscuous mode [ 291.512346][ T29] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 291.524788][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.524872][ T6019] usb 6-1: USB disconnect, device number 22 [ 291.527812][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 291.538464][ T6019] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 291.642352][ T29] usb 5-1: device descriptor read/64, error -71 [ 291.882977][ T29] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 291.941367][T12432] team0 (unregistering): Port device team_slave_1 removed [ 291.989854][T12432] team0 (unregistering): Port device team_slave_0 removed [ 292.012424][ T29] usb 5-1: device descriptor read/64, error -71 [ 292.029013][T15755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15755 comm=syz.2.2195 [ 292.128078][ T29] usb usb5-port1: attempt power cycle [ 292.207005][T15766] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 292.363704][T15760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.373397][T15768] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 292.408967][T15773] fuse: Bad value for 'user_id' [ 292.410500][T15773] fuse: Bad value for 'user_id' [ 292.412452][T15773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=15773 comm=syz.2.2202 [ 292.415075][T15623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.417742][T15773] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 292.454637][T15623] veth0_vlan: entered promiscuous mode [ 292.460738][T15623] veth1_vlan: entered promiscuous mode [ 292.462772][ T29] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 292.488397][T15623] veth0_macvtap: entered promiscuous mode [ 292.491560][T15779] netlink: 'syz.2.2203': attribute type 1 has an invalid length. [ 292.492779][T15623] veth1_macvtap: entered promiscuous mode [ 292.493375][ T29] usb 5-1: device descriptor read/8, error -71 [ 292.502937][T15778] x_tables: duplicate underflow at hook 1 [ 292.508366][T15778] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2201'. [ 292.536648][T15779] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 292.546203][T15623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.570014][T15623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.579375][ T1151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.588327][ T1151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.588349][T15787] sp0: Synchronizing with TNC [ 292.620265][ T1151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.623691][ T1151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.698411][ T7701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.701002][ T7701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.734767][ T29] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 292.747676][ T7701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.750968][ T7701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.751913][T15795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15795 comm=syz.1.2206 [ 292.754311][ T29] usb 5-1: device descriptor read/8, error -71 [ 292.821211][T15803] tmpfs: Group quota inode hardlimit too large. [ 292.882697][ T29] usb usb5-port1: unable to enumerate USB device [ 292.891707][T15792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2205'. [ 292.916768][T15812] netlink: 'syz.3.2208': attribute type 14 has an invalid length. [ 292.919438][T15812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2208'. [ 292.951479][T15812] netlink: 'syz.3.2208': attribute type 14 has an invalid length. [ 292.951638][T12434] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.991096][ T7705] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.997404][ T7705] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.000613][ T7705] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.005266][T15815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10353 sclass=netlink_route_socket pid=15815 comm=syz.1.2209 [ 293.065088][ T5940] Bluetooth: hci0: command tx timeout [ 293.244788][T15839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15839 comm=syz.1.2214 [ 293.316482][T15851] CIFS mount error: No usable UNC path provided in device string! [ 293.316482][T15851] [ 293.321024][T15851] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 293.331059][T15851] overlayfs: overlapping lowerdir path [ 293.560759][T15872] __nla_validate_parse: 6 callbacks suppressed [ 293.560772][T15872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2224'. [ 293.629889][T15880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15880 comm=syz.1.2226 [ 293.685295][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.690651][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.840143][T15892] netlink: 'syz.1.2228': attribute type 1 has an invalid length. [ 294.111265][T15903] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=85 sclass=netlink_xfrm_socket pid=15903 comm=syz.1.2229 [ 294.341711][T15917] tmpfs: Cannot change global quota limit on remount [ 294.597131][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2235'. [ 294.836869][T15900] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 294.840352][T15900] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 294.892981][T15900] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 294.896727][T15900] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 294.943682][T15900] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 294.946222][T15900] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 295.006090][T15900] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 295.008636][T15900] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 295.357827][ T40] kauditd_printk_skb: 437 callbacks suppressed [ 295.357838][ T40] audit: type=1400 audit(1769359458.117:38089): avc: denied { sqpoll } for pid=15996 comm="syz.1.