last executing test programs: 7m35.094018593s ago: executing program 32 (id=1030): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000561000/0x4000)=nil, 0x4000, 0x1) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x204001, 0x0) 7m27.378262211s ago: executing program 33 (id=1306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r1, 0x11, 0x4, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r6, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r6, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000240)="581a17919cc7749e9438c65fb69e487bd1c16731510e7fc4ed9fb860505f1495ff92f16a38f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6e07473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bd25a62c560cb63836556c63de020000000000000013af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc00"/252, 0xfc}, {&(0x7f0000000180)="88e584aac4c73bd1985d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e6574e0765dbc61f216448cec478c23d143d2a08c1083ad00096c69a7d8cb46076c83bcf54e0f86be8423ca6b85fa792c58b49358622bbec8d5", 0x5e}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec6247282000000000000000000", 0xd7}, {&(0x7f00000007c0)="f4f6ec3f1f6e4804195e1668ee6a7994d3b9535b0ce4e85ed9aa0a7f86d48b994dcc5f47b255f609e705d9fbea0869812c0c3a096c7999643abde2e9c01404f75059df685d52a7b5d59f75dab6f01434874daf57b46d0151c0214ee1d955d8a24b8ce42aa8461222202c0b7e67b10f14040bd144e1d9b5c123024c0aa559191474c1b44eebe0a4feb6b9f872bd5f100d8f15dac14e66ca4b6e8bc168f9c7677432cbc268bf49e7b09d1a18cd49ad8bf344bbfde550052881cb7979129c65fc61fbbd6a99f24251b060090a04935c7f7a6f7862714aa4401ec436ba3a", 0xdc}, {&(0x7f0000001d80)="c97a88346df66dc806356e1c85d733680cc02564c94f5f37c7634acca95056e312e2c4e2aae43958a102a119a8409f0614e58311ea1b31bca31fba9a638c7c274b8caf83b750dd9decc6abf210c35fbd825f88154d569747dfd2c6b722cb3f9099b47b3e71cf8b9607a37930598ba484da31766119af0802938049d220ca835cfba3445e57144ce6490edc384b4f6aa0a18c39c6c288134c56ccdf02ca0bb82ad9166d84f4cf57cbba1b8510b59e1e1f05a5a59762d5a4499fa60a5e37ddd1f3ecc114191d029cd516bed757b945653b27ec471addfc4c7e1781895cc40e823236d85f1ce35f6e281906788def77b1a9c0801c5b6a4ed5be855df7fdac2ee9d05386795de9bb191c90a6d9f0d1b0af10d07d9cbbf96c3128fe9479e156ff8033c958b52651f850db80a112cb8deef82cd07c9eeca9e79f9a3d2c68ac334e696a5b2451e845e63bd45f95196fd8779bbecc7419f4d551bd64c2c4c5f6a65658752fcb4ec33cb0f69e5eba554a4b74873699a3c2b3cf102d00ba5ee9cd5712c0ea3019cdc8857a272a80d6dd19c716b6c37b69eb4978b52bb5d4b399768617afb153f68242aec7610e375e36602ed746c29652afd1beb2b1408cce1f7d600e7d867d584c5a6c014b7eff90bb3fe6858d28a859c366d93e517eaf6b977aa2462a90e36eff6a3a0a08cbe6c9909e61d0dfcf130f8e213fe5ac78cd721f8d02b02c0095a12524ac68058eb6f81b560eb9befeaa15d5df273529a4ddf8a0a05746e27bd3383ce6a3a90a4c40ccde276d4a433b31afa8ba4ed2c3c954933e78c7eeeab597696ee13e5947a8a441c0c42caebee1cdcc6ef52963aa718e99f979c7dfba653954a886eb421ac39a30e14acddabf6536542f18129ce8bd02a886fe9aa15799185d866c980869ce035b78910df718d4d0b32bb7e3b736ca493a7040a6443e024f2beca2995553177c80a6aa3ae6d53110db0bd099450e41e1fe16592b6e67e076129020a04a49b9e406ff7908049258b8f3b966097503dffe4962db096ae189ccecb81b7b26259b8d8ba4e3ca0de7cb1d1c34c1f34e575e98c5cb5aa91afab8e5819483f097b166935382d42b20d032a63a3887f950b2a435c1575334dfadaac0bf2ef2e1c40a3f63b5505ae6bd810a681a531ae3ef2821cdc929a335ef7d7a1491cb8c1abcfadccfcd212df07997ab36b3c5d82f1318cd069c3e6df2167e1168462958b0437f3b18678aca2977ef8ae3d610a2f31c6b19581411384a4e0d88bdeb7b80106277685f157413ed92ce2815b74a2f5437a3a6fb6b08ace0776173f8219c709e1f8b965f62a949b842020a766820c1f457ba15dc41764d01925c05fc5f9f48808fe46cfb364861cdb3a4008338c55f31ce4b0317cdd3578bc8efc37285bb3fe0309f83b5dc622af1c02d5df2b73530d0a6dcf94f27012bfa79be3bc19f5fe389555d8fbdce26fa31f0dc910a95525336a2d83d35b3d0e2e3a9a74d8af294a58845ceb134f0003dd8c2085504842508313342b9aafb2ff3a1104e657967858e24ebbb0eea5d688b7315bf918aa3b20b71c635c84eee5a23de1c7a2d4c5bd7714134a1cec622f24c26b11428263d25518ed9e85d33b807e1110cf2c2c31fbcb34cfd69abe5363b7e838e8a3f3766a6c953d32ccbfc9e8e3c02d7486692849888899be048e8bb30355a9e592f406717c6d44891192f59dc7128060000001fef0b040f1b5445be8b4427c0f7925a2c77b1e4684de6158235e303254dbd5e09a55d689b9d4e5e8f5fe04ea39dbf779e3d9ff616fbe9be261c086e30c27c89df5acf8624be587af6d13b11d0abcf16cd70f82897963e8dd327526999d053a39bb6f39d7f5bbd43352cd8e776025f4144589e1a8c24cdfa97cc09a7ba4bd442bc9fa02e56ced0454edef90089db6b82ae2979dc7b4a53d4b6b812a56dcda4121e26a3a3232cc81cd1c38644af4e206784e3d1c1f3d9d78f1d75272cd45bd4e8552f071598194b128413ed9f92175add17399fa3741f36750ed9716e00089fd003f3c0864eb0fc991dcb7eb59a827e19575cc79ca269e7e42729234bd8b0c1756ac0c7095484a980ba2406e818fd8a126fc2e2276f28736857f6d5933548b57ed5ac87145bd1acfc89962276d24d6374a939f9950c4298ba663b3f57af1795e1140fdcbf82ac5b4c686fd44a713a39e5a9a04f26403a9b99f143d2ce6ed5a82eb515f0880d049175d635f5060e99538c68fbe7c1e883738a168cb7a1d63975e5fd8339cfba10daa95dc1becad4173d8c78ec70470b501df74679d973bec49d0be291b2ce3a0a0721fbb1ea0282fed83a64725c457c60627cecb4a630ebfdd913fc2a6c1790a50dc88f5a4dea352960590d5d613a5852c3474277b4feeef891c263a55e8b5e830a94dd994d862d929242820f65daf1c89dfc3d702f09d7734fd45f01d6fe9bbb4ea1f1b2b862889c3512dbdbc0aacf220edf911b0daaa4d579641e74801c259e005b4127ce4a8ac698fabe38e0e70c31c39576542a54eb9b95ddb0de57fdf9dae325509bdcb528d99847f2ad9a58d4b4a55e4295805925366b92c6012fd4a667fa59d5f41a13aab9391a53cbf75d32c664835e37e102eaf7da5b3e96b113239c7a4fcba4cf01c6662fee8c51a11ce74772940663cb13c8828ba91f8edb6b7bdbba49647998da494d1a83d2d5a274f0570fdca139a497a8c59b1c324b3e1d6c9a45f83c5da0a49499010835096b1cf8ae8cb708289712253c773dd9597a3febdc82dad5b158c04cef3fba54d2a4b16925b388b38433d0ad7a855ae9502f53bdc38a91d515004d7fffa0243034e92c2ea2d0e7bb3dc43c75753bc82a36b9d8e46ec583ffc7901c8415437a6cbd448410e5254f0b3dc1eb16097b337d3d523744d4ce65ff5d39517d0ee76e8d7154c1bdc1e437a9fa1c96d92ec2b1447dbf091bb7dc1586b6fed74ffbcaa1db7c7f04812e7c562b82f0a4aacc300b68b640a1972b5c70c5f7f1483e294e8a72d478c522ff5cfcfc26f137719bb1a029c5364abd366eb3cea1fdbc579a51f97ec7bd91816c63c74ef6ee6e103e53291c26620a70d819f85f14c4ba2360667256a7303ba1a56900091606fd665263d6207396e40968f69707261fde8cfeb0360277655cd09daabce4dcd3537237f1c1b92d0c0923c66b2fe81501208454ab7057c3642b7e29db1a36e3dd8fa7cde9d54d908ef68a90dc28397f8407b32a7329c0bbf81c7d42f92407095c6db6d19b710cfe00c794756ce1660a27b52cc1a4acfb4c174400e1d00bd62f6710c5cde3476f6470ef7c0c62d6e9615da5320f419d8c05278e2b29966d309460a2adc95fe8155c99a4a38289bd7ef9cd7a6a42c7ee44489e4cd35bc1d2c5ef4cdce4d307ff69cad271a00524ac98d9dc191009e2a44dc31e0afe6394b0484efa23f3c32d17faae9c63f87bc538bb680a98284959a6f4148494d1d45b782f4117aeb2febca50807bb53d81bf434a4d818cc649541f027c1907d2b7bfcfcfbd339e86117a7d0c4dde3e0378ae60f367cb61ca08dbac4975ba1fc6132a20d698cada9e52070ddbb96e0d0c5c4221777d6887229a9d51edfb9ac86a51647e551d191aa442b684d833bfae3f9ff1cced55fcaa85cf58cef43b1af69ed48fd206699dad52fb21b8dfd2aa0d5078a72a621d67ce60f66f1147b58919f914df31e13ae9dd31b6ed76cd345dd0cfdf1ad9635c0b0e4b7f143cba65ae1a98ac9d195fa3fe5e483e676442c9680e221a1c1c02ffe41caebcb419571be8c8f32843dcda7b56fb648d2bb26210dcc39c2db781b6646264a1ebd6408947ab31e9274d2f1bbab0db4655855c15d34b51bc02d442070218955d801892f7a81ccdd533418f15b950f896715366ab55d0b4db39a2ecb9ef98f9182b2112698816e644d9b52350524ebc75bf4b6d7eaf96611d57a2a01222d47d00a4c92c685ecd281752fc42c2e7ed3eec58d80f591769db5ee9bae4f0b70b01da8f4616ac5e897cb80a3bc01aaa9b33cdf4eb6451c4fbad22f5877e63667b95e29da22735061551fffe2a4a889ff6624b3f83b3fa4094f1b2f6e762c9d98b651fd8f989828cc615a4ff715b49f912d66b6526250caa621751ef7aa379f22f412a52892719043da80c4f1ad97f0960e0698cf12b1f9e2ad099b955a272e045aa2c58a70472c499cf8635849a8afc7e8d3137ea579652d1f56a01b3150ea882677f72c479909fc81887681ff0910bcfe6e29df00f2f94cf26ce377e1b0ca37af20934ab9842dd3680ab1484a771a981c8354b0ca0bd434e566e013d40d9e0fbc1410b49babec6e8d38e630f35a4339dbf9cfc6f19bce4140aa9d6a646905464b3884067da8b621f3c931eb98a9224558113550c42648a9c9cf5667b3f27e61c553c99a124da1be4c1c05d266e172e3119f7e9ab8de0931311be321fa1c7f11718fce89171bf95190f4317753c7fd2e42fa7c66dd1cd322af5b5a6bc5eb14693a8a5c4242a5017a0f0fbd24c4c1b58f9c3119e20b3797ce6d6c7d1e6d8ae38e098b823f568eb36ed6cbd776119df7448c095599ea10ee7e695faca0c4574a4cd446d6a92007002c90cf6caa5d6d7073308adea22a37422f075187e9396b7472b086db25f1204488663aeef8f34e71db91fa0c2ae52963b1bd", 0xce4}], 0x5) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r2, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)="3f3377a7cc10b3c2549d9509cc52c92e45d496462adbb1d19bea46e6057f6ab174b19f2fcde311f0d4c1b3d2c52bda9408ce1686f72d226909a1b4a2ce70f50effe0c313e21a89621ab14a34016fd7b5f413e8972858a5a0f5b45bf7ae44f836975683e861632ae54a33a8ee8deb2d11c650e7e1fad454143e82fa038e92bd65dbdd84bf473d736a46e77a0f3afb4e9acee9916ff870bcb22e6dafb165c34fd6bd0f8d0261e0d45603625ab3eb9d9402184c79a623d78f9b33e36aca092028c7a42f6bf96b29e4b683d9b624d8172d57308f58a8e4bcfda7534d", 0xda}, {&(0x7f0000000340)="203a122f2330154c4852b118d61031c1139631dbbe6f1a45595fe4ef66b2ce9228ef4b97a5376d3c465bd2c6963cd184df3e129d75f6050b1ae63b300050f7b46e3c31761eb91d0d9dbdfcceefeba69796", 0x51}, {&(0x7f00000008c0)="95655c74bf4c9de7240a5272f8563886c0334c4f93486580b3c31d9c182d15180dbfba21eafb6f3e0ec4a5c2be78c8b345668915247e15fac5e79b857fe2f8586cc72e5427d65b81726423ba3681a8f76c7b2a4fa627c0fee287ff215a41b8f9501f60d3d3b006a377471e561a62a0f16a6e931b1a4be3ea923688b3669f6cb4eef6b02a0e8f4a91f4e7608dc33a6568f6781bbbe89f56f6", 0x98}], 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/336], 0x150}, 0x20010020) 7m3.844835185s ago: executing program 34 (id=1474): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) (async) ftruncate(r0, 0x51a9497) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) syz_emit_ethernet(0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100008088caa1f99700bdbb11000ce1ab5533b6a8edc0afa26b6d22f143ffa544920de21c27ef15bc"], 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x80, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x3554000) fadvise64(r5, 0x85f5, 0x4000000005, 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 7m1.012076212s ago: executing program 0 (id=1593): r0 = syz_io_uring_setup(0xb7f, &(0x7f0000000140)={0x0, 0x38ab, 0x10000, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000000307010300000000000000000500000d090001"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4044010) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x12, r3, 0x0, 0x0, 0x0, 0x40002262, 0x0, {0x1}}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x28543634fae43ad, 0xfffffff8, 0x25dfdbfb, {0x4, 0x0, 0x7d00}}, 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x40000}) fcntl$lock(r7, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x9) setsockopt$inet_tcp_TLS_RX(r8, 0x6, 0x2, &(0x7f0000000340)=@ccm_128={{0x303}, "8f53db9cff57dc2a", "2e504471a51eff51834f69cd7334bef4", 's7FG', "4bede1e94ff746d9"}, 0x28) setsockopt$inet_int(r8, 0x0, 0x18, 0x0, 0x0) r9 = landlock_create_ruleset(&(0x7f00000000c0)={0x8, 0x14}, 0x18, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000100)={0x32c1, r3}, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000016, 0x80010, r6, 0xb0b77000) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) 7m0.764781784s ago: executing program 0 (id=1599): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x73, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r1 = socket(0x10, 0x5, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8003, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc4c85512, &(0x7f0000000280)={{0xfffffffe, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x74, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1, {0x0, r3}}) r4 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r4}) io_uring_enter(r4, 0x66ab, 0x4, 0x2, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c2000040042801c0001800600060088480000100015002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r10 = socket$unix(0x1, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x4000) read$qrtrtun(r11, &(0x7f0000000280)=""/110, 0x6e) write$FUSE_INIT(r12, &(0x7f0000000080)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0xceaf, 0x44008002, 0x9, 0x2, 0x1004, 0x7, 0x0, 0x0, 0x80, 0x800}}, 0x50) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r10, 0x8935, &(0x7f0000000040)={'batadv_slave_1\x00', @ifru_addrs=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21, 0x4}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x88, 0x24, 0x10, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x13, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x2], [0x0, 0x4, 0x0, 0x2, 0x2, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) 7m0.654678159s ago: executing program 0 (id=1601): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x2c, r1, 0xe7816804f9787cab, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240008d0}, 0x40002084) (async) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='cramfs\x00', 0x204041, 0x0) 7m0.561777195s ago: executing program 0 (id=1603): socket$kcm(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = syz_open_dev$dvb_frontend(&(0x7f00000004c0), 0x80, 0x2080) ioctl$FE_GET_INFO(r5, 0x80a86f3d, &(0x7f0000000800)) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000006c0)={0x1, 0x0, [{0xa47, 0x0, 0xe1}]}) ioctl$TCSETS(r6, 0x80005520, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="270e070200"], 0x14}, 0x1, 0x40030000000000}, 0x4000) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="022aff08020000001abd7000fddbdf2509cb9d0f5980f95c25fe00c61f00f366973941caed380f06415e74c2c9b4389d4cae873b5ab31fb145b9f53a0136d27fff4334c6012331637e0cab6e185166d12215f96d0ba622173e7e06b30ae5d599dd195cb8d4f5e85e407188d0e281cff2dad3a8dec9d19f824017c0621f23f82189d01494c4cfc4381d88d1e91faac2abdb2c6974e69ba901b404c77a64c18af58a0205efe38ccedb6f2dfb2a536396cd2b6d8dac64758e3f375abca9bdfbb3ffae160d397e085d29727aaa2111"], 0x10}}, 0x4) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="02002cbd7000fddbdf2501006a8f0900030073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r9, @ANYRES8=r9, @ANYBLOB='&'], 0x10) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r10, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1) write$evdev(r10, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000003a80)={{0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x8}, 0x0, 0x0, 0x6, 0x3, 0x1ff, 0x0, 0x3, 0x6, 0x3ff}) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f00000008c0)) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x3, 0x1, 0x3, 0x0, {0xa, 0x4e22, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x80, 0x0, 0x0, &(0x7f0000000200)=[@mark={{0x14, 0x1, 0x24, 0xa9f}}], 0x18}, 0x44800) 6m43.955195531s ago: executing program 35 (id=1603): socket$kcm(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = syz_open_dev$dvb_frontend(&(0x7f00000004c0), 0x80, 0x2080) ioctl$FE_GET_INFO(r5, 0x80a86f3d, &(0x7f0000000800)) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000006c0)={0x1, 0x0, [{0xa47, 0x0, 0xe1}]}) ioctl$TCSETS(r6, 0x80005520, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="270e070200"], 0x14}, 0x1, 0x40030000000000}, 0x4000) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="022aff08020000001abd7000fddbdf2509cb9d0f5980f95c25fe00c61f00f366973941caed380f06415e74c2c9b4389d4cae873b5ab31fb145b9f53a0136d27fff4334c6012331637e0cab6e185166d12215f96d0ba622173e7e06b30ae5d599dd195cb8d4f5e85e407188d0e281cff2dad3a8dec9d19f824017c0621f23f82189d01494c4cfc4381d88d1e91faac2abdb2c6974e69ba901b404c77a64c18af58a0205efe38ccedb6f2dfb2a536396cd2b6d8dac64758e3f375abca9bdfbb3ffae160d397e085d29727aaa2111"], 0x10}}, 0x4) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="02002cbd7000fddbdf2501006a8f0900030073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r9, @ANYRES8=r9, @ANYBLOB='&'], 0x10) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r10, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1) write$evdev(r10, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000003a80)={{0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x8}, 0x0, 0x0, 0x6, 0x3, 0x1ff, 0x0, 0x3, 0x6, 0x3ff}) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f00000008c0)) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x3, 0x1, 0x3, 0x0, {0xa, 0x4e22, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x80, 0x0, 0x0, &(0x7f0000000200)=[@mark={{0x14, 0x1, 0x24, 0xa9f}}], 0x18}, 0x44800) 5m49.211300468s ago: executing program 36 (id=2250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)={&(0x7f00000004c0)=@newtaction={0xcc, 0x30, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1100}, [{0xb8, 0x1, [@m_police={0xb4, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x7fb, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2, 0x9, 0x0, 0x2}, 0x0, 0x10000}}]]}, {0x49, 0x6, "78b05c8f34cebd708b6c65592519b9ddef14cbac86eb95bad05692f562e895104070b5aedadddb412d2dff679eb1681846ae9941feddf3d2120f062d3dab7d398bad4e16a0"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xcc}}, 0x8000) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) poll(&(0x7f0000004200)=[{}], 0x1, 0x0) r3 = fanotify_init(0x8, 0x80000) r4 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) r5 = dup(r4) fanotify_mark(r3, 0x1, 0x1, r5, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r6, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000440)=[r2], 0x0, 0x1}) r7 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r8 = socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x7, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) r10 = socket$inet_tcp(0x2, 0x1, 0x0) pread64(r5, &(0x7f0000000380)=""/167, 0xa7, 0x5f) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r10, 0x6, 0x9, &(0x7f0000000080)={{0x2, @empty, 0x2, 0x43, 'fo\x00', 0x2, 0x0, 0x3a}, {@multicast1, 0x4, 0x0, 0x0, 0xe, 0xdffffffe}}, 0x44) getsockopt$inet_tcp_int(r10, 0x6, 0x9, 0x0, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000000)=[r2], &(0x7f0000000080), 0x1, 0x1}) 5m29.557814426s ago: executing program 37 (id=2631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) set_robust_list(&(0x7f0000000140)={0x0, 0x4}, 0x18) alarm(0x8000000000000001) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "02823f6bd900000000000097efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x6c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x41e4, &(0x7f0000001b80)={0x0, 0x9c05, 0x80, 0x1, 0x27c}, &(0x7f0000001c00), &(0x7f0000001c40)) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0x8, 0x1, 0xbe, 0x0, r5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x8470bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x74614, 0x36a01}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x33}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c081}, 0x8002) io_uring_setup(0x665c, &(0x7f0000000700)={0x0, 0xe70a, 0x1fffff, 0x3, 0x1d6}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x10010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}, @ip_retopts={{0x10}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="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", 0xfa}, {&(0x7f0000000000)="1372d96f5f0a19fb62b99e7e88ecb71ae899e59ba01eb8d7442b694b7f8e69ab37864845d21fa93b7a0e71", 0x2b}, {&(0x7f0000000180)="30e9cee439d893af", 0x8}, {&(0x7f00000004c0)="71b5fafe0966ab6add74b8322d3dde76d27cf8b449528986d5cef8fb9d34714d51df44055ee76e040f52f6c8bb8387c869e431e79d7b0047fce3a77e6192971b9a4e520d77e5", 0x46}, {&(0x7f0000000240)="83737faca6b8a0466a7730fb849aa8f29c26102f90a355b5ecd58a9b8ee084867785b4369bb7a20cb804e4cfd9855621758888b4ba6dad0b7aa52439067db636d3e40c0c9fa5d8260546584abcc42180fd659ac6ef8c1c76783f68fc59ad247c43bfd10711d3a4f8b0e091e1fc0ef8f93bb1cadd850598c7df8cc1d54b68566d76b796b60180cfff2b118eb01d03d7823cd99f02ef5e512e7df3d2a4da34a2e6704a07e0cc9248997e845ef966089558c4153c98bbed88e5ce673e71c77c87726be95d813975ec884f0d391dfa", 0xcd}, {&(0x7f0000000340)="0a0116d29b59ec50e3478f905ff8ad2f808338a6e01bf685420d60055af3", 0x1e}], 0x6}}], 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000001b40)={&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/238, 0xee}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/228, 0xe4}, {&(0x7f0000001880)=""/113, 0x71}, {&(0x7f0000001900)=""/107, 0x6b}, {&(0x7f00000006c0)=""/31, 0x1f}], 0x6, &(0x7f0000001a00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0x2000) 3m51.609580691s ago: executing program 2 (id=3918): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 3m51.086915332s ago: executing program 2 (id=3921): ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xecf, 0xa}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x8080) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f00000000c0)=""/203) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xecf, 0xa}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x8080) (async) ptrace(0x10, r0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) (async) socket$tipc(0x1e, 0x2, 0x0) (async) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0xfffffffd}}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r1, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) ptrace$cont(0x20, r0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f00000000c0)=""/203) (async) 3m50.947499147s ago: executing program 2 (id=3922): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/nf_conntrack_expect\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x4d, 0x0, &(0x7f0000000140)) lseek(r0, 0x1, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000200)="03ce72028d008b85a4ca", 0xa}], 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0xc0049364, &(0x7f0000000180)) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf5, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000180)={0x7, 0xb, 0x7, 0x10001, 0xf}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5}, 0x0) ioprio_get$uid(0x2, 0x0) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="280000004e0000000000000001000000000000000300000000000000980300"/48], &(0x7f00000000c0), 0x1200) 3m50.787096435s ago: executing program 2 (id=3923): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000001c0)='./file1\x00', 0x8, 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 3m50.786472513s ago: executing program 2 (id=3924): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=ANY=[@ANYBLOB="f0000000100000022abd7000fedbdf25ac1414bb000000000000000000000000000000000000000000000000000000004e0097020000a016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d6ff000000000000000000000000000000000000010400000000000000090000000000000000000000000000000100000000000000d704000000000000ff07000000000000020000000000000001000100000000007f00000000000000040000000000000001000100000000000100000000000000ffff0000090000000f0000002bbd700004350000020004100000000000000000"], 0xf0}}, 0x4040) 3m50.538216411s ago: executing program 2 (id=3928): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000280)=@ipv4_newnexthop={0xb4, 0x68, 0x0, 0x70bd25, 0x25dfdbff, {0x2, 0x0, 0x3}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r1}}}, @NHA_GROUP={0x44, 0x2, [{0x0, 0x7}, {0x0, 0x9}, {0x1, 0xa0}, {0x0, 0x8}, {0x2, 0x40}, {0x2, 0x80}, {0x2}, {0x2, 0x39}]}, @NHA_OIF={0x8, 0x5, r2}, @NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_OIF={0x8, 0x5, r3}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x56}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x400c041}, 0x40004) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) (async) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000000)="ef6f6a3cd0672aac32b614f1ec3d90b530727fc2a331b4c7d473c23bde62198197b9a4fb516153b7d9ebdaf7309c5f9572683f444b720a8341951aa6997088eb032852ac58ede3297d07cc32993bbc0ed082f27d5447edaf8a882d0eab3f1fad7502ec4ab2e80f7c") 3m50.474505897s ago: executing program 38 (id=3928): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000280)=@ipv4_newnexthop={0xb4, 0x68, 0x0, 0x70bd25, 0x25dfdbff, {0x2, 0x0, 0x3}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r1}}}, @NHA_GROUP={0x44, 0x2, [{0x0, 0x7}, {0x0, 0x9}, {0x1, 0xa0}, {0x0, 0x8}, {0x2, 0x40}, {0x2, 0x80}, {0x2}, {0x2, 0x39}]}, @NHA_OIF={0x8, 0x5, r2}, @NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_OIF={0x8, 0x5, r3}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x56}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x400c041}, 0x40004) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) (async) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000000)="ef6f6a3cd0672aac32b614f1ec3d90b530727fc2a331b4c7d473c23bde62198197b9a4fb516153b7d9ebdaf7309c5f9572683f444b720a8341951aa6997088eb032852ac58ede3297d07cc32993bbc0ed082f27d5447edaf8a882d0eab3f1fad7502ec4ab2e80f7c") 3m33.157751779s ago: executing program 1 (id=4169): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r4 = epoll_create(0xfffffffa) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000100)={{0x2, 0x4e20, @private=0xa010102}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x1e, {0x2, 0x4e22, @multicast1}, 'veth0_to_batadv\x00'}) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$inet(r5, &(0x7f0000002f40)=[{{&(0x7f0000000640)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24008844) ppoll(&(0x7f0000003180)=[{0xffffffffffffffff, 0xc4d4}, {r5, 0x50}, {r4, 0x10}], 0x3, 0x0, &(0x7f0000003200)={[0x6244]}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x30012}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r2}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 3m32.248628943s ago: executing program 1 (id=4178): mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) pipe(&(0x7f0000000000)) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x10410, &(0x7f00000000c0)='norecovery') 3m32.248391559s ago: executing program 1 (id=4179): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8922, &(0x7f0000000280)={'dummy0\x00'}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 3m31.670532174s ago: executing program 1 (id=4197): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0xdc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff3, 0x5}, {0x8}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040011}, 0x100440a0) fcntl$setlease(r0, 0x400, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) lstat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)) landlock_restrict_self(r4, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) ptrace(0x10, r5) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x111200, 0x21) 3m31.588890108s ago: executing program 1 (id=4199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x59, 0x0, 0x0) (async) waitid(0x2, 0x0, 0x0, 0x4, 0x0) (async) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x4) 3m30.878720453s ago: executing program 1 (id=4208): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@ipv4_deladdr={0x17, 0x15, 0x1, 0x80}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000200)={'wlan1\x00'}) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x4440) 3m30.829501848s ago: executing program 39 (id=4208): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@ipv4_deladdr={0x17, 0x15, 0x1, 0x80}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000200)={'wlan1\x00'}) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x4440) 3m4.88652868s ago: executing program 8 (id=4683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="a10000b6", @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c00990007000000680000001400040073797a6b616c6c6572300000000000000800050009000000"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) r5 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) ioctl$I2C_PEC(r5, 0x708, 0x3) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000001380)={0x0, 0x49, 0x8, &(0x7f0000001340)={0xd, "c8660972daadf38033035d21dcc910b0dbf5be74076dc3f2f67b364ef9ed965b13"}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x2}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r7, 0x1, 0xd7, 0x6, @multicast}, 0x14) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3m4.629857367s ago: executing program 8 (id=4687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000280)={0x3, 0x0, {[0x4, 0x6, 0x8300000000000000, 0x4, 0x5, 0x8, 0x3, 0x4]}}) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x40240, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x2, 0x9, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x5], 0x0, 0x8340}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x100000c, 0x2010, r3, 0xeb9e3000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m4.470441083s ago: executing program 8 (id=4688): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 3m4.469739028s ago: executing program 8 (id=4690): socket$netlink(0x10, 0x3, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r1, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff0060031200100888fb143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000000)=""/170) socket$inet_icmp_raw(0x2, 0x3, 0x1) 3m4.22374295s ago: executing program 6 (id=4692): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180000002361d7000000000c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="d09178d2da3477ec73a38ffffcd82caf103bc848f7ff22290bd6c0375f437b167f431ad24706d7263978db87dbaa159b0fdec8e129e835688cf370555aa8c6dffe261622b114299d6f"]}, @nested={0x11f, 0x6, 0x0, 0x1, [@typed={0x109, 0x0, 0x0, 0x0, @binary="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"/261}, @generic="d83bea4ae74b4d194feb3f8d8b6dcf"]}]}, 0x184}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="d09178d2da3477ec73a38ffffcd82caf103bc848f7ff22290bd6c0375f437b167f431ad24706d7263978db87dbaa159b0fdec8e129e835688cf370555aa8c6dffe261622b114299d6f"]}, @nested={0x11f, 0x6, 0x0, 0x1, [@typed={0x109, 0x0, 0x0, 0x0, @binary="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"/261}, @generic="d83bea4ae74b4d194feb3f8d8b6dcf"]}]}, 0x184}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000007c0)={{r0, &(0x7f0000000140)='/--/@\x7f&\x00', 0x181200, &(0x7f0000000180)={@_ha_fsid={[0x6, 0xd]}, {0x3, 0x4, 0x10000, 0xfc}}, 0x8001, &(0x7f00000001c0), &(0x7f0000000200)=0xa}, 0x4, &(0x7f0000000740)=[{0x2, 0x4, &(0x7f0000000240)='\x00', &(0x7f00000003c0)="dba0506111368d02bbd0883c239c07a2724730dd1c7676d26e989f942c72a69d13c079ba011bd95cd34be7d5deea6cae081c55ca6d8497f4035358fd9e4cc6572e666b94030608e674294f631cdfb10fdb942d1169cd0743e542be0ba18bd9fcfbc959d3fac9ca6360223423026b17307355813688b9e6fe8c470ecf25797dbf32faf15c1827274327af97f066f556beccc0c3a12971219f9ef2c7e141a9114b6a7e87548fe763c4ed3f684b3a4e762f6f61d63872f5456c8744502f03f63aa9ae6ccb8b", 0xc4, 0x8}, {0x3, 0x2, &(0x7f0000000280)='\x00', &(0x7f00000004c0)="720eaba6c1b6cab4df478318b1434c522eb85e5483b6d4d00f6cfe25de2143abba27c77ba2b1160b08e3a1047dd3ae3c8e5aa916fc2e1bd8d976a3f0ca3092d34b4e9757fe870070d2e6c676bf194448f0277e1ad34862a08045faea519aac6ccd4336b2259559e89b6aafdb6c0e571fe3d918a3535a7db01b794560ba5fa60da2de9cc8874199c19609244e8a470fea712d8e37deb8513579894b1c20f7a7b94d057d1aa89da35d7d627039eb07d1f3744e902c331163751cdea77770ae75bc902578f187f4667f7ae836edd277c2f310a26036b37df7d6a0094cd32568e8dee0ee2dab53053f87a6dd70f0204c695399fd8086d7b5fc", 0xf7, 0x20}, {0x2, 0x2b, &(0x7f00000002c0)='\x00', &(0x7f00000005c0)="5a0cf79017225cb67d248ad1f5ac5f1c0d09e95820c8bc271eac1ed61ad07813f09a3da423280e8394774fac65c42f83fa0d877794582fb880f0d9099cc28ca0a72913303f1a45ed8c2b70b96c3fae7cf944f0c087cfcc47c25ff9e88a90a22b802fc5d2571b97ddfc077667bfe2066a5ab2e9b8d8cded5323bcde74f61a96c1cb95330f5dae24", 0x87, 0xe18f41ab4f67c193}, {0x5, 0x8, &(0x7f0000000680)='\x00', &(0x7f00000006c0)="c503588c69e778a1e92ad15e29cc4a45120b74b47da3044fc755a4d3178f557c64ff3c45c937f5e51e415509d1d29bd3a5a71f31b241401161ce557157b81932f226a905505125458e55fc2f79dd6b36e8832d3953e027859e7a2ea53c68b3c712f7b0cc2e972f0aea3df82636d63b7434b4abf46cad45603108616d234d", 0x7e, 0xa}]}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000007c0)={{r0, &(0x7f0000000140)='/--/@\x7f&\x00', 0x181200, &(0x7f0000000180)={@_ha_fsid={[0x6, 0xd]}, {0x3, 0x4, 0x10000, 0xfc}}, 0x8001, &(0x7f00000001c0), &(0x7f0000000200)=0xa}, 0x4, &(0x7f0000000740)=[{0x2, 0x4, &(0x7f0000000240)='\x00', &(0x7f00000003c0)="dba0506111368d02bbd0883c239c07a2724730dd1c7676d26e989f942c72a69d13c079ba011bd95cd34be7d5deea6cae081c55ca6d8497f4035358fd9e4cc6572e666b94030608e674294f631cdfb10fdb942d1169cd0743e542be0ba18bd9fcfbc959d3fac9ca6360223423026b17307355813688b9e6fe8c470ecf25797dbf32faf15c1827274327af97f066f556beccc0c3a12971219f9ef2c7e141a9114b6a7e87548fe763c4ed3f684b3a4e762f6f61d63872f5456c8744502f03f63aa9ae6ccb8b", 0xc4, 0x8}, {0x3, 0x2, &(0x7f0000000280)='\x00', &(0x7f00000004c0)="720eaba6c1b6cab4df478318b1434c522eb85e5483b6d4d00f6cfe25de2143abba27c77ba2b1160b08e3a1047dd3ae3c8e5aa916fc2e1bd8d976a3f0ca3092d34b4e9757fe870070d2e6c676bf194448f0277e1ad34862a08045faea519aac6ccd4336b2259559e89b6aafdb6c0e571fe3d918a3535a7db01b794560ba5fa60da2de9cc8874199c19609244e8a470fea712d8e37deb8513579894b1c20f7a7b94d057d1aa89da35d7d627039eb07d1f3744e902c331163751cdea77770ae75bc902578f187f4667f7ae836edd277c2f310a26036b37df7d6a0094cd32568e8dee0ee2dab53053f87a6dd70f0204c695399fd8086d7b5fc", 0xf7, 0x20}, {0x2, 0x2b, &(0x7f00000002c0)='\x00', &(0x7f00000005c0)="5a0cf79017225cb67d248ad1f5ac5f1c0d09e95820c8bc271eac1ed61ad07813f09a3da423280e8394774fac65c42f83fa0d877794582fb880f0d9099cc28ca0a72913303f1a45ed8c2b70b96c3fae7cf944f0c087cfcc47c25ff9e88a90a22b802fc5d2571b97ddfc077667bfe2066a5ab2e9b8d8cded5323bcde74f61a96c1cb95330f5dae24", 0x87, 0xe18f41ab4f67c193}, {0x5, 0x8, &(0x7f0000000680)='\x00', &(0x7f00000006c0)="c503588c69e778a1e92ad15e29cc4a45120b74b47da3044fc755a4d3178f557c64ff3c45c937f5e51e415509d1d29bd3a5a71f31b241401161ce557157b81932f226a905505125458e55fc2f79dd6b36e8832d3953e027859e7a2ea53c68b3c712f7b0cc2e972f0aea3df82636d63b7434b4abf46cad45603108616d234d", 0x7e, 0xa}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYRES32=r1, @ANYRES8=r1, @ANYRES8=r4, @ANYRES64=r6], 0x38}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x64, r12, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x81, 0x11, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x64, r12, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x81, 0x11, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES64=r3, @ANYRES32=r15, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES64=r3, @ANYRES32=r15, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r16 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfe5}]}, &(0x7f0000000900)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x1, '\x00', r15, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0x10, 0x8, 0x9}, 0x10, 0x2c3c9, r4, 0x4, &(0x7f00000009c0), &(0x7f0000000a00)=[{0x0, 0x4, 0xc, 0xb}, {0x1, 0x4, 0xe, 0x7}, {0x0, 0x2, 0x4, 0x7}, {0x1, 0x4, 0x10}], 0x10, 0x2}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfe5}]}, &(0x7f0000000900)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x1, '\x00', r15, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0x10, 0x8, 0x9}, 0x10, 0x2c3c9, r4, 0x4, &(0x7f00000009c0), &(0x7f0000000a00)=[{0x0, 0x4, 0xc, 0xb}, {0x1, 0x4, 0xe, 0x7}, {0x0, 0x2, 0x4, 0x7}, {0x1, 0x4, 0x10}], 0x10, 0x2}, 0x94) ioctl$BTRFS_IOC_DEFRAG(r16, 0x50009402, 0x0) 3m4.222959999s ago: executing program 8 (id=4693): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 32) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000180)={0x2, {0x2, 0x9, 0x2, 0x7fffffff}}) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) 3m3.978586925s ago: executing program 6 (id=4694): syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = io_uring_setup(0x669, &(0x7f00000002c0)) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b00), 0x80003, 0x0) ioctl$DVD_WRITE_STRUCT(r5, 0x5392, &(0x7f0000000b40)=@copyright={0x1, 0x0, 0xd, 0x6}) setresuid(0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) preadv(r7, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r6, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 3m3.721561131s ago: executing program 6 (id=4696): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r7, 0x5421, &(0x7f0000000000)=0xf4e) recvmsg(r7, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x2020) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close(r6) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e24, 0x10000, @mcast2, 0x9}, {0xa, 0x4e22, 0xfffffffa, @empty, 0x1}, 0x1, {[0x7fff, 0x1, 0x8, 0x40, 0xfffffc01, 0xbbdc, 0xfffffffb, 0xffff]}}, 0x5c) creat(&(0x7f0000000040)='./file0\x00', 0x140) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}]}}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x1, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x13, 0x2}, 0x8, 0x20400000, 0xc, 0x0, 0x0, 0x20000, 0x0}) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaabbbbbbbb0000002006fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e2200000000000000fc4888ae78d24ea4d2fcb158e6e817409e23e5726e4f8e9295e4c1fed5e6414a27d7ddd25a8d47b0a6b2c207798b5cf4977880fdfa5d0b1169424b0dc97a1349f4a78f8dd426b3def75a081a46408fa1a8d9ba241b06dd988bf13329b6d5379b08d5060f30817d8ff39d61fecb322fca067a9d2779af287bc70c05f0f5208531e5686235955ecfa15ed42c7e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="84c2ffff907800001e0c1b040000000000800000"], 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f000000afc0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="427c8be605be178d546f4f211bd6bc33c15a888d73ea0e7e72cd541d7b508906b720c6d1cd0e18f1f6657971188163dba86b4ac14de16bbd7079ff498fec181a237d86a3a0f303bd4e9326cb044c3f6ce1aa54772915904bbfffa2238cc7928894cd9f70486d55edbec1b1e5d10be74a52f18441204fcfa99002076c145d8d3ed3b38c018b520c5bda198690c6b6f93d893f", 0x92}, {&(0x7f0000000200)="a3653e2d23ed937a9a9f37fee0f917fb37bee95fc6417ea8a8ecc18475cfccd83e9811e5e0e1ad381ea1f1c9829ffccce019c791fc3b05b447a1fc496e82c241", 0x40}, {&(0x7f00000004c0)="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", 0x4b3}], 0x3}}], 0x1, 0xc000080) 3m3.528984126s ago: executing program 6 (id=4698): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0}) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x101000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r6, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x4000000) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0) 3m3.218850026s ago: executing program 6 (id=4699): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') setpgid(0x0, r0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', &(0x7f0000000180), 0x1000020, &(0x7f00000001c0)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@access_any}, {@directio}, {@cache_none}, {@access_user}], [{@audit}, {@audit}, {@measure}, {@smackfsdef={'smackfsdef', 0x3d, 'autofs\x00'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@subj_user={'subj_user', 0x3d, 'autofs\x00'}}, {@flag='async'}]}}) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 3m3.218664609s ago: executing program 6 (id=4700): r0 = fanotify_init(0x10, 0x101000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x455, 0x8000010, r1, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001280)={0x0, 0x2, 0x5, 0x4}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) write$sequencer(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="81040808f9ffffff940f32f0411976ec9402ff"], 0x20) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000100)="b3534072d2fb239d79c574e46469403f3c24f62950c41f4a919ec66538f26320", 0x20}, {&(0x7f0000000340)="f46c01ddd206f62e2b6a95230e60e3e803ea501d5dcefe0e9a2a4f90a2b1eb4ac8d2b23686c71ed13d7ebec525db157d1fee05d420b733c7b4f4427cff4756da0f7eddb57ff57719e67af19050b339c5c136763919b10206e40567f6d224f864e4ba8be0d9d23bf6ad16f8dab00b2145bbd02fee3325374e9642135454b0da41036e4908509882cb5f62c33dca6bb405fc18a87efceb9136aaa08013ae674e2069869a0b77115b8837eaaad35d471e38a2fd79bb75d055e193a7f9ce538f35414c2e1304253dc282a722317c93db30946776", 0xd2}, {&(0x7f0000000440)="c9153f13e4cf900322c75551e0bd195b6871cd2c3d92316b88b8dc5226ce8efce871f9ebd9476939b9ae81352fa92aa3dbd3fc7c0bb41d48b118e40ed3c13bb8da57a6f7a725fc0af92af0936cde823e577176e971b0461b209c1c3a6e94970120dfbacdabdb637111259248bb109395de1559d13e18efe406663ff8d4b4697f53548df9b3d4663562d427fe84407057", 0x90}, {&(0x7f0000000500)="196b83a44d04a062cfa2d4682181feac40048349820d6adb713a09901997d71150fe14ecdbd38e58a4395ce7344953eef5de6069fac753c4c69a4411f12b05773d53900bbb79f0b681c0123a74c8a2adc4d43dca29d0a35ad612849c5ad073080534c0bdd171efe183800d6e690595db58b01bff9c265c44667e17e09b8e5752236cce4338b76a1f4741b180dc8ebead8ddd69c0200c1fb85687872abe5a6a4384fb814024a28fe889b2235c43511717d7ad5bdf6a595b8f80cae04bd7473e68213ab2c44e8adf5887d84b01371dce58e1ea", 0xd2}], 0x4, 0xe) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000018c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0xb799, 0x3}, {0x0}, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/89, 0x59}], 0x1, 0x30, 0xee}}], 0x90}, 0x0) r5 = io_uring_setup(0x26dd, &(0x7f0000000040)={0x0, 0x6381, 0x400, 0x1, 0x128}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f00000000c0)={0x4f5, r1, 0xd, {0x10000, 0x5}, 0x6d}, 0x1) 2m47.888231736s ago: executing program 40 (id=4693): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 32) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000180)={0x2, {0x2, 0x9, 0x2, 0x7fffffff}}) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) 2m47.095788897s ago: executing program 41 (id=4700): r0 = fanotify_init(0x10, 0x101000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x455, 0x8000010, r1, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001280)={0x0, 0x2, 0x5, 0x4}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) write$sequencer(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="81040808f9ffffff940f32f0411976ec9402ff"], 0x20) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000100)="b3534072d2fb239d79c574e46469403f3c24f62950c41f4a919ec66538f26320", 0x20}, {&(0x7f0000000340)="f46c01ddd206f62e2b6a95230e60e3e803ea501d5dcefe0e9a2a4f90a2b1eb4ac8d2b23686c71ed13d7ebec525db157d1fee05d420b733c7b4f4427cff4756da0f7eddb57ff57719e67af19050b339c5c136763919b10206e40567f6d224f864e4ba8be0d9d23bf6ad16f8dab00b2145bbd02fee3325374e9642135454b0da41036e4908509882cb5f62c33dca6bb405fc18a87efceb9136aaa08013ae674e2069869a0b77115b8837eaaad35d471e38a2fd79bb75d055e193a7f9ce538f35414c2e1304253dc282a722317c93db30946776", 0xd2}, {&(0x7f0000000440)="c9153f13e4cf900322c75551e0bd195b6871cd2c3d92316b88b8dc5226ce8efce871f9ebd9476939b9ae81352fa92aa3dbd3fc7c0bb41d48b118e40ed3c13bb8da57a6f7a725fc0af92af0936cde823e577176e971b0461b209c1c3a6e94970120dfbacdabdb637111259248bb109395de1559d13e18efe406663ff8d4b4697f53548df9b3d4663562d427fe84407057", 0x90}, {&(0x7f0000000500)="196b83a44d04a062cfa2d4682181feac40048349820d6adb713a09901997d71150fe14ecdbd38e58a4395ce7344953eef5de6069fac753c4c69a4411f12b05773d53900bbb79f0b681c0123a74c8a2adc4d43dca29d0a35ad612849c5ad073080534c0bdd171efe183800d6e690595db58b01bff9c265c44667e17e09b8e5752236cce4338b76a1f4741b180dc8ebead8ddd69c0200c1fb85687872abe5a6a4384fb814024a28fe889b2235c43511717d7ad5bdf6a595b8f80cae04bd7473e68213ab2c44e8adf5887d84b01371dce58e1ea", 0xd2}], 0x4, 0xe) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000018c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0xb799, 0x3}, {0x0}, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/89, 0x59}], 0x1, 0x30, 0xee}}], 0x90}, 0x0) r5 = io_uring_setup(0x26dd, &(0x7f0000000040)={0x0, 0x6381, 0x400, 0x1, 0x128}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f00000000c0)={0x4f5, r1, 0xd, {0x10000, 0x5}, 0x6d}, 0x1) 2m45.005212956s ago: executing program 0 (id=4766): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000040)) clock_gettime(0x1, &(0x7f0000004f40)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) dup3(r1, r0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r3, 0x25, 0x2, @val=@tcx={@void, @value=r0}}, 0x1c) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f00000000c0)=0x2, 0x4) bind$can_raw(r4, &(0x7f0000000200)={0x1d, r5}, 0x10) bind$can_raw(r4, &(0x7f00000001c0), 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000100", @ANYRES32=r0, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='ceph\x00', 0x1, &(0x7f00000001c0)='discard') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) (async) socket$inet6(0xa, 0x3, 0x3) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000040)) (async) clock_gettime(0x1, &(0x7f0000004f40)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00'}) (async) dup3(r1, r0, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r3, 0x25, 0x2, @val=@tcx={@void, @value=r0}}, 0x1c) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f00000000c0)=0x2, 0x4) (async) bind$can_raw(r4, &(0x7f0000000200)={0x1d, r5}, 0x10) (async) bind$can_raw(r4, &(0x7f00000001c0), 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000100", @ANYRES32=r0, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) (async) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='ceph\x00', 0x1, &(0x7f00000001c0)='discard') (async) 2m44.914600559s ago: executing program 0 (id=4787): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="01000000"], 0x38}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYBLOB="18010000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf256800000008000300", @ANYRES32=r3, @ANYBLOB="3400c7"], 0x118}, 0x1, 0x0, 0x0, 0x4048010}, 0x8048880) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='environ\x00') unshare(0x400) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x14, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x0, 0x2, 0x0, 0x0, 0x40}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x2, 0x100, @void}}}}}}}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r6], 0x15) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp\x00') r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r8, 0xc0cc5615, &(0x7f0000000040)={0xa, @output={0x1000, 0x0, {0xfff, 0x8}, 0x6, 0x26}}) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x7, 0x2d, 0x9, 0x4}]}) 2m28.567697906s ago: executing program 42 (id=4787): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="01000000"], 0x38}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYBLOB="18010000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf256800000008000300", @ANYRES32=r3, @ANYBLOB="3400c7"], 0x118}, 0x1, 0x0, 0x0, 0x4048010}, 0x8048880) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='environ\x00') unshare(0x400) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x14, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x0, 0x2, 0x0, 0x0, 0x40}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x2, 0x100, @void}}}}}}}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r6], 0x15) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp\x00') r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r8, 0xc0cc5615, &(0x7f0000000040)={0xa, @output={0x1000, 0x0, {0xfff, 0x8}, 0x6, 0x26}}) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x7, 0x2d, 0x9, 0x4}]}) 1m15.654500972s ago: executing program 3 (id=5800): openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x20480, 0x0) (async) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x20480, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000780)={&(0x7f0000000040)=0x4, 0x239, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000740)}) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r0) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20) pread64(r0, &(0x7f0000000980)=""/82, 0x52, 0xd0b) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000a00)={0x48, 0x9, 0x0, 0x0, 0x5}) syz_emit_vhci(&(0x7f0000000a80)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) (async) syz_emit_vhci(&(0x7f0000000a80)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000b40)={0x8, r2}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000bc0)={'team0\x00', &(0x7f0000000b80)=@ethtool_channels={0x3c, 0xa, 0x8000, 0x1, 0x5, 0xffff, 0x0, 0xffffc37f, 0x8}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000c00), 0x48c402, 0x0) openat$cgroup_ro(r0, &(0x7f0000000c40)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async) r4 = openat$cgroup_ro(r0, &(0x7f0000000c40)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000c80)=0x1, 0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000dc0)={0x20, 