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 295.362545][ T29] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 295.367867][ T40] audit: type=1400 audit(1769359458.117:38090): avc: denied { create } for pid=15996 comm="syz.1.2251" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 295.376514][ T40] audit: type=1400 audit(1769359458.117:38091): avc: denied { map } for pid=15996 comm="syz.1.2251" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=73577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 295.384379][ T40] audit: type=1400 audit(1769359458.117:38092): avc: denied { read write } for pid=15996 comm="syz.1.2251" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=73577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 295.421195][ T40] audit: type=1400 audit(1769359458.177:38093): avc: denied { search } for pid=16002 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.430641][ T40] audit: type=1400 audit(1769359458.177:38094): avc: denied { search } for pid=16002 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.431763][T16004] netlink: 'syz.1.2251': attribute type 8 has an invalid length. [ 295.440725][ T40] audit: type=1400 audit(1769359458.187:38095): avc: denied { search } for pid=16002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.453612][ T40] audit: type=1400 audit(1769359458.187:38096): avc: denied { search } for pid=16002 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.465195][ T40] audit: type=1400 audit(1769359458.187:38097): avc: denied { read open } for pid=16003 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.475320][T12434] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 295.478285][ T40] audit: type=1400 audit(1769359458.187:38098): avc: denied { getattr } for pid=16003 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.479028][T12434] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 295.492128][T12434] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 295.495491][T12434] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 295.524186][ T29] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 295.528414][ T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 295.533008][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 295.536435][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 295.539481][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.547127][ T29] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 295.550766][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.554696][ T29] usb 5-1: Product: syz [ 295.556654][ T29] usb 5-1: Manufacturer: syz [ 295.558652][ T29] usb 5-1: SerialNumber: syz [ 295.573820][ T29] usb 5-1: config 0 descriptor?? [ 295.580950][ T29] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input24 [ 295.853217][ T29] usb 5-1: USB disconnect, device number 37 [ 295.926218][T16034] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2256'. [ 296.179385][T16063] binder: 16062:16063 ioctl 4018620d 0 returned -22 [ 296.194082][T16065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2258'. [ 296.313835][T16068] bond1 (unregistering): Released all slaves [ 296.378510][T16083] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2265'. [ 296.461008][T16079] ntfs3(sr0): try to read out of volume at offset 0x0 [ 296.613133][T16100] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2269'. [ 296.661587][T16103] binder: BINDER_SET_CONTEXT_MGR already set [ 296.671715][T16103] binder: 16102:16103 ioctl 4018620d 200000000040 returned -16 [ 296.816247][T16122] netlink: 171276 bytes leftover after parsing attributes in process `syz.0.2275'. [ 296.820611][T16122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2275'. [ 296.826386][T16122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2275'. [ 296.830097][T16122] netlink: 'syz.0.2275': attribute type 20 has an invalid length. [ 296.857733][T16122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2275'. [ 296.859897][ T7705] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.861426][T16122] netlink: 'syz.0.2275': attribute type 20 has an invalid length. [ 296.870725][ T7705] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.875264][ T7705] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.878758][ T7705] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.903770][T16131] CIFS mount error: No usable UNC path provided in device string! [ 296.903770][T16131] [ 296.907713][T16131] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 296.987222][T16143] binder: BINDER_SET_CONTEXT_MGR already set [ 296.989642][T16143] binder: 16142:16143 ioctl 4018620d 200000000040 returned -16 [ 297.166128][T16153] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.169634][T16153] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.219491][T16165] overlay: filesystem on ./bus is read-only [ 297.240637][T16153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.250865][T16153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.390998][ T7700] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.399324][ T7700] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.403490][ T7700] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.407185][ T7700] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.424823][ T7700] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.428414][ T7700] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.436592][ T7700] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.440012][ T7700] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.478039][T16175] binder: BINDER_SET_CONTEXT_MGR already set [ 297.479974][T16175] binder: 16174:16175 ioctl 4018620d 200000000040 returned -16 [ 297.514193][T16181] serio: Serial port ptm0 [ 297.588204][T16188] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.591290][T16188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.594713][T16188] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.597774][T16188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.613440][T16188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.631855][T16189] netlink: 