0x2, &(0x7f0000000cc0)="5c72c0bc7233906fe547bb31a505fff58c83e11aef2d96e47abf308ede3062dbda47ffcb9212386b8c709c17b7c490dc75e4988c89102933acfa831d4794adddace8a3c59a105cef7e7471c7b69a66e027d885d4771067dd0d85a6c42bee6d0eb063ae3fcb8e99651a80489a3630b8d1d182ae3f0e620e72e01f00075a6ca75ef320f9cbd84a46656483baebaae851ada77f9dfd6f7f57e8d4ab42802f9eb1c1c51d5eff8b4273ac7329e6e26a8693be2d92ccf7e73939639b5919f61c8d0bcb0fa1b4cdf81137d2", 0x0, 0x23}) fcntl$getflags(r0, 0x401) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000e00)={0x2a, 0x3, 0x0, {0x0, 0x9, 0x0, 'netdevsim'}}, 0x2a) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r4, 0xc008aec1, &(0x7f0000000e40)={0x2, 0x0, [{0xc0000000, 0x40, 0x2, 0x7fffffff, 0x1537f9fb, 0x2, 0xcb}, {0x80000000, 0x0, 0x7, 0xd, 0xa509, 0xf551, 0x4}]}) (async) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r4, 0xc008aec1, &(0x7f0000000e40)={0x2, 0x0, [{0xc0000000, 0x40, 0x2, 0x7fffffff, 0x1537f9fb, 0x2, 0xcb}, {0x80000000, 0x0, 0x7, 0xd, 0xa509, 0xf551, 0x4}]}) fcntl$getownex(r3, 0x10, &(0x7f0000000ec0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r4) ioctl$SNDCTL_SEQ_NRSYNTHS(r4, 0x8004510a, &(0x7f0000000f40)) (async) ioctl$SNDCTL_SEQ_NRSYNTHS(r4, 0x8004510a, &(0x7f0000000f40)) ioctl$XFS_IOC_FREE_EOFBLOCKS(r3, 0x8080583a, &(0x7f0000000f80)={0x6, 0xfffffff7, 0xfffffffa, 0x3, 0xfffffff9, 0x0, 0x4}) accept$ax25(r0, 0x0, &(0x7f0000001000)) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x6c, r1, 0x300, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x44) (async) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x6c, r1, 0x300, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x44) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001180)={'veth0_to_hsr\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001180)={'veth0_to_hsr\x00', 0x400}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r4) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, r5, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x40100) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000001300)={'hsr0\x00', {0x2, 0x0, @broadcast}}) 1m15.653798389s ago: executing program 3 (id=5801): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e22, 0x0, @loopback, 0x1170}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x80003, 0x0) write(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) mremap(&(0x7f0000efd000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f0000c25000/0x3000)=nil) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000400), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)="6eb6b5c1d8d2fe8d070c1c6a01592f089b3dbca974f6ce1138cba8559f6f3ca0446e8013ef31f55aa1975819d0d9a90009a46ed86e9dd4dc4f784dfc1c8816c8bed68c88cce3eb3a6ce98a877de8524f81586922a3c9a502dfd3e0bd431897a4ccf09732f360071d44ddbf1f04251bcdd531106687dd3db412eaa3ea105e8455d4fb2d946915f73d1171eb1732b58a5b3671f41ec50231add476e9ea47d78b1d8b4e36c62343d7df683c499e2e1c84f06c5a1b55b00539b2b4c8b5aa09b85b43248300e84d7dfc8562b95e", 0xcb}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x606}, "fb00080000527b46", "252432e72844858a068b92a5a810f4dc", "b5ab0900", "5aee41448c84afb7"}, 0x28) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x88a700, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x13) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x0, 0x1}}], 0x20}) ioctl$KVM_SET_GUEST_DEBUG_x86(r8, 0x4048ae9b, &(0x7f0000000140)={0x10001}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x3, 0x3a0, 0x83}, 0x48) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r9, &(0x7f0000000340), 0x8) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) 1m14.627944495s ago: executing program 3 (id=5805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000500)={0xa, @sliced={0x0, [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0xfffd, 0xfffe, 0x0, 0x20, 0x0, 0x0, 0xe04]}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0xc02, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x220}, 0x8000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)}) mount$afs(0x0, &(0x7f000009df40)='.\x00', &(0x7f000009df80), 0x14000, &(0x7f000009dfc0)={[{@dyn}]}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0xcb0a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r10 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x0, 0x30012, r10, 0x82b2d000) write$tun(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dde601110004000000a60c6e"], 0xfdef) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000003640)={0x5c, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x5c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000036c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01cf0235b21a002dbd7000fbdbdf25020000000800010000000fe2153af5d478fe46d9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r4, 0x100, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44050}, 0xc040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x14, &(0x7f0000000cc0)={{0x1}, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f00000035c0)={0x1, 0xb26, 0x1000, &(0x7f00000025c0)=""/4096}) close(0x3) ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f0000003600)) 1m12.601730395s ago: executing program 3 (id=5834): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000100)=@l={0x92, 0xf, 0xd0, 0xf, 0x7, 0x5}) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r2, &(0x7f0000000140)="2bb6ee949ca5ea3cfc7d4dfe3aeee3c76e3e336c40478def5d6db202bfd17484dac4be5531701313309d9b5931d8180bb8a99653cb0c63398786cbd378a4c46f32264c98c507d4189d49dfb8c3d26c63421e88a16489fe557813b950d03fb925625bdfcff0328a86c113cfe3e9e1054e4753f0f3afe4b380c1e6bbcca728a87fa35180a51943e36093a1dcf8e78ba54642e37c395c4b", 0x96) r3 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) ppoll(&(0x7f0000000480)=[{r3, 0x2000}], 0x1, &(0x7f0000000500), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, 0x8001, 0x80000}) close_range(r0, 0xffffffffffffffff, 0x2000000000000) 1m11.290532727s ago: executing program 3 (id=5852): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c000000110005002dbd70000003000007"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8000) accept4(r3, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 1m11.216046667s ago: executing program 3 (id=5853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000007600090700000000000000000702e1ff", @ANYRES32=0x0, @ANYBLOB="0c000d800800ac023ddcf088a7a4e4d39fefed03"], 0x24}, 0x1, 0x5502000000000000}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500000000000800124000000001050004000000000011000300686173683a6970"], 0x60}}, 0x0) 54.910427191s ago: executing program 43 (id=5853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000007600090700000000000000000702e1ff", @ANYRES32=0x0, @ANYBLOB="0c000d800800ac023ddcf088a7a4e4d39fefed03"], 0x24}, 0x1, 0x5502000000000000}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500000000000800124000000001050004000000000011000300686173683a6970"], 0x60}}, 0x0) 3.328912906s ago: executing program 5 (id=6869): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xc0}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000240)="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", 0xfc) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x0, r5, r3, 0x0, 0x0, 0xdead, 0x4}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0xa, r4, 0x0, r6}) 3.242354782s ago: executing program 5 (id=6870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fanotify_init(0x1a, 0x800) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r1, 0x441, 0x4800001a, r2, 0x0) fanotify_mark(r1, 0x1, 0x20, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_emit_vhci(&(0x7f00000027c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000980)={r3, &(0x7f0000000180)="4c437569db4252995d23897ebb60caae77669aec863ec675a6ce48bb9f7f8f5c3762e87060a11eef1f011810d61408007183622cd73d54ed088ad57f", &(0x7f0000000880)=""/220, 0x4}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x1, &(0x7f0000000280)=@raw=[@alu={0x7, 0x1, 0x5, 0x3, 0x4, 0xfffffffffffffff8, 0xfffffffffffffff0}], &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x9d, &(0x7f0000000400)=""/157, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xd, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x1, 0x1, 0x1], &(0x7f0000000580)=[{0x2, 0x2, 0x8, 0x6}], 0x10, 0x4}, 0x94) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r5, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc000) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000680)={0x100000001, r0, 0x80000}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000004c0)=0x4) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x6}]}) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f00000007c0)={0x0, 0x0}) dup2(r0, r6) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32, @ANYBLOB="02000000000000000000002e5805000000000000000000356922a21cd188016fea38b13c01a317bf349fcc7c3ce7a97d2764d5fc74bcc17a73d530c6f787f4eb68bab600004707e1a6fb971e457e9b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xb, &(0x7f00000000c0)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4a33}}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @exit], &(0x7f0000000140)='GPL\x00', 0x16c, 0x0, &(0x7f0000000180), 0x41100, 0x74, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x7, 0x3ff, 0x5}, 0x10, 0x0, r4, 0x2, &(0x7f0000000740)=[r6, r8, 0xffffffffffffffff], &(0x7f0000000780)=[{0x0, 0x5, 0xd, 0x7}, {0x2, 0x4, 0xf, 0x5}], 0x10, 0x8}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000100001000000000000eaffffffffff0988000000060a09040000000000000000020000070900020073797a32000000000900010073797a30000000005c0004805800018008000100667764004c000280080002400000000b080003400000000a080001400000000d0800034000000002080002400000000a080001400000000408000340000000020800014000000001080003400000000214000000090a0103000000000000000002000003140000001100010000000000000000000000000a"], 0xc4}}, 0x0) 3.157773627s ago: executing program 4 (id=6872): syz_emit_ethernet(0x5f, &(0x7f0000000000)={@broadcast, @random="23cde3bff61e", @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@llc={0x4, {@snap={0xaa, 0x0, "05", "022aa3", 0x80f3, "00df468d82a1737314825e037b6a38d3d951ff9b59d5064f20d741c93da83c073c350456bb2af9704cb0e8f52842682f1e4abf8a828909161bc8b71602e6628800ea9943f6"}}}}}, &(0x7f0000000100)={0x0, 0x3, [0xaa5, 0x34a, 0x38f, 0xbfe]}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041817aaaaaaaaaa10"], 0x1a) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140)='hfsplus\x00', 0x204001, 0x0) 3.07968498s ago: executing program 5 (id=6873): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000280)=@ethtool_regs={0x4, 0x9}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) (async) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.079310237s ago: executing program 4 (id=6874): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x7fff, 0x210c00) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001500010000000000000000000a00000004"], 0x44}}, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r5}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a000000205800034824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00030d0000000000000069e3289b6c17a118d9", 0x58}], 0x1) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x40}}, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000040)) (async) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd600a843500142f00fe80bbfe8000000000000000000000000000aa00"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 3.079058551s ago: executing program 4 (id=6875): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x10}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000001c0)='./file0\x00', 0x4000064f) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4c0f, 0x400, 0x3, 0x288}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) (async) io_uring_enter(r3, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) (async) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd2000100000001400000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000004000000000000000200000d000000000800000001000000000000000200000000305f0010a26792b13b5e79fc73fd0b62d03b592a164818f1e9002949bc6e5e6770ad1eef9c8ae867a15aeea21ec3cab460e30dbbf2ebe887f5ac9751165f3218316fc6f146094fba05907b78"], &(0x7f0000000140)=""/75, 0x38, 0x4b, 0x1, 0x8, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000000}, [@jmp={0x5, 0x0, 0x3, 0x7, 0x0, 0x4, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000000}, [@jmp={0x5, 0x0, 0x3, 0x7, 0x0, 0x4, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$BLKGETNRZONES(r7, 0x80041285, &(0x7f0000000240)=0x101) (async) ioctl$BLKGETNRZONES(r7, 0x80041285, &(0x7f0000000240)=0x101) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00050000000000af39545d0000000000489300", @ANYRES32=0x0, @ANYBLOB="13810000000000001c0012800b00010067656e65766500000c00028005000a0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 2.783137463s ago: executing program 5 (id=6881): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x2}}}, 0x24}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4f0f1e1b, r0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) 2.581489486s ago: executing program 4 (id=6886): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x581940) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x66, 0x13, 0x3, 0x9, "90b3556654f8033e0276d3d0f47e10305c6ab3b7371dffba64eece0ac2c90877"}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xc1c66abb48b75484) r2 = openat$incfs(r1, &(0x7f00000000c0)='.log\x00', 0x22800, 0x8) getdents64(r2, &(0x7f0000000100), 0x0) r3 = syz_open_dev$media(&(0x7f0000000380), 0x9, 0x200000) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000500)=0xe8) r8 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) getresgid(&(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0, &(0x7f0000000640)) sendmsg$unix(r2, &(0x7f0000000740)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000001c0)="3a0cdd2f3f6d68cf33c731092b189abcb03e3b3bac220f9dbdcbb1a6cba6b852b10aab62d7aaa35b8ccfcfee3cfc46c108258ad94530b6a8d07d80fd334e8457e42a61e6659fdaaf53e88a984e795e0662b51b3ab26a031a915631fb5d2c5fd903b9a47856bbd08b5f1c88e8a342af651285e48a81f7c2f1e08aeab9ce84bd55b7728a3d3dab497ab51cee6efe35693c838e3e73582865ddb25b5416c6fba6", 0x9f}, {&(0x7f0000000280)="ffd9987d9153a15b386f866f06e876066bf600", 0x13}, {&(0x7f00000002c0)="55a81053ff3fd23c51ed18ab2e493b17cf0f145087f1b19473655c7de2ea05102300973185c233e24040e1e489642ee4206299ba31fb6e817fca87c9b216fadb429a5ee6c5c676e2ee58c54eb81a25", 0x4f}], 0x3, &(0x7f0000000680)=[@rights={{0x24, 0x1, 0x1, [r1, r1, r1, r3, r4]}}, @rights={{0x30, 0x1, 0x1, [r2, r1, r1, r0, r0, r2, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r12}}}], 0x98, 0x24008080}, 0x801) syz_pidfd_open(r8, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000780)=0xfff) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x1, 0x1d6, [0x0, 0x200000000800, 0x200000000830, 0x200000000860], 0x0, &(0x7f00000007c0), &(0x7f0000000800)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x5, 0x50, 0x16, 'macsec0\x00', 'veth0_to_bond\x00', 'veth0_virt_wifi\x00', 'veth1_macvtap\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, [0xff, 0x0, 0xff, 0x0, 0x27c29e0b07c7a888, 0xff], @random="fbdd85cbe328", [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0xe6, 0x116, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x3, 0x7, 0x7f, 0x1, 0x0, "cdbff3e62e38c003297f407ac75acc5331752383e1745305cf8a7e4697b701c0f05468ad3c338ca5b8d2e948babfbef3654a5941316cf2a576207efcf0d25dda"}}}], @common=@STANDARD={'\x00', 0x8}}]}]}, 0x24e) r13 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x40010, r2, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x10c, &(0x7f0000000a80)=0x8, 0x0, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x6040, 0x0) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001bc0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001f80)={r2, 0xe0, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001c80)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000001cc0)=[0x0], &(0x7f0000001d00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000001d40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001dc0), &(0x7f0000001e00), 0x8, 0x9, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001fc0)={0xffffffffffffffff, 0x80, 0x8}, 0xc) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x1f, 0xc, &(0x7f0000000b00)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ldst={0x1, 0x1, 0x6, 0x4, 0x3, 0x50, 0x10}, @jmp={0x5, 0x1, 0x9, 0xa, 0x2, 0xffffffffffffffff, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000b80)='GPL\x00', 0x2, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41000, 0x14, '\x00', r6, @fallback=0x10, r14, 0x8, &(0x7f0000001c00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001c40)={0x3, 0xa, 0x1ff, 0x3}, 0x10, r15, 0xffffffffffffffff, 0x3, &(0x7f0000002000)=[r2, r4, 0x1, r16, r1, r2, r1, r2, r2], &(0x7f0000002040)=[{0x2, 0x1, 0xa, 0x8}, {0x4, 0x4, 0x7, 0xa}, {0x0, 0x5, 0x3, 0x6}]}, 0x94) getsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000002140), &(0x7f0000002180)=0x4) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000003680)=0x0) r19 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000036c0), 0xc000, 0x0) sendmsg$unix(r2, &(0x7f00000037c0)={&(0x7f00000021c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003600)=[{&(0x7f0000002240)="229b7b32985d73485203b3819c0ad1d0289fc0546d34ad65de4069675ba0bedfa00545415f9c2da2", 0x28}, {&(0x7f0000002280)="d23d485dce96733deb7b1b0ceb7e13bf8dd5178a851dfe134217150bc933bd70523b2b970e2c048590662139c3ff9ee7c0ac6627c70486070db437697d2d0bdd738b7f66d64550c28f99e09922753ba175be4947889087d3496c6af8e75e82fd62745c22e9b6b8ec06d8ab5da3d543454e307374abb1bf292d03c418669cdcf41d8c23f9ad0c2dc2fffb5563b74c4cecb72ab22282c84606c1650c6bfabf8693ad48ccffd02261bcc6f757edf38399dd9a8058bd44aeb43a89cd485452989304d9700180831afa2609a59fe4ad5d58195bf8a7c8a28597e0dc2697ac3d92d52ae79fdc9f915ae8283b2e1ff736", 0xed}, {&(0x7f0000002380)="7d939053a424df09ceefa50496ec5d973d2432f4c1e8fe0eb2d939176ae4fc73b0a5ca296a9fb0280985ddf0a90adfa466f1464ce6530c5801a04df25a8dc7bb0b858cd764868224644eace85bcedfa46e31f21481bf8ebeae23597ffde6ab8c4369170af94ee5d3ccf661ec4a9ed405cf87eb4ba4ae82930bb2f6fe55143a9fa35842e053a6a6bb0b4dd9a71cd3352b1fb93957610f0e37b5383f4a7ed77c0ed2cf18e33ab5a53ec80804b357adf9522fe0e1e576ffdae8fdf4dc3a3ec1d493d4d6df4d52d95c1a80ea5edc53d0febcbce427b1fc6bcc59fd08a72ee5dff46b5c453da3ca7e360e446c07c034b2", 0xee}, {&(0x7f0000002480)="7181822de59af2e67c31616c61d6207c3e93a650ad8c70a5509253cd2d4b18921a8fcc57363789d927e32006eb658165325f0638964e357375ba029d5aa7adb9db5e06b87651ef7ad6127f7f512608feec1e6f6e82ce3ff15e1496445d40485716575c000346d79298fb12c6", 0x6c}, {&(0x7f0000002500)="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", 0x1000}, {&(0x7f0000003500)="b1e66ee37db940ad313721b44aa863b3bc85e42bb4d0f1c21d20920a00f91c6f50fb8710bf3b559b9991dd8326ddeab1f2c731cbe38c573f0aa6c1ccbd490b379e90bf48c4736f3513ec9dd8cc2d25d30489172c523bb14232ee1f881950ca9850647732717ebb193a4eecd1af524a92fb7f167927bd31c4cb8e89effdd5361a6fd69c05d5b6aadfa518de07de55fdb7e4cf89ecda212e1e3aaa43a005a1d05f5480081179bc2ed3068e4263c6e5b37f8efcc93c69a29c198bf64607cc682aa6402765466aae7119f72b19e470fd7caef1b68f479db50f5cf7", 0xd9}], 0x6, &(0x7f0000003700)=[@cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r18, r7, r11}}}, @rights={{0x14, 0x1, 0x1, [r17]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, r11}}}, @rights={{0x2c, 0x1, 0x1, [r0, r4, r19, r2, r1, r3, r1]}}], 0xa8, 0x80}, 0x800) getdents64(r19, &(0x7f0000003800)=""/186, 0xba) r20 = eventfd2(0x6, 0x800) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f00000038c0)={0x0, r20}) 2.580411965s ago: executing program 4 (id=6888): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x300, &(0x7f0000001a80)={&(0x7f0000003640)={0x54, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x54}}, 0x20000000) 2.513860225s ago: executing program 4 (id=6889): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x51) (async, rerun: 64) socket(0x11, 0x800000002, 0x0) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89, 0x40884}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f00000000c0)="030aa57c0ccbb23bf9ec27b6692b2f98b5", 0x80, r1, 0x0, 0x7}, 0x38) (async) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) (async) ioctl$TUNSETPERSIST(r6, 0x400454c9, 0x1) (async) ioctl$TUNSETDEBUG(r6, 0x400454ce, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x59, 0xe0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000640)=@svm={0x0, 0x1, 0x1080, {0x7000}, {"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"}}) (async, rerun: 64) r12 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (rerun: 64) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r12, 0xae80, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xe0b, 0x2000000, 0x25dfdbfe, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x84cba27e841040dd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x4, 0x7fc, 0x9, 0x800}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040005}, 0x20028004) (async, rerun: 32) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x8, 0x5, 0x400, 0x8, r1, 0xf, '\x00', r13, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0xf}, 0x50) (rerun: 32) syz_io_uring_complete(0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r14}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.552627062s ago: executing program 9 (id=6899): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x10) r4 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x10, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x18) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000)) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)=0x1) 1.467208956s ago: executing program 9 (id=6902): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) (async) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xfffffe01}, 0x1c) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r5, 0x1, 0x20, 0x25dfdbfa, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x40, 0x20, 0x2, 0x6, {{0x11, 0x4, 0x3, 0x9, 0x44, 0x65, 0x0, 0x5, 0x2f, 0x0, @remote, @multicast1, {[@ra={0x94, 0x4}, @rr={0x7, 0xb, 0xe, [@local, @empty]}, @timestamp_addr={0x44, 0x1c, 0x71, 0x1, 0xe, [{@multicast1, 0x1}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x7}]}, @ra={0x94, 0x4}]}}}}}) (async, rerun: 64) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) (rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r8, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) r9 = socket(0x37, 0x4, 0xffffffff) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20981, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)={0x1f4, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_LINKMODES_OURS={0x198, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x50, 0x4, "b6689d0c0740191aaf9636dd3149e4c8b7767cd0dfb7129f8fc6d64f5bf3b74c81d101a2b19aedd86f52d2cbdfe0d77cb0e73ca6f01d34e30f3f7f3d348c95b1f3c38a7f29d5c2bcd3c9c9de"}, @ETHTOOL_A_BITSET_MASK={0xf5, 0x5, "c742c2fbeb6263d295d000d7f13ef1ff766e216a3c42a40a3e1493431681c5303f30014d709424a935810f42f84855adcd6e07b2f547560b7e93b93fc76953352782bc29bd3692da3f42246c49eed9eddc19f7979acbebc269ea5b418648a07a4c1fa6d4c3ee40e72b6f9e5a582da2b037d9b43a7539976a8027af8189ee3d929943c3f249954e27f9832ec5c72d66d8096a8ee40f036608cb55070c93723fc9d30396df15157b4b91d2e0fa19b92d79656a78932af71a5b9c5ceb94d8f0e63e217554595ce46614e52f3d30d03e042f8a98b63961f6016a95a79af286ef47672de30b0836f0df38c65449bd89a616489f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x24fc}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20001}, 0x10) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) (rerun: 32) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r14, 0x6, 0x1, &(0x7f00000002c0), 0x4) (async, rerun: 32) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="638c06000000ffdbdf254f00000008000300", @ANYRES32=r13, @ANYBLOB="40007a80140001005fdc00000069c7179a6069ab5160db440c000300f4dc82e4d3e539711c00020056fbe883aa28637b7eca8ecd189ed459def191ad83905dcd"], 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x24000000) (rerun: 32) 1.38197792s ago: executing program 9 (id=6903): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14000000130001002bbd7000fcffffff03"], 0x14}], 0x1, 0x0, 0x0, 0x8088}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) r2 = semget$private(0x0, 0x207, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000003c0)) listen(r0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r4, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000340)={0x2, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000380)={0x2, @sdr}) timer_settime(r3, 0x1, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x10001}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x5, 0x47a}, 0x8) 1.381747699s ago: executing program 9 (id=6904): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000580), 0x2181, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000001c0)={"2370491d", 0x8, 0x5, 0x2, 0x0, 0x8, "00cb00000000002962400400007380", "0200", '\x00', "15000040", ["e86621d9cc668c391f77c506", "3549ffffffffffffff01080c", "006a9cc1f000", "cf6cce2296b3f853e224c4e0"]}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x40, @any, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, &(0x7f0000000200)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000791207000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000200)=""/5, 0x5}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000280)=""/128, 0x80}, {&(0x7f0000000300)=""/162, 0xa2}], 0x5) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x1}) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0), 0x200a00, 0x0) read(r4, &(0x7f0000000500)=""/44, 0x2c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RVERSION(r5, &(0x7f0000000100)={0x13, 0x65, 0xffff, 0x9b2, 0x6, '9P2000'}, 0x13) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000540)=0x286841a6, 0x4) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000c2f85e3b909d219ae787652e31b1087c5c2e5d8c81fa3b1df8139b33c1987675d445e38f202012c2c6fc59a8c24a17452306e5e9b0144618", @ANYRES16=r4, @ANYBLOB="0400ffffffff0000000001000000"], 0x14}}, 0x0) 1.285224585s ago: executing program 9 (id=6905): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0xd, 0x400, 0x3, 0x8001}, 0x10) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x7, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x61900, 0x4}, 0x94) 1.14259291s ago: executing program 9 (id=6906): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xe, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x6, 0x6, @multicast}, 0x14) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f01040000000800"], 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0'}, 0xb) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, &(0x7f0000000000)) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xa0, 0x10, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x2, 0x7, 0x1, {0x22, 0x94d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x81, 0xa0, 0x6}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x3b, 0x6, 0x3, 0x20, 0xf}, 0xd9, &(0x7f0000000180)={0x5, 0xf, 0xd9, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "0a094401803db02e8ada3a56d0942749"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x4, 0x1, 0x1ff}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x1, 0x7, 0xc}, @generic={0x9e, 0x10, 0x1, "72f4301fedf68bbd4b44b3e7d8ff8876355360587c45fe47e56692b075c99ab107f8804b73dbbab09cedb38efe0bebbca1b6b665467b1acb1296560c05f8956762df66e0ff738eec767c53578cfc6811a789053786b456a7665089258ed29e8fc56ee2f30d1b99d85c3a50217be370bc28f60ecc23d8f5f74233b9d8f7bab514aba01ef7b0e8cc13209f4746994c9b109ebc598b25ef23bef780d6"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0xe, 0xc, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x4, 0x8, 0x3}]}, 0x9, [{0xe, &(0x7f0000000280)=@string={0xe, 0x3, "182aa33963f5f0f87ab71941"}}, {0x63, &(0x7f00000002c0)=@string={0x63, 0x3, "ca1871997385b6560b3ad75a725c71449b53db1631cb517637688a564889ff89b1cc4bb7dbedf3652c60e45d25e2156e5aa2fc8bfa3bae41b2c73a54bdfbfc5e250c35914c9f5095eededf9a5661f8f9a9470411f464dfb639e61f33d366575173"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3660}}, {0xf4, &(0x7f0000000380)=@string={0xf4, 0x3, "ed090a778dfc88d98a49d8d374eac42b467477d632bfa9b670ab0cd97d5b1ba2ceee701743673fff332d4d503d0483dc9a9bfb96bd00605d822a7901fa2d965deb5639ca75c3ba294c898103b62d7b354201b326026dbbf2dcfdded4a397794dfea5c7cd3028bd291a7e7f3379f3b5cbb07126283446e07283887c7fa91a642c01221a4ac3cee71801d39a0f953ce5234468ee3b9d7d7aa64fa597dd976e7b7f0112a2e127dcb0497bedd767bd699baac9b65a4cac43b6b3ab3a28dab51e7a921f72fe8dd8ca311e8efbf339b5bd78f376521de166882a19dd38a9fa77d66d03f86618de35a7aab02d24c2f3961fd99e21aa"}}, {0x8c, &(0x7f0000000480)=@string={0x8c, 0x3, "2b67b1fa8e71635184e9d6cf1fce6716fc0887d4b78e68efa71d9f1102f7d87064943be5c58603e8d01602162d8c970524d03cbda3308a60143735514f7e2467b38d1fa4caa495918045ab43849cf58714b42a90ca8a20bb68fb7b1ba8ad68d1d5c324e6bb53d8a85ea5fe29a935ce9193e7d440118d7b8f3303125168eb27d8a6f62e9e1e7bc08d0267"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x300a}}, {0x8b, &(0x7f00000005c0)=@string={0x8b, 0x3, "722145e59db90f4a619be155b763c815162772773fe477a0be068034160f2ac2623c87e9ce4011a9c47e715dfeb51abc645ce157e49e1dcbae9931ab60df5733d1fbfb36009567be6b13832e4dac903ed8cdc66cb94edac5c84ca46c82bd616835315b7c79dc9ee18a8506ff050717d2bad4fdce633cf5ca1fa4044c232a8c1acac63b093e192157df"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x2409}}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x4, 0xa8, &(0x7f0000000000)=""/168, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 900.230615ms ago: executing program 5 (id=6907): capset(&(0x7f0000001680)={0x20071026}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x8000, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002700)={'ip6gre0\x00', &(0x7f0000002680)={'ip6_vti0\x00', 0x0, 0x29, 0xfd, 0x5, 0x0, 0x20, @private1, @remote, 0x10, 0x10, 0xaff, 0xb92}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 846.707892ms ago: executing program 5 (id=6909): syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x100, 0x10001}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x200000521}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfff0, 0x0}) 523.630589ms ago: executing program 7 (id=6917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x40, r1, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x24}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc7}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x59}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x800) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x266}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x29}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10c}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000054) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x40, r1, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x24}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc7}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x59}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x800) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x266}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x29}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10c}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000054) (async) 418.472076ms ago: executing program 7 (id=6918): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) syz_pidfd_open(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$inet(0x10, 0x3, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{0x1000, 0x3, 0x0, 0xe}, 'syz1\x00', 0x19}) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, &(0x7f0000000400)) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000440)={0x0, 0xe051}, 0x8) (async) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x63) (async) ioctl$UI_DEV_CREATE(r2, 0x5501) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000500)={0x50, 0xf, 0x1d, {0x12, 0xcac}, {0x8000, 0x7}, @ramp={0x400, 0x7, {0x8, 0xfffb, 0xeb4d, 0xf7f3}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0x23, &(0x7f0000000180)=0x80000004, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) (async) bind$inet6(r6, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @empty, 0x80ab}, 0x1c) (async) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c00000000001178000000000000000000004e20000890787008ec1551a698fe597823000dc2bdb258eb60f65b981002d4bfc83a8416de9e7286"], 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, @l2={0x1f, 0x8, @none, 0x9}, @qipcrtr={0x2a, 0x0, 0x1}, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)='veth0_to_bond\x00', 0x101, 0x5, 0xfffc}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="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"], 0x44}}, 0x0) 418.123851ms ago: executing program 7 (id=6919): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f00000000c0)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c0000180037801300030071722834"], 0x2c}}, 0xc0) r7 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x5, 0x47a}, 0x8) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x420401, 0x20, 0x2}, 0x18) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="2c0000002e0001002abd70000000000008000000", @ANYRES32, @ANYBLOB="0b00e880976b6408686030000500018099"], 0x2c}], 0x1}, 0x0) statx(r9, &(0x7f00000000c0)='./file0\x00', 0x400, 0x2, &(0x7f0000000340)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="224504008052000018001280000001007369740000000280000010000300000000000300ac1414aa00000f0000000000000003000000000000000d000e0000000000100040000000000012004e210000000010000300000000000300e000000108000a00", @ANYRES32=r8, @ANYBLOB="d3f3a9c0fcfc739c9125fec8340864639fe11a92b4232873a1ade0bc80d54190ad183fd46b682c1b1b8dc7e110101869f4e120b24c49883c8e6642f495fa9692dd2a6546a8d19881abe55cff07d317a64d7326ffe7eb1e36e14c992380f70a0b27be91601575b3d9368305b073f0fe66b40956ccb4088b9b70f62ee9dcce2254ca631b497855699b791a7d1855850d87a8769a09160f412e0b69bce4e2a263d913dc4fd6"], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0a000001000080030000000700000000000000", @ANYRES32=r0, @ANYBLOB="0600"/20, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0400000004000000050000000d00"/28], 0x50) 290.595536ms ago: executing program 7 (id=6920): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0xa8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x48f, 0x0, 0x1000008}]}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0xc) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 1.436308ms ago: executing program 7 (id=6921): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000003640)={0x54, r1, 0x1, 0xffffffff, 0x3f, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x54}}, 0x20000000) 0s ago: executing program 7 (id=6922): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000500000018"], 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r3, 0x0, 0xd, 0x0, &(0x7f0000000100)) r4 = fsmount(r2, 0x0, 0x0) r5 = openat(r4, &(0x7f0000000280)='.\x00', 0x2000, 0x0) open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000010001"], 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000480)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000001240)={{r0}, r6, 0x4, @inherit={0x60, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000c81c3f20000001030000000000ff0f0000000000000200000000000020210000000000000003000000000000008010000000001c0001000000000000000100000000001200040000000000000001803166260a000006000000"]}, @subvolid=0x100}) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f00000001c0), 0x0) ioctl$TFD_IOC_SET_TICKS(r7, 0x40085400, &(0x7f0000000080)=0x6) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r9, @ANYBLOB="010025bd7000fddba9250bef00003000018008000100", @ANYRES32=r1, @ANYBLOB="08000300050000001400020064756d6d79300000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="6400018008000300020000001400020070696d3672656731000000000000000008000100", @ANYRES32=r11, @ANYBLOB="0800030001000000080003000100000008000300030000001400020062726964676530000000000000000000080003000300000008000100", @ANYRES32=r1, @ANYBLOB="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"], 0x25c}}, 0x800) kernel console output (not intermixed with test programs): stem [ 497.774564][ T9514] udevd[9514]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 497.786194][T11585] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 497.788956][T11585] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 497.801421][T11585] vhci_hcd vhci_hcd.0: Device attached [ 497.805817][T11586] usbip_core: unknown command [ 497.808720][T11586] vhci_hcd: unknown pdu 0 [ 497.810788][T11586] usbip_core: unknown command [ 497.813108][ T6478] vhci_hcd vhci_hcd.4: stop threads [ 497.814956][ T6478] vhci_hcd vhci_hcd.4: release socket [ 497.816702][ T6478] vhci_hcd vhci_hcd.4: disconnect device [ 497.873481][T11596] syzkaller0: entered promiscuous mode [ 497.875329][T11596] syzkaller0: entered allmulticast mode [ 497.976882][T11537] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 497.981697][ T6064] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 497.997568][ T6064] wwan wwan0: port wwan0mbim0 attached [ 498.011950][ T6064] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 8e:3e:d1:09:13:d2 [ 498.200577][ C1] wdm_int_callback: 5 callbacks suppressed [ 498.200592][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 498.205665][ C1] wdm_int_callback: 5 callbacks suppressed [ 498.205681][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 498.210491][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 498.212957][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 498.215795][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 498.218251][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 498.220735][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 498.223190][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 498.225713][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 498.228495][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 498.230974][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 498.233513][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 498.235947][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 498.238140][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 498.240299][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 498.242488][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 498.244859][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 498.246982][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 498.251530][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 498.253826][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 498.258323][ T5634] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 498.301089][T11638] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5673'. [ 498.369407][T11644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11644 comm=syz.3.5654 [ 498.433753][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 498.476530][T19196] usb 8-1: USB disconnect, device number 25 [ 498.483046][T19196] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 498.671752][T19196] wwan wwan0: port wwan0mbim0 disconnected [ 498.939150][ T5969] hid-generic 0005:0006:5508.001A: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 498.982709][T11697] fido_id[11697]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 499.039911][T11707] macvlan2: entered promiscuous mode [ 499.041901][T11707] bridge0: entered promiscuous mode [ 499.318193][T11740] 9pnet_fd: Insufficient options for proto=fd [ 499.374759][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 499.399049][T11755] binder: BINDER_SET_CONTEXT_MGR already set [ 499.401101][T11755] binder: 11751:11755 ioctl 4018620d 200000000280 returned -16 [ 499.434046][T11747] ip6gre1: entered promiscuous mode [ 499.435885][T11747] ip6gre1: entered allmulticast mode [ 499.441070][T11747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=11747 comm=syz.9.5686 [ 499.447068][T11747] netlink: 'syz.9.5686': attribute type 6 has an invalid length. [ 499.449661][T11747] netlink: 'syz.9.5686': attribute type 7 has an invalid length. [ 499.452422][T11747] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5686'. [ 499.644332][T11781] 9pnet_virtio: no channels available for device ./bus [ 499.894871][T11790] netlink: 'syz.7.5696': attribute type 4 has an invalid length. [ 500.282449][ T40] audit: type=1400 audit(2000000369.273:16276): avc: denied { lock } for pid=11826 comm="syz.3.5705" path="socket:[128432]" dev="sockfs" ino=128432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 500.300481][T11829] XFS (nbd7): SB validate failed with error -5. [ 500.322794][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 500.354353][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 500.582576][T11865] bridge_slave_1: left allmulticast mode [ 500.584534][T11865] bridge_slave_1: left promiscuous mode [ 500.588241][T11865] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.605098][ T40] audit: type=1400 audit(2000000369.572:16277): avc: denied { create } for pid=11867 comm="syz.4.5715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 500.613861][T11865] bridge_slave_0: left allmulticast mode [ 500.615661][T11865] bridge_slave_0: left promiscuous mode [ 500.619513][T11865] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.622944][ T40] audit: type=1400 audit(2000000369.590:16278): avc: denied { ioctl } for pid=11867 comm="syz.4.5715" path="socket:[128512]" dev="sockfs" ino=128512 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 500.718797][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5712'. [ 500.895883][ T5975] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 501.056111][ T5975] usb 9-1: device descriptor read/64, error -71 [ 501.098765][T22261] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 501.259133][T22261] usb 14-1: Using ep0 maxpacket: 8 [ 501.262177][T22261] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 501.264769][T22261] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 501.267783][T22261] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 501.271304][T22261] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 501.274483][T22261] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.278564][T22261] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 501.281437][T22261] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.324841][ T5975] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 501.473448][ T5975] usb 9-1: device descriptor read/64, error -71 [ 501.506203][T22261] usb 14-1: usb_control_msg returned -32 [ 501.508083][T22261] usbtmc 14-1:16.0: can't read capabilities [ 501.592874][ T5975] usb usb9-port1: attempt power cycle [ 501.653469][T11923] hpfs: Bad magic ... probably not HPFS [ 501.656443][T11923] hpfs: Bad magic ... probably not HPFS [ 501.883071][T11928] usbtmc 14-1:16.0: stb usb_control_msg returned -32 [ 501.947571][T11926] Invalid option length (511) for dns_resolver key [ 502.810145][T11936] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5730'. [ 502.813178][T11936] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5730'. [ 502.906954][ T5975] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 502.919044][ T7195] usb 14-1: USB disconnect, device number 13 [ 502.942027][ T40] audit: type=1400 audit(2000000371.759:16279): avc: denied { map } for pid=11956 comm="syz.3.5735" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 502.957031][ T5975] usb 9-1: device descriptor read/8, error -71 [ 503.218596][ T5975] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 503.249573][ T5975] usb 9-1: device descriptor read/8, error -71 [ 503.367436][ T5975] usb usb9-port1: unable to enumerate USB device [ 503.844960][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 504.131928][T12002] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 504.135184][T12002] overlayfs: overlapping lowerdir path [ 504.160692][ T40] audit: type=1400 audit(2000000372.900:16280): avc: denied { getattr } for pid=12001 comm="syz.3.5746" path="time:[4026531834]" dev="nsfs" ino=4026531834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 504.205312][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 504.299395][T12013] xt_hashlimit: max too large, truncated to 1048576 [ 505.116492][T12044] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5756'. [ 505.146501][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 505.186778][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 505.320689][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 505.324366][ T40] audit: type=1400 audit(2000000373.984:16281): avc: denied { map } for pid=12071 comm="syz.3.5760" path="socket:[127803]" dev="sockfs" ino=127803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 505.328998][T12073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.638481][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 505.642406][T12097] netlink: 'syz.4.5762': attribute type 4 has an invalid length. [ 505.650877][T12097] netlink: 'syz.4.5762': attribute type 4 has an invalid length. [ 505.784189][ T3247] Bluetooth: hci1: command 0x0406 tx timeout [ 505.788230][T12106] cgroup: Unknown subsys name 'euid<00000000000000016640' [ 505.846118][T12113] openvswitch: netlink: Flow key attribute not present in set flow. [ 505.920996][T12121] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 505.921656][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 505.928862][T12121] SELinux: policydb string SE „öë^ does not match my string SE Linux [ 505.931946][T12121] SELinux: failed to load policy [ 505.935922][T12126] netlink: 'syz.4.5769': attribute type 23 has an invalid length. [ 505.974997][T24928] udevd[24928]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 506.040236][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 506.111124][T12150] sctp: [Deprecated]: syz.4.5773 (pid 12150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.111124][T12150] Use struct sctp_sack_info instead [ 506.126348][T12150] openvswitch: netlink: Unknown key attributes 2 [ 506.139748][T12154] netlink: 'syz.9.5775': attribute type 4 has an invalid length. [ 506.158966][ T5975] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 506.322242][ T5975] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 506.325944][ T5975] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 506.331668][ T5975] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 506.335488][ T5975] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 506.340032][ T5975] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 506.347115][ T5975] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 506.351006][ T5975] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 506.354691][ T5975] usb 12-1: Product: syz [ 506.356526][ T5975] usb 12-1: Manufacturer: syz [ 506.364530][ T5975] cdc_wdm 12-1:1.0: skipping garbage [ 506.366800][ T5975] cdc_wdm 12-1:1.0: skipping garbage [ 506.370735][ T5975] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 506.373643][ T5975] cdc_wdm 12-1:1.0: Unknown control protocol [ 506.825112][T12173] Cannot find add_set index 46338 as target [ 506.837825][T12116] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5767'. [ 506.845901][T12116] bridge_slave_1: left allmulticast mode [ 506.848367][T12116] bridge_slave_1: left promiscuous mode [ 506.850217][T12116] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.858058][T12116] bridge_slave_0: left allmulticast mode [ 506.859847][T12116] bridge_slave_0: left promiscuous mode [ 506.861731][T12116] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.886886][T12116] bridge0 (unregistering): left promiscuous mode [ 506.951644][T12189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.047214][T12195] ptrace attach of "/syz-executor exec"[507] was attempted by " [ 507.109638][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 507.196957][ T7153] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 507.252545][T12223] binder: 12221:12223 ioctl c0306201 0 returned -14 [ 507.263412][T12223] binder: 12221:12223 ioctl c0306201 0 returned -14 [ 507.282841][T12229] IPv6: syztnl0: Disabled Multicast RS [ 507.348359][T12240] CIFS: Unable to determine destination address [ 507.407340][ T40] audit: type=1804 audit(2000000375.928:16282): pid=12240 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.5793" name="file0" dev="tmpfs" ino=1504 res=1 errno=0 [ 507.407955][T12240] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1 [ 507.417732][T12240] ref_ctr increment failed for inode: 0x5e0 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888035136200 [ 507.429609][T12239] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: -1 [ 507.434690][T12239] ref_ctr decrement failed for inode: 0x5e0 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888035136200 [ 507.439024][T12239] uprobe: syz.9.5793:12239 failed to unregister, leaking uprobe [ 507.441849][T22261] usb 12-1: USB disconnect, device number 19 [ 507.481652][T12254] program syz.3.5795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 507.768800][T12270] tun0: tun_chr_ioctl cmd 1074025672 [ 507.770570][T12270] tun0: ignored: set checksum enabled [ 507.913934][T22261] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 508.010107][T12279] batman_adv: batadv0: Interface deactivated: dummy0 [ 508.075414][T22261] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 508.080291][T22261] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 508.085042][T22261] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 508.089102][T22261] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 508.094060][T22261] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 508.098375][T22261] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.104640][T22261] usb 12-1: config 0 descriptor?? [ 508.177943][T12286] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 508.191366][T12285] [U]  [ 508.540566][T22261] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 508.543076][T22261] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 508.545726][T22261] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 508.548125][T22261] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 508.550503][T22261] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 508.552853][T22261] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 508.555343][T22261] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 508.557699][T22261] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 508.560069][T22261] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 508.562391][T22261] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 508.572305][T22261] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 508.590252][T12298] tmpfs: Unknown parameter '{/' [ 508.843046][T12300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.847947][T12300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.858554][ T5975] usb 12-1: USB disconnect, device number 20 [ 508.884971][T12289] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 508.907481][ T7144] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.910713][ T7144] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.913436][ T7144] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.915834][ T7144] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.924182][ T7144] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.926567][ T7144] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.928993][ T7144] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.933018][ T7144] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.938816][T12321] binder: 12318:12321 ioctl c018620b 0 returned -14 [ 508.943551][T12321] binder: 12318:12321 ioctl c0306201 200000000040 returned -11 [ 509.000815][T12332] overlayfs: conflicting options: userxattr,redirect_dir=on [ 509.017732][T12335] fuse: Bad value for 'fd' [ 509.019090][T12321] block nbd3: shutting down sockets [ 509.430529][ T7144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.433286][ T7144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.516252][ T40] audit: type=1326 audit(2000000377.901:16283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12391 comm="syz.7.5817" exe="/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fb034b9bf79 code=0x0 [ 509.577575][T12396] netlink: 'syz.9.5818': attribute type 1 has an invalid length. [ 509.582735][ T63] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 509.585912][ T63] CPU: 0 UID: 0 PID: 63 Comm: kworker/u33:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 509.585931][ T63] Tainted: [L]=SOFTLOCKUP [ 509.585935][ T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 509.585943][ T63] Workqueue: hci2 hci_rx_work [ 509.585987][ T63] Call Trace: [ 509.585992][ T63] [ 509.585997][ T63] dump_stack_lvl+0x100/0x190 [ 509.586018][ T63] sysfs_warn_dup.cold+0x1c/0x28 [ 509.586037][ T63] sysfs_create_dir_ns+0x24b/0x2b0 [ 509.586049][ T63] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 509.586059][ T63] ? find_held_lock+0x2b/0x80 [ 509.586073][ T63] ? kobject_add_internal+0x25f/0x930 [ 509.586091][ T63] ? kobject_add_internal+0x25f/0x930 [ 509.586110][ T63] ? do_raw_spin_unlock+0x145/0x1e0 [ 509.586123][ T63] kobject_add_internal+0x2c8/0x930 [ 509.586143][ T63] kobject_add+0x16a/0x1e0 [ 509.586160][ T63] ? __pfx_kobject_add+0x10/0x10 [ 509.586177][ T63] ? class_to_subsys+0x10f/0x150 [ 509.586203][ T63] ? kobject_put+0xb9/0x640 [ 509.586219][ T63] ? _raw_spin_unlock+0x28/0x50 [ 509.586237][ T63] device_add+0x294/0x1950 [ 509.586252][ T63] ? __pfx_dev_set_name+0x10/0x10 [ 509.586270][ T63] ? __pfx_device_add+0x10/0x10 [ 509.586285][ T63] ? mgmt_send_event_skb+0x2fb/0x460 [ 509.586305][ T63] hci_conn_add_sysfs+0x1a3/0x260 [ 509.586322][ T63] le_conn_complete_evt+0x11cb/0x1f40 [ 509.586339][ T63] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 509.586357][ T63] hci_le_conn_complete_evt+0x23c/0x3a0 [ 509.586371][ T63] ? skb_pull_data+0x15f/0x1e0 [ 509.586384][ T63] hci_le_meta_evt+0x34a/0x5f0 [ 509.586398][ T63] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 509.586413][ T63] hci_event_packet+0x682/0x11c0 [ 509.586427][ T63] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 509.586442][ T63] ? __pfx_hci_event_packet+0x10/0x10 [ 509.586457][ T63] ? kcov_remote_start+0x374/0x660 [ 509.586469][ T63] ? lockdep_hardirqs_on+0x78/0x100 [ 509.586487][ T63] hci_rx_work+0x451/0xfc0 [ 509.586503][ T63] process_one_work+0x9c2/0x1840 [ 509.586526][ T63] ? __pfx_process_one_work+0x10/0x10 [ 509.586548][ T63] ? __pfx_hci_rx_work+0x10/0x10 [ 509.586562][ T63] worker_thread+0x5da/0xe40 [ 509.586585][ T63] ? kthread+0x13a/0x450 [ 509.586600][ T63] ? __pfx_worker_thread+0x10/0x10 [ 509.586616][ T63] kthread+0x370/0x450 [ 509.586631][ T63] ? __pfx_kthread+0x10/0x10 [ 509.586648][ T63] ret_from_fork+0x754/0xd80 [ 509.586665][ T63] ? __pfx_ret_from_fork+0x10/0x10 [ 509.586683][ T63] ? __switch_to+0x7b4/0x10c0 [ 509.586696][ T63] ? __pfx_kthread+0x10/0x10 [ 509.586712][ T63] ret_from_fork_asm+0x1a/0x30 [ 509.586733][ T63] [ 509.586749][ T63] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 509.674085][ T63] Bluetooth: hci2: failed to register connection device [ 509.837983][T12403] gretap0: entered allmulticast mode [ 510.021489][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 510.061914][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 510.111636][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 510.128588][T12417] trusted_key: encrypted_key: keyword 'u' not recognized [ 510.395271][ T7149] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 510.688841][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 511.240132][ T5992] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 511.411085][ T5992] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 511.414623][ T5992] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 511.418358][ T5992] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 511.423920][ T5992] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.433466][T12439] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 511.438459][ T5992] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 511.541895][T12464] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5837'. [ 511.544819][T12464] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5837'. [ 511.549785][T12464] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5837'. [ 511.588689][T12469] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5838'. [ 511.615532][ T9514] udevd[9514]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 511.635280][T12474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5839'. [ 511.715266][ T6064] usb 8-1: USB disconnect, device number 26 [ 511.726387][T12487] overlayfs: failed to clone upperpath [ 511.728666][T12470] loop5: detected capacity change from 0 to 2640 [ 511.785172][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 511.788738][T24928] buffer_io_error: 138 callbacks suppressed [ 511.788750][T24928] Buffer I/O error on dev loop5, logical block 0, async page read [ 511.795527][T24928] Buffer I/O error on dev loop5, logical block 0, async page read [ 511.798333][T24928] Buffer I/O error on dev loop5, logical block 0, async page read [ 511.801285][T24928] Buffer I/O error on dev loop5, logical block 0, async page read [ 511.802630][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 511.804472][T24928] Buffer I/O error on dev loop5, logical block 0, async page read [ 511.816565][T24928] udevd[24928]: symlink '../../loop5' '/dev/disk/by-diskseq/115.tmp-b7:5' failed: Read-only file system [ 512.144052][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 512.145985][T12558] netlink: 80 bytes leftover after parsing attributes in process `syz.9.5850'. [ 512.158034][ T40] audit: type=1326 audit(2000000380.369:16284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12554 comm="syz.4.5849" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f719f39bf79 code=0x0 [ 512.166944][ T40] audit: type=1326 audit(2000000380.369:16285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12554 comm="syz.4.5849" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f719f39bf79 code=0x0 [ 512.211872][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5849'. [ 512.339766][T12583] netlink: 'syz.9.5855': attribute type 58 has an invalid length. [ 512.402051][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/115.tmp-b7:5' failed: Read-only file system [ 512.460577][T10587] block nbd8: Possible stuck request ffff88802a1b8000: control (read@0,1024B). Runtime 120 seconds [ 512.463988][T10587] block nbd8: Possible stuck request ffff88802a1b8200: control (read@1024,1024B). Runtime 120 seconds [ 512.467557][T10587] block nbd8: Possible stuck request ffff88802a1b8400: control (read@2048,1024B). Runtime 120 seconds [ 512.471121][T10587] block nbd8: Possible stuck request ffff88802a1b8600: control (read@3072,1024B). Runtime 120 seconds [ 513.329514][T12602] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5859'. [ 513.332877][T12602] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5859'. [ 513.337225][T12602] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5859'. [ 513.355171][T12606] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 513.361927][T12608] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 513.728782][T12652] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 513.731891][T12652] IPVS: set_ctl: invalid protocol: 25974 48.95.116.111:24418 [ 513.734912][T12652] IPVS: set_ctl: invalid protocol: 25974 48.95.116.111:24418 [ 513.738994][T12651] block nbd4: shutting down sockets [ 514.446135][ T6064] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 514.547338][T12696] ref_ctr increment failed for inode: 0x6a8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802c826e40 [ 514.550873][ T40] audit: type=1804 audit(2000000382.612:16286): pid=12696 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.5881" name="file0" dev="tmpfs" ino=1704 res=1 errno=0 [ 514.611131][ T6064] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 514.614181][ T6064] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 514.617436][ T6064] usb 9-1: config 0 interface 0 has no altsetting 0 [ 514.621705][ T6064] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 514.624555][ T6064] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 514.627208][ T6064] usb 9-1: Product: syz [ 514.628543][ T6064] usb 9-1: Manufacturer: syz [ 514.629964][ T6064] usb 9-1: SerialNumber: syz [ 514.634918][ T6064] usb 9-1: config 0 descriptor?? [ 514.638205][ T6064] hub 9-1:0.0: bad descriptor, ignoring hub [ 514.640104][ T6064] hub 9-1:0.0: probe with driver hub failed with error -5 [ 514.644165][ T6064] usb 9-1: selecting invalid altsetting 0 [ 514.708829][T12718] usb usb9: usbfs: process 12718 (syz.7.5884) did not claim interface 0 before use [ 514.852692][ T6064] usb 9-1: USB disconnect, device number 15 [ 515.233632][T12750] bond0: entered promiscuous mode [ 515.235612][T12750] bond_slave_0: entered promiscuous mode [ 515.237791][T12750] bond_slave_1: entered promiscuous mode [ 515.241643][T12750] gretap0: entered promiscuous mode [ 515.244959][T12750] hsr1: entered promiscuous mode [ 515.248782][T12750] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12750 comm=syz.7.5888 [ 515.640697][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 515.686853][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 515.878880][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 515.908604][T12784] kAFS: unable to lookup cell 'syz1' [ 515.928093][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 515.950116][T12793] input: syz1 as /devices/virtual/input/input63 [ 516.064209][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 516.150275][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 516.195511][T12827] netlink: 'syz.9.5905': attribute type 1 has an invalid length. [ 516.199844][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 516.263668][T12830] mkiss: ax0: crc mode is auto. [ 516.264241][T12827] workqueue: Failed to create a rescuer kthread for wq "bond35": -EINTR [ 516.409597][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 516.486593][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 516.514055][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 516.525475][T12879] tmpfs: Bad value for 'mpol' [ 516.547649][ T40] audit: type=1400 audit(2000000384.482:16287): avc: denied { accept } for pid=12874 comm="syz.9.5911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_kobject_uevent_socket permissive=1 [ 516.762364][T12944] cgroup: Unknown subsys name 'fsuuid' [ 516.796271][ T40] audit: type=1326 audit(2000000384.706:16288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.9.5925" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30f379bf79 code=0x0 [ 517.106114][T12967] __nla_validate_parse: 40 callbacks suppressed [ 517.106126][T12967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5929'. [ 517.164532][T12971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.540057][T12990] netlink: 'syz.4.5934': attribute type 17 has an invalid length. [ 517.543269][T12990] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5934'. [ 517.547031][T12990] macvtap0: entered allmulticast mode [ 517.549396][T12990] veth0_macvtap: entered allmulticast mode [ 517.554443][T12990] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 517.722867][T13011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5939'. [ 517.751016][T13011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5939'. [ 517.761232][T13011] bond0: entered promiscuous mode [ 517.762895][T13011] bond_slave_0: entered promiscuous mode [ 517.764810][T13011] bond_slave_1: entered promiscuous mode [ 517.772928][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5941'. [ 517.777788][T13020] netlink: 'syz.9.5941': attribute type 21 has an invalid length. [ 517.777794][T13011] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 517.781753][T13020] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5941'. [ 517.802463][T13011] gretap0: entered promiscuous mode [ 517.805803][T13011] debugfs: 'hsr1' already exists in 'hsr' [ 517.814473][T13011] Cannot create hsr debugfs directory [ 517.817057][T13011] hsr1: entered promiscuous mode [ 517.827961][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5941'. [ 517.827967][ T7144] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.827998][ T7144] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.837553][ T7144] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.840443][T13020] netlink: 'syz.9.5941': attribute type 21 has an invalid length. [ 517.840463][T13020] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5941'. [ 517.847750][ T7144] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.909365][T13031] overlayfs: failed to clone upperpath [ 517.911973][T13032] overlayfs: failed to clone lowerpath [ 517.941837][T13036] smc: net device bond0 applied user defined pnetid SYZ2 [ 517.944387][T13036] netlink: 14 bytes leftover after parsing attributes in process `syz.9.5944'. [ 517.950374][T13036] bond34: (slave bond0): Releasing active interface [ 517.981904][T13036] smc: removing net device bond0 with user defined pnetid SYZ2 [ 517.985214][T13036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.027972][T13036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.087392][T13036] bond0 (unregistering): Released all slaves [ 518.899271][T13056] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 518.987099][ T40] audit: type=1400 audit(2000000386.763:16289): avc: denied { unlink } for pid=13050 comm="syz.4.5947" name="file1" dev="9p" ino=72614021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 519.162362][T13075] netlink: 'syz.9.5951': attribute type 3 has an invalid length. [ 519.292758][ T40] audit: type=1326 audit(2000000387.043:16290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13074 comm="syz.9.5951" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f379bf79 code=0x7ffc0000 [ 519.303357][ T40] audit: type=1326 audit(2000000387.053:16291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13074 comm="syz.9.5951" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f379bf79 code=0x7ffc0000 [ 519.311661][ T40] audit: type=1326 audit(2000000387.053:16293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13074 comm="syz.9.5951" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f379bf79 code=0x7ffc0000 [ 519.319521][ T40] audit: type=1326 audit(2000000387.053:16292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13074 comm="syz.9.5951" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f30f379bf79 code=0x7ffc0000 [ 519.327307][ T40] audit: type=1326 audit(2000000387.053:16294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13074 comm="syz.9.5951" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f379bf79 code=0x7ffc0000 [ 519.334712][ T40] audit: type=1326 audit(2000000387.053:16295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13074 comm="syz.9.5951" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f379bf79 code=0x7ffc0000 [ 519.342141][ T40] audit: type=1326 audit(2000000387.053:16296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13074 comm="syz.9.5951" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f379bf79 code=0x7ffc0000 [ 519.424850][T13082] netlink: 'syz.9.5952': attribute type 4 has an invalid length. [ 519.425351][T13083] netlink: 'syz.9.5952': attribute type 4 has an invalid length. [ 519.455336][T13086] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 519.458302][T13086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.488733][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5955'. [ 519.588186][T13096] xt_SECMARK: invalid mode: 2 [ 519.593776][T13096] dvmrp0: left allmulticast mode [ 520.041184][T13173] netlink: zone id is out of range [ 520.042977][T13173] netlink: zone id is out of range [ 520.045514][T13173] netlink: zone id is out of range [ 520.047277][T13173] netlink: zone id is out of range [ 520.048990][T13173] netlink: zone id is out of range [ 520.050755][T13173] netlink: zone id is out of range [ 521.058876][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 521.093569][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 521.136779][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 521.313179][T13241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13241 comm=syz.7.5976 [ 521.356611][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 521.433175][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 521.481729][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 521.592820][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 521.730617][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 521.854279][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 521.895791][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 522.030379][ T40] kauditd_printk_skb: 83 callbacks suppressed [ 522.030392][ T40] audit: type=1800 audit(2000000389.595:16380): pid=13317 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.5990" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 522.085284][T13324] pim6reg99999999: entered allmulticast mode [ 522.230971][T13341] ip6tnl0: Caught tx_queue_len zero misconfig [ 522.242192][T13343] futex_wake_op: syz.9.5996 tries to shift op by -1; fix this program [ 522.565058][ T40] audit: type=1400 audit(2000000390.100:16381): avc: denied { getopt } for pid=13377 comm="syz.4.6006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 522.597201][T13388] xt_nfacct: accounting object `syz0' does not exist [ 522.809364][T13396] net_ratelimit: 51 callbacks suppressed [ 522.809376][T13396] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 523.122007][T13439] netlink: 'syz.4.6016': attribute type 63 has an invalid length. [ 523.124553][T13439] __nla_validate_parse: 8 callbacks suppressed [ 523.124562][T13439] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6016'. [ 523.131139][T13439] gretap0: entered allmulticast mode [ 523.133225][T13439] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 523.307640][T13454] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 523.309728][T13454] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 523.314113][T13454] vhci_hcd vhci_hcd.0: Device attached [ 523.382956][T13455] usbip_core: unknown command [ 523.384522][T13455] vhci_hcd: unknown pdu 808464432 [ 523.386138][T13455] usbip_core: unknown command [ 523.389216][ T7138] vhci_hcd vhci_hcd.4: stop threads [ 523.390933][ T7138] vhci_hcd vhci_hcd.4: release socket [ 523.414789][ T7138] vhci_hcd vhci_hcd.4: disconnect device [ 524.250873][T13478] trusted_key: encrypted_key: hex blob is missing [ 524.265881][T13481] netlink: 'syz.7.6025': attribute type 1 has an invalid length. [ 524.268340][T13481] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6025'. [ 524.273226][T13481] netlink: 1 bytes leftover after parsing attributes in process `syz.7.6025'. [ 524.276149][T13481] netlink: 658 bytes leftover after parsing attributes in process `syz.7.6025'. [ 524.533732][ T7192] libceph: connect (1)[c::]:6789 error -101 [ 524.535777][ T7192] libceph: mon0 (1)[c::]:6789 connect error [ 524.815286][ T7195] libceph: connect (1)[c::]:6789 error -101 [ 524.818087][ T7195] libceph: mon0 (1)[c::]:6789 connect error [ 525.079629][T13510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64548 sclass=netlink_route_socket pid=13510 comm=syz.7.6033 [ 525.371871][ T7195] libceph: connect (1)[c::]:6789 error -101 [ 525.373892][ T7195] libceph: mon0 (1)[c::]:6789 connect error [ 525.413726][T13505] ceph: No mds server is up or the cluster is laggy [ 525.704761][T13544] serio: Serial port ptm0 [ 526.027448][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6044'. [ 526.968210][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 526.984960][T13581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6048'. [ 526.988063][T13581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6048'. [ 526.992605][T13583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13583 