'syz.1.2293': attribute type 9 has an invalid length. [ 297.642522][T16189] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 298.006085][T16207] fuse: Bad value for 'user_id' [ 298.008264][T16207] fuse: Bad value for 'user_id' [ 298.019312][T16207] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 298.188263][T16210] new mount options do not match the existing superblock, will be ignored [ 298.548400][T16217] binder: 16215:16217 ioctl c0306201 0 returned -14 [ 298.950904][T16229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.979358][T16231] Cannot find add_set index 65532 as target [ 299.028175][T16224] __nla_validate_parse: 6 callbacks suppressed [ 299.028192][T16224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2304'. [ 299.565877][T16267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.639954][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2317'. [ 299.662511][ T9930] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 299.820995][ T9930] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 299.832314][ T9930] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.837612][ T9930] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 299.841284][ T9930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.910066][T16280] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 299.914317][T16280] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 299.917842][T16280] CPU: 2 UID: 0 PID: 16280 Comm: syz.1.2321 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.922195][T16280] Tainted: [L]=SOFTLOCKUP [ 299.923705][T16280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 299.927131][T16280] RIP: 0010:h5_recv+0x108/0x960 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 299.928717][T16280] Code: 49 c1 ef 03 4b 8d 04 37 48 89 04 24 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 8c 4e a3 f9 48 8b 04 24 <80> 38 00 0f 85 b7 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 299.934955][T16280] RSP: 0018:ffffc900066a7be0 EFLAGS: 00010293 [ 299.936992][T16280] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff8863ac8c [ 299.939482][T16280] RDX: ffff88803432c980 RSI: ffffffff8863acd4 RDI: ffff88803432c980 [ 299.941961][T16280] RBP: ffffc900066a7d70 R08: 0000000000000005 R09: 0000000000000000 [ 299.944471][T16280] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 299.947628][T16280] R13: 0000000000000001 R14: dffffc0000000000 R15: 000000000000005f [ 299.950309][T16280] FS: 00007f01a52b66c0(0000) GS:ffff8880d67dc000(0000) knlGS:0000000000000000 [ 299.953145][T16280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.955274][T16280] CR2: 00007f01a42706c0 CR3: 000000003f3ed000 CR4: 0000000000352ef0 [ 299.958501][T16280] DR0: 0000000000000003 DR1: 0000000000000080 DR2: 0000000000000004 [ 299.961496][T16280] DR3: 0000000000000004 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 299.964049][T16280] Call Trace: [ 299.965114][T16280] [ 299.966087][T16280] ? __pfx_h5_recv+0x10/0x10 [ 299.967978][T16280] hci_uart_tty_receive+0x259/0x7e0 [ 299.969641][T16280] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 299.971511][T16280] tty_ioctl+0x909/0x1690 [ 299.972892][T16280] ? __pfx_tty_ioctl+0x10/0x10 [ 299.974419][T16280] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 299.976489][T16280] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 299.978924][T16280] ? selinux_file_ioctl+0x139/0x290 [ 299.980817][T16280] ? selinux_file_ioctl+0xb4/0x290 [ 299.982499][T16280] ? __pfx_tty_ioctl+0x10/0x10 [ 299.984032][T16280] __x64_sys_ioctl+0x18e/0x210 [ 299.985556][T16280] do_syscall_64+0xc9/0xf80 [ 299.987322][T16280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.989631][T16280] RIP: 0033:0x7f01a439acb9 [ 299.991488][T16280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.999583][T16280] RSP: 002b:00007f01a52b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.003072][T16280] RAX: ffffffffffffffda RBX: 00007f01a4616180 RCX: 00007f01a439acb9 [ 300.006391][T16280] RDX: 0000200000000040 RSI: 0000000000005412 RDI: 0000000000000007 [ 300.009719][T16280] RBP: 00007f01a4408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 300.013041][T16280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.016391][T16280] R13: 00007f01a4616218 R14: 00007f01a4616180 R15: 00007ffc2a792758 [ 300.019726][T16280] [ 300.021034][T16280] Modules linked in: [ 300.023066][T16280] ---[ end trace 0000000000000000 ]--- [ 300.026225][T16280] RIP: 0010:h5_recv+0x108/0x960 [ 300.029214][T16280] Code: 49 c1 ef 03 4b 8d 04 37 48 89 04 24 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 8c 4e a3 f9 48 8b 04 24 <80> 38 00 0f 85 b7 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 300.050047][ T9930] usb 7-1: usb_control_msg returned -32 [ 300.052084][T16280] RSP: 0018:ffffc900066a7be0 EFLAGS: 00010293 [ 300.052628][ T9930] usbtmc 7-1:16.0: can't read capabilities [ 300.068198][ T9940] usb 7-1: USB disconnect, device number 15 [ 300.071162][T16280] [ 300.071933][T16280] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff8863ac8c [ 300.076625][T16280] RDX: ffff88803432c980 RSI: ffffffff8863acd4 RDI: ffff88803432c980 [ 300.079983][T16280] RBP: ffffc900066a7d70 R08: 0000000000000005 R09: 0000000000000000 [ 300.083391][T16280] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 300.086566][T16280] R13: 0000000000000001 R14: dffffc0000000000 R15: 000000000000005f [ 300.089786][T16280] FS: 00007f01a52b66c0(0000) GS:ffff8880d68dc000(0000) knlGS:0000000000000000 [ 300.093587][T16280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.096115][T16280] CR2: 00007f01a52d6f88 CR3: 000000003f3ed000 CR4: 0000000000352ef0 [ 300.098970][T16280] Kernel panic - not syncing: Fatal exception [ 300.102204][T16280] Kernel Offset: disabled [ 300.103938][T16280] Rebooting in 86400 seconds..