comm=syz.9.6049 [ 526.992962][T13581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13581 comm=syz.4.6048 [ 527.034013][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 527.066675][T13590] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 527.088374][T13590] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 527.120135][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 527.131421][T13598] sctp: [Deprecated]: syz.4.6053 (pid 13598) Use of int in max_burst socket option deprecated. [ 527.131421][T13598] Use struct sctp_assoc_value instead [ 527.682028][ T3247] Bluetooth: hci2: command 0x0406 tx timeout [ 527.913462][ T40] audit: type=1400 audit(2000000395.101:16382): avc: denied { map } for pid=13635 comm="syz.9.6059" path="socket:[134287]" dev="sockfs" ino=134287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 527.969712][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 528.664725][T13657] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6067'. [ 528.726745][ T3247] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 528.734356][ T3247] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 528.741442][ T3247] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 528.745410][ T3247] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 528.748216][ T3247] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 528.904826][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 528.984134][T13744] option changes via remount are deprecated (pid=13705 comm=syz.7.6072) [ 528.993491][T13744] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6072'. [ 529.043016][T13661] chnl_net:caif_netlink_parms(): no params data found [ 529.190013][T13661] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.192666][T13661] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.195149][T13661] bridge_slave_0: entered allmulticast mode [ 529.198042][T13661] bridge_slave_0: entered promiscuous mode [ 529.237941][T13661] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.240269][T13661] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.242633][T13661] bridge_slave_1: entered allmulticast mode [ 529.246308][T13661] bridge_slave_1: entered promiscuous mode [ 529.269028][T13661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.273574][T13661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.291272][T13661] team0: Port device team_slave_0 added [ 529.294583][T13661] team0: Port device team_slave_1 added [ 529.321140][T13661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.323504][T13661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.332450][T13661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.338617][T13661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.341116][T13661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.352621][T13661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.377204][T13661] hsr_slave_0: entered promiscuous mode [ 529.380033][T13661] hsr_slave_1: entered promiscuous mode [ 529.382375][T13661] debugfs: 'hsr0' already exists in 'hsr' [ 529.384522][T13661] Cannot create hsr debugfs directory [ 529.425003][T13914] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6075'. [ 529.428367][T13914] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6075'. [ 529.448784][T13914] fuse: Unknown parameter 'ˆ' [ 529.837696][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 529.912738][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 530.026793][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 530.203230][ T7150] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 530.207225][T14048] netlink: 1 bytes leftover after parsing attributes in process `syz.7.6084'. [ 530.228652][ T7150] bond0 (unregistering): Released all slaves [ 530.233774][ T7150] bond1 (unregistering): Released all slaves [ 530.241377][ T7150] bond2 (unregistering): Released all slaves [ 530.701105][ T7150] hsr_slave_0: left promiscuous mode [ 530.703474][ T7150] hsr_slave_1: left promiscuous mode [ 530.705764][ T7150] batman_adv: batadv0: Removing interface: dummy0 [ 530.946025][ T63] Bluetooth: hci6: command tx timeout [ 530.948290][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 531.041532][T14113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6091'. [ 531.161324][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 531.410658][T14149] batadv_slave_0: entered promiscuous mode [ 531.412627][T14149] batadv_slave_0: entered allmulticast mode [ 531.430227][ T7150] IPVS: stop unused estimator thread 0... [ 531.476067][T14159] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6098'. [ 531.477056][T14160] 9p: Bad value for 'port' [ 531.495014][T14160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14160 comm=syz.7.6099 [ 531.553776][T14166] 9p: Bad value for 'rfdno' [ 531.621188][ T40] audit: type=1400 audit(2000000398.560:16383): avc: denied { link } for pid=14165 comm="syz.7.6100" name="file0" dev="overlay" ino=1490 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 531.800242][ T40] audit: type=1400 audit(2000000398.728:16384): avc: denied { map } for pid=14206 comm="syz.4.6106" path="socket:[132035]" dev="sockfs" ino=132035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 531.812609][ T40] audit: type=1400 audit(2000000398.738:16385): avc: denied { listen } for pid=14206 comm="syz.4.6106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 531.880917][T14223] binder: 14222:14223 ioctl c0205649 200000000080 returned -22 [ 531.930006][T14235] xt_hashlimit: size too large, truncated to 1048576 [ 532.032412][T13661] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 532.051080][T13661] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 532.058216][T13661] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 532.065085][T13661] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 532.113777][T13661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.123281][T13661] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.128495][ T7149] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.130548][ T7149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.145283][ T7148] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.147845][ T7148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.297080][T14282] overlayfs: missing 'lowerdir' [ 532.331995][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 532.387010][T13661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.531538][T13661] veth0_vlan: entered promiscuous mode [ 532.537012][T13661] veth1_vlan: entered promiscuous mode [ 532.557472][T13661] veth0_macvtap: entered promiscuous mode [ 532.564869][T13661] veth1_macvtap: entered promiscuous mode [ 532.573851][T13661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.579907][T13661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.587969][ T7149] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.590736][ T7149] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.593861][ T7149] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.597149][ T7149] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.649994][ T7147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.652915][ T7147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.666183][ T7147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.669015][ T7147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.688864][ T7195] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 532.730277][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/115.tmp-b7:5' failed: Read-only file system [ 532.739389][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/115.tmp-b7:5' failed: Read-only file system [ 532.754811][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 532.828752][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 532.840317][ T7195] usb 9-1: device descriptor read/64, error -71 [ 532.852459][T14343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6120'. [ 532.855383][T14343] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6120'. [ 532.939907][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 532.975486][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 532.999080][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 533.105806][ T7195] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 533.169801][ T63] Bluetooth: hci6: command tx timeout [ 533.190592][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 533.226546][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 533.255616][ T7195] usb 9-1: device descriptor read/64, error -71 [ 533.311440][T14376] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6126'. [ 533.384659][ T7195] usb usb9-port1: attempt power cycle [ 533.711974][T14381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36124 sclass=netlink_route_socket pid=14381 comm=syz.7.6127 [ 533.716238][T14381] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 533.747961][ T7195] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 533.753132][T14385] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 533.756014][T14384] [U] J"—E:ÀÆ" [ 533.780462][ T7195] usb 9-1: device descriptor read/8, error -71 [ 533.800277][T14387] netlink: zone id is out of range [ 533.803400][T14387] netlink: zone id is out of range [ 533.805514][T14387] netlink: zone id is out of range [ 533.807668][T14387] netlink: zone id is out of range [ 533.809810][T14387] netlink: zone id is out of range [ 533.812053][T14387] netlink: zone id is out of range [ 533.814343][T14387] netlink: zone id is out of range [ 533.816371][T14387] netlink: zone id is out of range [ 533.818388][T14387] netlink: zone id is out of range [ 533.820391][T14387] netlink: zone id is out of range [ 534.036796][ T7195] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 534.058126][ T7195] usb 9-1: device descriptor read/8, error -71 [ 534.147912][T14397] xt_CONNSECMARK: invalid mode: 0 [ 534.166451][T14399] __nla_validate_parse: 1 callbacks suppressed [ 534.166468][T14399] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6131'. [ 534.175935][ T7195] usb usb9-port1: unable to enumerate USB device [ 534.275779][ T40] audit: type=1400 audit(2000000401.046:16386): avc: denied { bind } for pid=14411 comm="syz.9.6136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 534.381225][ T40] audit: type=1326 audit(2000000401.149:16387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.5.6139" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5a719bf79 code=0x0 [ 534.394729][T14418] /dev/nullb0: Can't lookup blockdev [ 534.451878][T14426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=14426 comm=syz.5.6139 [ 534.488380][T14433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=14433 comm=syz.9.6142 [ 534.588697][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6144'. [ 534.665581][T14448] smc: adding net device bond0 with user defined pnetid SYZ2 [ 534.671296][T14448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.384094][ T63] Bluetooth: hci6: command tx timeout [ 535.642818][T14528] netlink: 92 bytes leftover after parsing attributes in process `syz.5.6152'. [ 535.800130][T14539] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 535.877417][T14548] fuse: Bad value for 'user_id' [ 535.879067][T14548] fuse: Bad value for 'user_id' [ 535.915631][ T40] audit: type=1400 audit(2000000402.580:16388): avc: denied { shutdown } for pid=14551 comm="syz.5.6160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 535.964476][T14564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=14564 comm=syz.9.6164 [ 536.011676][T14576] netlink: 220 bytes leftover after parsing attributes in process `syz.5.6168'. [ 536.084950][T14579] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.152053][T14584] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 536.158486][T14584] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3415122576 (109283922432 ns) > initial count (6907418368 ns). Using initial count to start timer. [ 536.462136][T14579] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.525195][T14579] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.610320][T14579] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.770090][ T7147] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.787036][ T7150] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.789691][ T7150] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.798842][ T7149] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.919705][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6178'. [ 536.922739][T14629] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6178'. [ 536.927086][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6178'. [ 536.927656][T14630] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6178'. [ 536.930092][T14629] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6178'. [ 536.933925][T14630] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6178'. [ 537.093230][T14658] xt_SECMARK: invalid mode: 2 [ 537.165325][T14663] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=14663 comm=syz.9.6189 [ 537.264107][T14667] kAFS: unable to lookup cell '(,c¾ûL' [ 537.266178][T14667] kAFS: unable to lookup cell '(,c¾ûL' [ 537.609534][ T3247] Bluetooth: hci6: command tx timeout [ 537.626634][T14705] netlink: 'syz.9.6198': attribute type 4 has an invalid length. [ 537.954968][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 538.061472][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 538.112673][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 538.125601][T14737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=14737 comm=syz.5.6204 [ 538.138521][ T40] audit: type=1400 audit(2000000000.962:16389): avc: denied { view } for pid=14738 comm="syz.7.6205" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 538.303760][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 538.347142][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 538.422362][ T6064] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 538.459118][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 538.464510][ T9514] udevd[9514]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 538.495783][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 538.584704][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 538.604270][ T6064] usb 12-1: Using ep0 maxpacket: 16 [ 538.610265][T14789] netlink: 'syz.9.6216': attribute type 29 has an invalid length. [ 538.610878][ T6064] usb 12-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 538.616216][ T6064] usb 12-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 538.619356][ T6064] usb 12-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 538.622335][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 538.623573][ T6064] usb 12-1: config 1 interface 0 has no altsetting 0 [ 538.634857][ T6064] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 538.640766][ T6064] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.643372][ T6064] usb 12-1: Product: syz [ 538.644764][ T6064] usb 12-1: Manufacturer: syz [ 538.649977][ T6064] usb 12-1: SerialNumber: syz [ 538.785211][T14803] overlayfs: conflicting options: nfs_export=on,index=off [ 538.901118][ T6064] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 539.167673][T14743] usblp0:failed reading printer status (-32) [ 539.174875][T14743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.178851][T14743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.355540][T14779] usb 12-1: USB disconnect, device number 21 [ 539.362132][T14779] usblp0: removed [ 539.568240][T14910] __nla_validate_parse: 10 callbacks suppressed [ 539.568259][T14910] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6237'. [ 539.605100][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6238'. [ 539.608610][T14912] netlink: 57 bytes leftover after parsing attributes in process `syz.5.6238'. [ 539.754521][T14932] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 539.759460][T14932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6244'. [ 539.847528][ T63] Bluetooth: hci6: command 0x0406 tx timeout [ 539.911771][T14953] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 539.984219][T14779] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 539.988933][T14962] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6250'. [ 540.072558][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6253'. [ 540.155558][T14779] usb 10-1: Using ep0 maxpacket: 8 [ 540.158689][T14779] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 540.161466][T14779] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 540.165002][T14779] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 540.168417][T14779] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 540.172607][T14779] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 540.175099][T14974] netlink: 120 bytes leftover after parsing attributes in process `syz.7.6254'. [ 540.179195][T14779] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 540.179224][T14779] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 540.179237][T14779] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.188842][T14974] netlink: 'syz.7.6254': attribute type 1 has an invalid length. [ 540.191323][T14974] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6254'. [ 540.254246][T14981] xt_l2tp: unknown flags: 51 [ 540.337307][T14981] xt_l2tp: unknown flags: 51 [ 540.400267][T14779] usb 10-1: usb_control_msg returned -32 [ 540.407394][T14779] usbtmc 10-1:16.0: can't read capabilities [ 540.425689][T14992] net_ratelimit: 4 callbacks suppressed [ 540.425700][T14992] openvswitch: netlink: IP tunnel dst address not specified [ 540.561672][T14779] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 540.590650][T15007] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6263'. [ 540.700824][T14779] usb 12-1: device descriptor read/64, error -71 [ 540.796663][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 540.803484][T15014] usbtmc 10-1:16.0: Unable to send data, error -71 [ 540.805946][T15014] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 540.894928][T14780] usb 10-1: USB disconnect, device number 18 [ 540.978931][T14779] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 541.050668][T15028] fuse: Bad value for 'group_id' [ 541.052373][T15028] fuse: Bad value for 'group_id' [ 541.128657][T14779] usb 12-1: device descriptor read/64, error -71 [ 541.257512][T14779] usb usb12-port1: attempt power cycle [ 541.631837][T14779] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 541.653259][T14779] usb 12-1: device descriptor read/8, error -71 [ 541.920227][T14779] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 541.942032][T14779] usb 12-1: device descriptor read/8, error -71 [ 542.070297][T14779] usb usb12-port1: unable to enumerate USB device [ 543.138232][T15086] Unknown metaid 0 dlen 28 [ 543.469462][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 543.502337][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 543.530380][T15121] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6287'. [ 543.547546][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 543.691625][T15142] netlink: 'syz.7.6290': attribute type 29 has an invalid length. [ 543.697999][T15142] netlink: 'syz.7.6290': attribute type 29 has an invalid length. [ 543.749537][ T5992] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 543.918317][T15158] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 543.933201][ T5992] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 543.936067][ T5992] usb 9-1: config 0 has no interface number 0 [ 543.938070][ T5992] usb 9-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 543.944755][ T5992] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 543.948341][ T5992] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.950915][ T5992] usb 9-1: Product: syz [ 543.952367][ T5992] usb 9-1: Manufacturer: syz [ 543.953983][ T5992] usb 9-1: SerialNumber: syz [ 543.956767][ T5992] usb 9-1: config 0 descriptor?? [ 543.961232][ T5992] asix 9-1:0.251: probe with driver asix failed with error -22 [ 544.376125][T15193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15193 comm=syz.9.6298 [ 544.380144][T15193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2560 sclass=netlink_tcpdiag_socket pid=15193 comm=syz.9.6298 [ 544.384212][T15193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=15193 comm=syz.9.6298 [ 544.388035][T15193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2582 sclass=netlink_tcpdiag_socket pid=15193 comm=syz.9.6298 [ 544.391963][T15193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2568 sclass=netlink_tcpdiag_socket pid=15193 comm=syz.9.6298 [ 544.395885][T15193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2574 sclass=netlink_tcpdiag_socket pid=15193 comm=syz.9.6298 [ 544.400722][T15193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2566 sclass=netlink_tcpdiag_socket pid=15193 comm=syz.9.6298 [ 544.404821][T15193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2582 sclass=netlink_tcpdiag_socket pid=15193 comm=syz.9.6298 [ 544.408789][T15193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2578 sclass=netlink_tcpdiag_socket pid=15193 comm=syz.9.6298 [ 544.412788][T15193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2566 sclass=netlink_tcpdiag_socket pid=15193 comm=syz.9.6298 [ 544.626848][ T7148] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 544.627298][T10587] block nbd8: Possible stuck request ffff88802a1b8000: control (read@0,1024B). Runtime 150 seconds [ 544.634037][T10587] block nbd8: Possible stuck request ffff88802a1b8200: control (read@1024,1024B). Runtime 150 seconds [ 544.638655][T10587] block nbd8: Possible stuck request ffff88802a1b8400: control (read@2048,1024B). Runtime 150 seconds [ 544.643128][T10587] block nbd8: Possible stuck request ffff88802a1b8600: control (read@3072,1024B). Runtime 150 seconds [ 544.768450][T15222] batman_adv: batadv0: Adding interface: gretap2 [ 544.770406][T15222] batman_adv: batadv0: Interface activated: gretap2 [ 544.915003][T15232] overlay: ./file0 is not a directory [ 544.927052][ T40] audit: type=1400 audit(2000000007.319:16390): avc: denied { setattr } for pid=15231 comm="syz.7.6307" name="file0" dev="9p" ino=72614011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 544.935683][ T40] audit: type=1400 audit(2000000007.319:16391): avc: denied { watch } for pid=15231 comm="syz.7.6307" path="/324/file0/file0" dev="9p" ino=72614011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 545.547998][T15264] xt_CT: You must specify a L4 protocol and not use inversions on it [ 545.620463][T15267] netlink: 'syz.9.6316': attribute type 2 has an invalid length. [ 545.951374][T15281] veth1_vlan: entered allmulticast mode [ 545.974356][T15281] xt_hashlimit: max too large, truncated to 1048576 [ 545.981252][T15281] tmpfs: Unknown parameter 'usrquotaeak_states 0 mark_read 0 [ 545.981252][T15281] ' [ 546.280169][ T40] audit: type=1800 audit(2000000008.572:16392): pid=15254 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.6312" name="/" dev="fuse" ino=4 res=0 errno=0 [ 546.565477][T15324] IPVS: Error connecting to the multicast addr [ 546.716830][T17861] usb 9-1: USB disconnect, device number 20 [ 546.763015][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 546.789409][T15395] /dev/sg0: Can't lookup blockdev [ 546.815066][T15381] can: request_module (can-proto-0) failed. [ 546.817673][T15381] __nla_validate_parse: 6 callbacks suppressed [ 546.817682][T15381] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6339'. [ 546.837317][T15400] 9p: Bad value for 'version' [ 546.902836][T15429] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6342'. [ 547.022006][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 547.083937][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 547.127536][T24928] udevd[24928]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 547.150405][T15470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6348'. [ 547.159578][T15473] syzkaller1: entered promiscuous mode [ 547.161546][T15473] syzkaller1: entered allmulticast mode [ 547.162697][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 547.181062][T15474] overlayfs: failed to clone upperpath [ 547.307413][ T40] audit: type=1400 audit(2000000009.534:16393): avc: denied { getopt } for pid=15482 comm="syz.7.6351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 547.316566][T15485] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 547.334465][T15485] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 547.345802][T15489] hugetlbfs: syz.7.6353 (15489): Using mlock ulimits for SHM_HUGETLB is obsolete [ 547.421888][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 547.437233][T15497] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6356'. [ 547.441735][ T40] audit: type=1400 audit(2000000009.665:16394): avc: denied { connect } for pid=15492 comm="syz.7.6354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 547.490560][T15497] ip6gretap0: entered promiscuous mode [ 547.562394][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 547.610268][T15596] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 547.876293][T15623] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.6367'. [ 547.879546][T15623] netlink: Unknown conntrack attr (0) [ 547.942412][T15635] netlink: 'syz.9.6368': attribute type 11 has an invalid length. [ 547.971747][T15640] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6371'. [ 548.063579][T15658] netlink: 3900 bytes leftover after parsing attributes in process `syz.9.6368'. [ 548.184290][T15677] netlink: 'syz.5.6377': attribute type 3 has an invalid length. [ 548.481584][T15709] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6384'. [ 548.524592][T15709] team0 (unregistering): Port device team_slave_0 removed [ 548.533444][T15709] team0 (unregistering): Port device team_slave_1 removed [ 548.931932][T15769] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6396'. [ 548.999059][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 549.024279][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 549.034286][ T7192] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 549.057631][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 549.062107][T15786] netlink: 'syz.4.6400': attribute type 27 has an invalid length. [ 549.067566][T15786] gretap0: left allmulticast mode [ 549.077311][T15786] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.194537][ T7192] usb 10-1: Using ep0 maxpacket: 16 [ 549.197674][ T7192] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 549.200916][ T7192] usb 10-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 549.200937][ T7192] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 549.200952][ T7192] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 549.213035][ T7192] usb 10-1: config 0 interface 0 has no altsetting 0 [ 549.217480][ T7192] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 549.220941][ T7192] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.223624][ T7192] usb 10-1: Product: syz [ 549.225002][ T7192] usb 10-1: Manufacturer: syz [ 549.227936][ T7192] usb 10-1: SerialNumber: syz [ 549.231260][ T7192] usb 10-1: config 0 descriptor?? [ 549.233542][T15740] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 549.387793][T15786] veth0_macvtap: left allmulticast mode [ 549.430086][T15786] macvtap0: left allmulticast mode [ 549.451252][T15740] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 549.455860][ T7192] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input64 [ 549.601148][ T3247] Bluetooth: hci5: command 0x0406 tx timeout [ 549.734020][T15786] bond3: left promiscuous mode [ 549.735751][T15786] xfrm1: left promiscuous mode [ 549.778406][T15786] bond5: left promiscuous mode [ 549.780093][T15786] erspan1: left promiscuous mode [ 549.781771][T15786] bond5: left allmulticast mode [ 549.785231][T15786] erspan1: left allmulticast mode [ 549.790851][T15786] hsr1: left promiscuous mode [ 549.806061][T15789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.808903][T15789] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.857857][T15789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 549.858652][ T53] usb 10-1: USB disconnect, device number 19 [ 549.863699][ T7138] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.872156][ T7138] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.876321][ T7138] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.880696][ T7138] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.891510][ T7138] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.895012][ T7138] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.898576][ T7138] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.908472][ T7138] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.916730][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 549.953160][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 550.022518][T15828] tmpfs: Cannot change global quota limit on remount [ 550.107474][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 550.118955][ T40] audit: type=1326 audit(2000000012.161:16395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15844 comm="syz.4.6410" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f719f39bf79 code=0x0 [ 550.120027][T15845] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.6409'. [ 550.599374][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 550.609071][T15864] selinux_netlink_send: 4 callbacks suppressed [ 550.609090][T15864] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=15864 comm=syz.5.6414 [ 550.637150][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 550.727265][T15867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15867 comm=syz.5.6415 [ 550.772108][T15880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=15880 comm=syz.7.6418 [ 550.846732][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 550.883633][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 551.015875][T15936] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 551.184568][ T40] audit: type=1400 audit(2000000013.152:16396): avc: denied { watch watch_reads } for pid=15958 comm="syz.7.6431" path="/proc/1089/numa_maps" dev="proc" ino=141452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 551.184883][T15960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.186669][T15959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.226225][T15968] ptrace attach of "/syz-executor exec"[13661] was attempted by ""[15968] [ 551.808304][T16048] block nbd5: shutting down sockets [ 552.047752][T16051] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 552.050606][T16051] 9p: Could not find request transport: ¢Þ˜Ž$=U1äb4íÇ%+\¹«+oM\zS®"6Û˜o“šqÔš'·ÏˆY)‚ °”\ŸØw­ [ 552.239782][T16072] netlink: 'syz.9.6440': attribute type 39 has an invalid length. [ 552.271139][T16078] __nla_validate_parse: 11 callbacks suppressed [ 552.271152][T16078] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6439'. [ 552.399610][T16083] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6441'. [ 552.763743][T16129] netlink: 'syz.9.6445': attribute type 10 has an invalid length. [ 552.766293][T16129] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6445'. [ 553.030579][T16138] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6450'. [ 553.479037][T16155] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6454'. [ 553.482239][T16155] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6454'. [ 553.486854][T16155] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6454'. [ 553.489668][T16155] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6454'. [ 553.653418][ T40] audit: type=1326 audit(2000000016.464:16397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16165 comm="syz.9.6457" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f30f379bf79 code=0x0 [ 554.168928][ T5992] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 554.204103][T16212] usb usb9: usbfs: process 16212 (syz.7.6468) did not claim interface 5 before use [ 554.352829][ T5992] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.357381][ T5992] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 554.361298][ T5992] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 554.365208][ T5992] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.375505][ T5992] usb 10-1: config 0 descriptor?? [ 554.430660][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 554.434964][T16227] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 554.445990][T16227] team_slave_0: Caught tx_queue_len zero misconfig [ 554.486894][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 554.566801][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 554.607233][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 554.621364][T16240] netlink: 'syz.9.6474': attribute type 4 has an invalid length. [ 554.623091][T16238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6475'. [ 554.647253][T16240] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 554.648102][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 554.661200][ T6064] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 554.759777][T16251] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6478'. [ 554.768619][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 554.806805][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 554.821522][ T6064] usb 12-1: Using ep0 maxpacket: 8 [ 554.825698][ T6064] usb 12-1: config 0 interface 0 has no altsetting 0 [ 554.828526][ T6064] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 554.833920][ T6064] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.842887][ T6064] usb 12-1: config 0 descriptor?? [ 554.858922][ T9514] udevd[9514]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 554.920298][T16297] /dev/sg0: Can't lookup blockdev [ 555.094519][T16373] netlink: 'syz.9.6483': attribute type 8 has an invalid length. [ 555.097621][T16373] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 555.181085][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 557.139924][ T1342] usb 10-1: USB disconnect, device number 20 [ 557.156679][ T9514] udevd[9514]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 558.397091][T16409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 558.430031][ T6064] usbhid 12-1:0.0: can't add hid device: -71 [ 558.445064][ T6064] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 558.461449][ T6064] usb 12-1: USB disconnect, device number 26 [ 558.487157][T16461] macvtap1: entered promiscuous mode [ 558.488920][T16461] macvtap1: entered allmulticast mode [ 558.491230][T16461] mac80211_hwsim hwsim50 wlan0: entered allmulticast mode [ 558.493516][T16461] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 558.496359][T16461] team0: Device macvtap1 failed to register rx_handler [ 558.499758][T16461] mac80211_hwsim hwsim50 wlan0: left allmulticast mode [ 558.502134][T16461] mac80211_hwsim hwsim50 wlan0: left promiscuous mode [ 558.503779][T16469] __nla_validate_parse: 2 callbacks suppressed [ 558.503793][T16469] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6494'. [ 558.509491][T16471] netlink: 92 bytes leftover after parsing attributes in process `syz.5.6495'. [ 558.560343][T16453] netlink: 'syz.7.6491': attribute type 29 has an invalid length. [ 558.628637][T16471] IPv6: syztnl0: Disabled Multicast RS [ 558.679500][T16487] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 558.975986][T16499] Invalid option length (1048180) for dns_resolver key [ 558.983043][T16499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57508 sclass=netlink_route_socket pid=16499 comm=syz.9.6504 [ 559.513373][T16517] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 559.543049][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6508'. [ 559.761698][T16545] bond6: Unable to set down delay as MII monitoring is disabled [ 559.766226][T16545] bond6 (unregistering): Released all slaves [ 559.893420][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 559.908096][T16623] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6517'. [ 559.948312][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 559.958341][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6520'. [ 560.009457][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 560.035794][ T63] Bluetooth: hci2: unexpected event for opcode 0x0c14 [ 560.071586][T16663] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6525'. [ 560.083340][T16665] binder_alloc: 16653: binder_alloc_buf size 61696 failed, no address space [ 560.088467][T16665] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 560.198883][T16675] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 560.239760][T16683] netlink: 'syz.7.6530': attribute type 12 has an invalid length. [ 560.242269][T16683] netlink: 190972 bytes leftover after parsing attributes in process `syz.7.6530'. [ 560.248373][T16683] i2c i2c-1: dtv_property_process_set: SET cmd 0x00010000 undefined [ 560.315837][T16690] netlink: 'syz.9.6531': attribute type 1 has an invalid length. [ 560.340278][T16694] netlink: 348 bytes leftover after parsing attributes in process `syz.9.6532'. [ 560.346076][T16694] netlink: 220 bytes leftover after parsing attributes in process `syz.9.6532'. [ 560.505662][T16711] x_tables: ip_tables: esp match: only valid for protocol 50 [ 560.512534][ T5992] usb 12-1: new high-speed USB device number 27 using dummy_hcd [ 560.683968][ T5992] usb 12-1: Using ep0 maxpacket: 8 [ 560.687342][ T5992] usb 12-1: config 0 has an invalid interface number: 186 but max is 0 [ 560.690019][ T5992] usb 12-1: config 0 has no interface number 0 [ 560.692150][ T5992] usb 12-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 560.695831][ T5992] usb 12-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 560.699254][ T5992] usb 12-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 560.702989][ T5992] usb 12-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 560.706517][ T5992] usb 12-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 560.712463][ T5992] usb 12-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 560.715409][ T5992] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.718328][ T5992] usb 12-1: Product: syz [ 560.719717][ T5992] usb 12-1: Manufacturer: syz [ 560.721594][ T5992] usb 12-1: SerialNumber: syz [ 560.725258][ T5992] usb 12-1: config 0 descriptor?? [ 560.864626][T16726] netlink: 'syz.9.6540': attribute type 1 has an invalid length. [ 560.878809][T16726] 8021q: adding VLAN 0 to HW filter on device bond36 [ 560.891194][T16726] bond36: (slave geneve3): making interface the new active one [ 560.894697][T16726] bond36: (slave geneve3): Enslaving as an active interface with an up link [ 560.951571][ T9514] udevd[9514]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 560.961151][ T5992] iowarrior 12-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 560.965870][T16769] autofs4:pid:16769:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 560.972538][T16769] blktrace: Concurrent blktraces are not allowed on nullb0 [ 561.011592][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 561.026848][T16780] netlink: 'syz.4.6544': attribute type 3 has an invalid length. [ 561.029487][T16780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6544'. [ 561.172386][T14778] usb 12-1: USB disconnect, device number 27 [ 561.191264][T16799] vcan0: entered allmulticast mode [ 561.193520][T16799] vcan0: left allmulticast mode [ 561.254336][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 561.286387][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 561.330662][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 561.381087][T16834] netlink: 'syz.9.6556': attribute type 20 has an invalid length. [ 561.384550][T16839] netlink: 'syz.9.6556': attribute type 20 has an invalid length. [ 561.391218][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 561.429709][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 561.460501][T16848] 8021q: adding VLAN 0 to HW filter on device bond6 [ 561.616395][ T40] audit: type=1800 audit(2000000023.914:16398): pid=16893 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.6562" name="file0" dev="tmpfs" ino=3045 res=0 errno=0 [ 561.626971][ T40] audit: type=1804 audit(2000000023.923:16399): pid=16894 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.6562" name="file0" dev="tmpfs" ino=3045 res=1 errno=0 [ 561.975356][T16937] netlink: 'syz.9.6572': attribute type 11 has an invalid length. [ 562.020949][ T40] audit: type=1400 audit(2000000024.297:16400): avc: denied { read } for pid=16941 comm="syz.5.6573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 562.073261][T16947] geneve2: entered promiscuous mode [ 562.077135][T16947] geneve2: entered allmulticast mode [ 562.216380][T16955] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 562.217814][T16955] @0Ù: renamed from bond_slave_1 (while UP) [ 562.302872][T16965] ptrace attach of "/syz-executor exec"[13661] was attempted by ""[16965] [ 562.342809][ T7150] wlan1: Trigger new scan to find an IBSS to join [ 562.856416][T17042] tmpfs: Bad value for 'mpol' [ 562.988831][T17057] overlayfs: failed to clone upperpath [ 563.116991][T17091] binder_alloc: 17065: binder_alloc_buf size 1073741824 failed, no address space [ 563.120437][T17091] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 563.327638][T17123] netlink: 'syz.5.6600': attribute type 1 has an invalid length. [ 563.371214][T17123] veth5: entered promiscuous mode [ 563.382190][ T6478] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 563.428653][T17192] fuse: Bad value for 'fd' [ 563.454246][T17191] syzkaller0: entered promiscuous mode [ 563.456127][T17191] syzkaller0: entered allmulticast mode [ 563.859367][T17197] macvtap1: entered promiscuous mode [ 563.861920][T17197] macvtap1: entered allmulticast mode [ 564.037948][T17231] lo speed is unknown, defaulting to 1000 [ 564.040743][T17231] lo speed is unknown, defaulting to 1000 [ 564.041309][T17234] __nla_validate_parse: 4 callbacks suppressed [ 564.041320][T17234] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6613'. [ 564.048504][T17231] lo speed is unknown, defaulting to 1000 [ 564.074337][T17231] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 564.095739][T17231] lo speed is unknown, defaulting to 1000 [ 564.103239][T17231] lo speed is unknown, defaulting to 1000 [ 564.106099][T17231] lo speed is unknown, defaulting to 1000 [ 564.109571][T17231] lo speed is unknown, defaulting to 1000 [ 564.116505][T17231] lo speed is unknown, defaulting to 1000 [ 564.125620][T17231] lo speed is unknown, defaulting to 1000 [ 564.129126][T17231] lo speed is unknown, defaulting to 1000 [ 564.135885][T17231] lo speed is unknown, defaulting to 1000 [ 564.355384][T17358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.403926][T17366] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6616'. [ 564.577521][T14778] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 564.672774][ T63] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 564.752804][T14778] usb 9-1: Using ep0 maxpacket: 8 [ 564.771982][T14778] usb 9-1: config 0 interface 0 has no altsetting 0 [ 564.783402][T14778] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 564.786358][T14778] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.790471][T14778] usb 9-1: config 0 descriptor?? [ 566.431667][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 566.481855][T17390] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 1, id = 0 [ 566.531973][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 566.590023][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 566.635885][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 566.657499][ T40] audit: type=1326 audit(2000000028.625:16401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17406 comm="syz.5.6624" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5a719bf79 code=0x0 [ 566.671721][T17411] overlayfs: failed to clone upperpath [ 566.672871][T17411] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 566.761383][T17415] fuse: Bad value for 'fd' [ 566.797437][T17349] Set syz1 is full, maxelem 65536 reached [ 566.849412][T14778] usbhid 9-1:0.0: can't add hid device: -71 [ 566.851398][T14778] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 566.856281][T14778] usb 9-1: USB disconnect, device number 21 [ 567.203573][T17439] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6632'. [ 567.232120][T17439] ptrace attach of "/syz-executor exec"[17440] was attempted by "/syz-executor exec"[17439] [ 567.441759][T17452] netlink: 'syz.4.6636': attribute type 10 has an invalid length. [ 567.446201][T17452] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 567.458677][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 567.486747][T17460] 8021q: VLANs not supported on gre0 [ 567.490363][T24930] udevd[24930]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 567.541130][T17469] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6641'. [ 567.611150][T17477] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6643'. [ 567.614100][T17477] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6643'. [ 567.633311][ T63] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 568.109015][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 568.197408][T17506] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6650'. [ 568.200328][T17506] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6650'. [ 568.299570][ T40] audit: type=1326 audit(2000000030.159:16402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.9.6652" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30f379bf79 code=0x7f7f0000 [ 568.375173][ T1342] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 568.535616][ T1342] usb 10-1: Using ep0 maxpacket: 8 [ 568.540081][ T1342] usb 10-1: config 0 interface 0 has no altsetting 0 [ 568.543041][ T1342] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 568.546855][ T1342] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.552303][ T1342] usb 10-1: config 0 descriptor?? [ 568.632027][T19196] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 568.810136][T19196] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 568.814196][T19196] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.817677][T19196] usb 9-1: Product: syz [ 568.819531][T19196] usb 9-1: Manufacturer: syz [ 568.821593][T19196] usb 9-1: SerialNumber: syz [ 568.827753][T19196] usb 9-1: config 0 descriptor?? [ 569.019748][ T63] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 569.022763][ T63] Bluetooth: hci4: Injecting HCI hardware error event [ 569.029769][ T3247] Bluetooth: hci4: hardware error 0x00 [ 569.062671][T17515] random: crng reseeded on system resumption [ 569.062671][ T40] audit: type=1400 audit(2000000030.878:16403): avc: denied { ioctl } for pid=17514 comm="syz.4.6653" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 569.261548][T19196] usb 9-1: USB disconnect, device number 22 [ 569.321457][T17564] kAFS: unable to lookup cell '(,c¾ûL' [ 569.525591][ T1342] usbhid 10-1:0.0: can't add hid device: -71 [ 569.528478][ T1342] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 569.540982][ T1342] usb 10-1: USB disconnect, device number 21 [ 569.587559][T17585] overlayfs: failed to clone upperpath [ 569.803383][T17591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17591 comm=syz.9.6664 [ 569.804726][T17592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17592 comm=syz.9.6664 [ 569.813663][T17592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17592 comm=syz.9.6664 [ 569.822611][T17592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17592 comm=syz.9.6664 [ 569.827987][T17592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17592 comm=syz.9.6664 [ 569.832656][T17596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6665'. [ 569.836107][T17597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6665'. [ 569.847450][T17592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17592 comm=syz.9.6664 [ 569.854248][T17592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17592 comm=syz.9.6664 [ 569.859484][T17592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17592 comm=syz.9.6664 [ 569.872863][T17592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17592 comm=syz.9.6664 [ 569.878096][T17592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17592 comm=syz.9.6664 [ 570.171359][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 570.280261][T18170] binder_alloc: 18038: binder_alloc_buf size 4611686018427387904 failed, no address space [ 570.283395][T18170] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 570.285932][T18174] overlayfs: failed to resolve './bus': -2 [ 570.437136][T18317] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6672'. [ 570.453876][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 570.470395][T18317] chnl_net:caif_netlink_parms(): no params data found [ 570.599327][T18479] netlink: 'syz.5.6673': attribute type 3 has an invalid length. [ 570.853369][T18730] xt_CT: No such helper "snmp_trap" [ 570.978448][T18742] netlink: 'syz.9.6681': attribute type 178 has an invalid length. [ 571.077447][ T5284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 571.083017][ T5284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 571.086762][ T5284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 571.090974][ T5284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 571.095364][ T5284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 571.141938][T18749] lo speed is unknown, defaulting to 1000 [ 571.202611][T18784] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6685'. [ 571.246986][T18749] chnl_net:caif_netlink_parms(): no params data found [ 571.331040][T18868] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 571.334343][T18868] openvswitch: netlink: IP tunnel dst address not specified [ 571.335602][T18749] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.344270][T18749] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.350624][T18749] bridge_slave_0: entered allmulticast mode [ 571.355925][T18749] bridge_slave_0: entered promiscuous mode [ 571.365365][T18749] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.371948][T18749] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.381274][T18749] bridge_slave_1: entered allmulticast mode [ 571.384072][T18749] bridge_slave_1: entered promiscuous mode [ 571.411599][T18749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.423086][T18749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.430863][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 571.469284][T18749] team0: Port device team_slave_0 added [ 571.473726][T18749] team0: Port device team_slave_1 added [ 571.473757][T18931] binder_alloc: 18906: binder_alloc_buf size -1080863910568919040 failed, no address space [ 571.493011][T18931] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 571.499561][ T3247] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 571.506736][T18749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.509756][T18749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.521105][T18749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.527105][T18749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.529958][T18749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.540547][T18749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.576106][T18749] hsr_slave_0: entered promiscuous mode [ 571.578409][T18749] hsr_slave_1: entered promiscuous mode [ 571.719124][T18749] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.722626][T18749] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.767812][T19064] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6697'. [ 571.784840][T19064] batadv_slave_1: entered promiscuous mode [ 571.795365][T19064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6697'. [ 571.833141][T18749] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.837731][T18749] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.849930][T19064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.853346][T19064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.856587][T19064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.859040][T19064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.910221][T18749] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.913583][T18749] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.052451][T18749] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.055876][T18749] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.231755][T19063] batadv_slave_1: left promiscuous mode [ 572.251227][T18749] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 572.256052][T18749] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 572.268594][T18749] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 572.273516][T18749] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 572.306080][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 572.338691][T18749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.352762][T18749] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.359926][ T6478] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.362670][ T6478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.377300][ T6478] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.378909][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 572.380368][ T6478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.420394][T19102] block nbd0: shutting down sockets [ 572.562819][T18749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.650891][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 572.689520][T19138] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6708'. [ 572.692851][T19138] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6708'. [ 572.710275][T19138] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6708'. [ 572.715617][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 572.729623][T18749] veth0_vlan: entered promiscuous mode [ 572.770401][T19147] nbd: must specify at least one socket [ 572.770425][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 572.798669][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 572.804124][T19144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.811715][T18749] veth1_vlan: entered promiscuous mode [ 572.834953][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 572.849053][T19154] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6713'. [ 572.860068][T18749] veth0_macvtap: entered promiscuous mode [ 572.870719][T18749] veth1_macvtap: entered promiscuous mode [ 572.904438][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 572.906462][T18749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.917860][T18749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.926405][ T6478] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.930348][ T6478] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.935342][ T6478] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.938934][ T6478] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.988060][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 573.037254][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 573.038174][ T7144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.048311][ T7144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.062015][T19181] nbd: must specify at least one socket [ 573.070440][ T7152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.074892][ T7152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.194189][T19195] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 573.308026][ T3247] Bluetooth: hci1: command tx timeout [ 573.555914][T19234] nbd: must specify at least one socket [ 573.647349][T19241] can0: slcan on ttyS3. [ 573.724763][T19242] can0 (unregistered): slcan off ttyS3. [ 573.836580][T19263] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 574.095954][T19273] netlink: 'syz.4.6733': attribute type 12 has an invalid length. [ 574.099291][T19273] netlink: 'syz.4.6733': attribute type 12 has an invalid length. [ 574.232894][T19282] xt_CT: No such helper "snmp_trap" [ 574.682804][T19332] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 574.881401][T19363] fuse: Bad value for 'fd' [ 574.883855][T19363] lo: Caught tx_queue_len zero misconfig [ 575.087167][T19402] dvmrp6: entered allmulticast mode [ 575.105031][T19407] netlink: 'syz.4.6766': attribute type 12 has an invalid length. [ 575.201422][T19415] __nla_validate_parse: 8 callbacks suppressed [ 575.201435][T19415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6769'. [ 575.243402][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6769'. [ 575.331459][T19464] netlink: 'syz.4.6774': attribute type 2 has an invalid length. [ 575.334051][T19464] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6774'. [ 575.466032][T19482] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6778'. [ 575.470403][T19482] netlink: 'syz.5.6778': attribute type 1 has an invalid length. [ 575.473610][T19482] netlink: 'syz.5.6778': attribute type 2 has an invalid length. [ 575.476509][T19482] netlink: 'syz.5.6778': attribute type 1 has an invalid length. [ 575.479171][T19482] netlink: 'syz.5.6778': attribute type 3 has an invalid length. [ 575.482169][T19482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6778'. [ 575.521287][ T3247] Bluetooth: hci1: command tx timeout [ 575.891142][T19512] i2c i2c-1: Invalid block write size 34 [ 575.955130][ T40] audit: type=1400 audit(2000000037.319:16404): avc: denied { mounton } for pid=19518 comm="syz.5.6783" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 576.422601][ T40] audit: type=1800 audit(2000000037.749:16405): pid=19550 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.6790" name="nullb0" dev="tmpfs" ino=2933 res=0 errno=0 [ 576.441211][T19546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6791'. [ 576.469500][T19546] : entered promiscuous mode [ 576.472895][T19548] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6791'. [ 576.482468][T19558] sctp: [Deprecated]: syz.7.6792 (pid 19558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 576.482468][T19558] Use struct sctp_sack_info instead [ 576.486227][T19548] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 576.487948][T19557] sctp: [Deprecated]: syz.7.6792 (pid 19557) Use of struct sctp_assoc_value in delayed_ack socket option. [ 576.487948][T19557] Use struct sctp_sack_info instead [ 576.493312][T19548] gretap1: entered promiscuous mode [ 576.500520][T19548] gretap1: entered allmulticast mode [ 576.539835][T19567] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 576.544454][T19567] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 576.547240][T19567] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 576.621337][T19574] batadv_slave_0: entered promiscuous mode [ 576.794005][T14778] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 576.807161][T10587] block nbd8: Possible stuck request ffff88802a1b8000: control (read@0,1024B). Runtime 180 seconds [ 576.811346][T10587] block nbd8: Possible stuck request ffff88802a1b8200: control (read@1024,1024B). Runtime 180 seconds [ 576.815044][T10587] block nbd8: Possible stuck request ffff88802a1b8400: control (read@2048,1024B). Runtime 180 seconds [ 576.819685][T10587] block nbd8: Possible stuck request ffff88802a1b8600: control (read@3072,1024B). Runtime 180 seconds [ 576.925800][T19609] 9p: Bad value for 'wfdno' [ 576.976640][T14778] usb 14-1: Using ep0 maxpacket: 8 [ 576.979610][T14778] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 576.982707][T14778] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 576.985915][T14778] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 576.989401][T14778] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.993514][T14778] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 576.996548][T14778] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.017434][T19617] binder: 19612:19617 ioctl c0306201 2000000001c0 returned -14 [ 577.221341][T14778] usb 14-1: GET_CAPABILITIES returned 0 [ 577.223233][T14778] usbtmc 14-1:16.0: can't read capabilities [ 577.443060][T19562] fuseblk: Unknown parameter 'ro' [ 577.448271][ T60] usb 14-1: USB disconnect, device number 14 [ 577.746241][ T3247] Bluetooth: hci1: command tx timeout [ 577.814430][T19656] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6811'. [ 577.879302][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 577.993771][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 578.049686][ T9514] udevd[9514]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 578.074970][T19677] EXT4-fs: Conflicting test_dummy_encryption options [ 578.117606][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 578.138492][T19697] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6822'. [ 578.148345][T19697] binder: 19696:19697 ioctl 4020ae46 200000000000 returned -22 [ 578.179269][T19702] binder: 19691:19702 ioctl c0306201 2000000001c0 returned -14 [ 578.321750][T19721] macsec1: entered promiscuous mode [ 578.409827][T19733] netlink: 'syz.7.6834': attribute type 21 has an invalid length. [ 578.412713][T19733] IPv6: NLM_F_CREATE should be specified when creating new route [ 578.451927][T19741] tmpfs: Unknown parameter 'gr.uota_block_hardlimit' [ 578.459082][T19740] [U] Y [ 578.501905][T19744] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6836'. [ 578.538465][T19743] block nbd0: shutting down sockets [ 578.582553][T19748] FAULT_INJECTION: forcing a failure. [ 578.582553][T19748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.587612][T19748] CPU: 3 UID: 0 PID: 19748 Comm: syz.9.6839 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.587639][T19748] Tainted: [L]=SOFTLOCKUP [ 578.587645][T19748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 578.587656][T19748] Call Trace: [ 578.587662][T19748] [ 578.587669][T19748] dump_stack_lvl+0x100/0x190 [ 578.587728][T19748] should_fail_ex.cold+0x5/0xa [ 578.587751][T19748] _copy_from_user+0x2e/0xd0 [ 578.587783][T19748] copy_msghdr_from_user+0x9f/0x4f0 [ 578.587815][T19748] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 578.587842][T19748] ___sys_sendmsg+0x106/0x1e0 [ 578.587860][T19748] ? __pfx____sys_sendmsg+0x10/0x10 [ 578.587905][T19748] __sys_sendmsg+0x170/0x220 [ 578.587924][T19748] ? __pfx___sys_sendmsg+0x10/0x10 [ 578.587952][T19748] do_syscall_64+0x106/0xf80 [ 578.587971][T19748] ? clear_bhb_loop+0x40/0x90 [ 578.587988][T19748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.588003][T19748] RIP: 0033:0x7f7dca59bf79 [ 578.588015][T19748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.588028][T19748] RSP: 002b:00007f7dc87f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 578.588043][T19748] RAX: ffffffffffffffda RBX: 00007f7dca815fa0 RCX: 00007f7dca59bf79 [ 578.588051][T19748] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 578.588059][T19748] RBP: 00007f7dc87f6090 R08: 0000000000000000 R09: 0000000000000000 [ 578.588067][T19748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.588075][T19748] R13: 00007f7dca816038 R14: 00007f7dca815fa0 R15: 00007ffcc1b2d128 [ 578.588093][T19748] [ 578.858908][ T7147] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 579.034636][T19762] sit0: entered promiscuous mode [ 579.042524][T19762] netlink: 'syz.4.6844': attribute type 1 has an invalid length. [ 579.043377][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 579.098751][ T9514] udevd[9514]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 579.161024][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 579.205132][T19783] block nbd0: shutting down sockets [ 579.252718][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 579.320700][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 579.364130][T19796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.396646][T19796] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 579.432824][T19805] ptrace attach of "/syz-executor exec"[7315] was attempted by "/syz-executor exec"[19805] [ 579.438303][T19796] bond0 (unregistering): Released all slaves [ 579.535471][T19825] /dev/nullb0: Can't lookup blockdev [ 579.538640][T19825] /dev/nullb0: Can't lookup blockdev [ 579.971466][ T3247] Bluetooth: hci1: command tx timeout [ 580.049650][ T40] audit: type=1804 audit(2000000041.142:16406): pid=19844 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.6866" name="file0" dev="ramfs" ino=144171 res=1 errno=0 [ 580.061914][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 580.213406][T19847] openvswitch: netlink: IPv6 tunnel dst address is zero [ 580.251379][T19850] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 580.330444][T19863] SELinux: Context system_u:object_r:dhcpd_initrc_exec_t:s0 is not valid (left unmapped). [ 580.339129][ T40] audit: type=1400 audit(2000000041.414:16407): avc: denied { relabelto } for pid=19860 comm="syz.4.6867" name="file0" dev="tmpfs" ino=3066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpd_initrc_exec_t:s0" [ 580.349307][ T40] audit: type=1400 audit(2000000041.414:16408): avc: denied { associate } for pid=19860 comm="syz.4.6867" name="file0" dev="tmpfs" ino=3066 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpd_initrc_exec_t:s0" [ 580.363078][ T40] audit: type=1400 audit(2000000041.432:16409): avc: denied { rmdir } for pid=4160 comm="syz-executor" name="file0" dev="tmpfs" ino=3066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpd_initrc_exec_t:s0" [ 580.816631][T19908] block nbd0: shutting down sockets [ 580.847063][T19914] __nla_validate_parse: 3 callbacks suppressed [ 580.847082][T19914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6881'. [ 580.894765][T19914] team0: Port device team_slave_0 removed [ 580.964541][T19938] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6887'. [ 581.370094][T19957] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6892'. [ 581.471567][T19960] validate_nla: 1 callbacks suppressed [ 581.471579][T19960] netlink: 'syz.7.6893': attribute type 6 has an invalid length. [ 581.848074][ T40] audit: type=1400 audit(2000000042.825:16410): avc: denied { getopt } for pid=19964 comm="syz.7.6895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 582.082082][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6901'. [ 582.157210][T19989] vim2m vim2m.0: vidioc_s_fmt queue busy [ 582.311079][T19995] lo speed is unknown, defaulting to 1000 [ 582.394165][T20020] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6906'. [ 582.667060][T22261] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 582.832708][T20040] overlayfs: failed to clone upperpath [ 582.839549][T22261] usb 14-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 582.842835][T22261] usb 14-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 582.846192][T22261] usb 14-1: config 220 interface 0 has no altsetting 0 [ 582.850853][T22261] usb 14-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 582.853925][T22261] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.856844][T22261] usb 14-1: Product: syz [ 582.859062][T22261] usb 14-1: Manufacturer: syz [ 582.861182][T22261] usb 14-1: SerialNumber: syz [ 583.129435][T20020] netfs: Couldn't get user pages (rc=-14) [ 583.142988][T22261] uvcvideo 14-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 583.157743][T22261] uvcvideo 14-1:220.0: No valid video chain found. [ 583.161900][T22261] usb 14-1: USB disconnect, device number 15 [ 583.204885][T20068] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6919'. [ 583.208435][T20068] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6919'. [ 583.310537][T20076] overlayfs: failed to clone upperpath [ 583.619539][ C1] ------------[ cut here ]------------ [ 583.621694][ C1] sk->sk_forward_alloc [ 583.621702][ C1] WARNING: net/ipv4/af_inet.c:157 at inet_sock_destruct+0x653/0x800, CPU#1: syz-executor/13661 [ 583.626118][ C1] Modules linked in: [ 583.627736][ C1] CPU: 1 UID: 0 PID: 13661 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 583.630586][T24930] udevd[24930]: symlink '../../loop5' '/dev/disk/by-diskseq/117.tmp-b7:5' failed: Read-only file system [ 583.631125][ C1] Tainted: [L]=SOFTLOCKUP [ 583.636376][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 583.639403][ C1] RIP: 0010:inet_sock_destruct+0x653/0x800 [ 583.641320][ C1] Code: fc 4e ff e9 06 fd ff ff e8 3a 5b 0b f8 90 0f 0b 90 e9 35 fe ff ff e8 2c 5b 0b f8 90 0f 0b 90 e9 c5 fe ff ff e8 1e 5b 0b f8 90 <0f> 0b 90 e9 04 ff ff ff e8 10 5b 0b f8 90 0f 0b 90 e9 65 fe ff ff [ 583.647154][ C1] RSP: 0018:ffffc900006a0d98 EFLAGS: 00010246 [ 583.649004][ C1] RAX: 0000000000000000 RBX: ffff888026dd7700 RCX: ffffffff89fbb767 [ 583.651440][ C1] RDX: ffff888035a04900 RSI: ffffffff89fbb862 RDI: ffff888035a04900 [ 583.653817][ C1] RBP: 0000000000000f70 R08: 0000000000000005 R09: 0000000000000000 [ 583.656208][ C1] R10: 0000000000000f70 R11: 0000000000000000 R12: ffff888026dd7700 [ 583.658635][ C1] R13: ffff888026dd7790 R14: ffffffff81ed0bad R15: 0000000000000000 [ 583.661138][ C1] FS: 00005555584dc500(0000) GS:ffff8880d648b000(0000) knlGS:0000000000000000 [ 583.663866][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 583.665819][ C1] CR2: 00007fa5a73e42f8 CR3: 0000000059595000 CR4: 0000000000352ef0 [ 583.668530][ C1] Call Trace: [ 583.669666][ C1] [ 583.670708][ C1] ? __pfx_udp_destruct_sock+0x10/0x10 [ 583.672770][ C1] ? rcu_core+0x59d/0x10d0 [ 583.674224][ C1] __sk_destruct+0x85/0xbb0 [ 583.675700][ C1] ? rcu_core+0x59d/0x10d0 [ 583.677085][ C1] rcu_core+0x5a2/0x10d0 [ 583.678435][ C1] ? __hrtimer_run_queues+0x7d8/0x990 [ 583.680059][ C1] ? __pfx_rcu_core+0x10/0x10 [ 583.681672][ C1] ? ktime_get+0x1a7/0x300 [ 583.683145][ C1] handle_softirqs+0x1ea/0x910 [ 583.684699][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 583.686457][ C1] __irq_exit_rcu+0xef/0x150 [ 583.687917][ C1] irq_exit_rcu+0x9/0x30 [ 583.689229][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 583.691076][ C1] [ 583.692113][ C1] [ 583.693126][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 583.695311][ C1] RIP: 0010:rcu_is_watching+0xd/0xc0 [ 583.696981][ C1] Code: 81 e8 f7 ed 86 00 e9 49 ff ff ff 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 65 ff 05 c3 83 1d 12 6e e8 94 09 48 c7 c3 a8 8a 0a 94 89 c5 83 f8 07 0f 87 82 00 00 [ 583.702744][ C1] RSP: 0018:ffffc90006a6f9c0 EFLAGS: 00000283 [ 583.704658][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 583.707068][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff906c5588 [ 583.709488][ C1] RBP: ffffffff906c5588 R08: 0000000000000001 R09: 0000000000000000 [ 583.712236][ C1] R10: ffffc90006a6fbf0 R11: 0000000000000000 R12: 0000000000000000 [ 583.714666][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 583.717416][ C1] lock_acquire+0x2c4/0x330 [ 583.719043][ C1] ? __pfx___might_resched+0x10/0x10 [ 583.721003][ C1] __mutex_lock+0x1a2/0x1b90 [ 583.721154][T20094] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 583.722390][ C1] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 583.722414][ C1] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 583.730329][ C1] ? find_held_lock+0x2b/0x80 [ 583.731877][ C1] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 583.733545][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 583.735114][ C1] ? __lock_acquire+0x4a5/0x2630 [ 583.736819][ C1] ? avc_has_perm_noaudit+0x145/0x3b0 [ 583.738465][ C1] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 583.740117][ C1] nf_sockopt_find.isra.0+0x2a/0x290 [ 583.741754][ C1] nf_getsockopt+0x2d/0xe0 [ 583.743147][ C1] ipv6_getsockopt+0x207/0x2a0 [ 583.744651][ C1] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 583.746345][ C1] ? find_held_lock+0x2b/0x80 [ 583.747879][ C1] ? __might_fault+0xc5/0x140 [ 583.749378][ C1] ? __might_fault+0xc5/0x140 [ 583.750824][ C1] tcp_getsockopt+0xa1/0x110 [ 583.752305][ C1] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 583.754074][ C1] do_sock_getsockopt+0x259/0x3d0 [ 583.755716][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 583.757404][ C1] ? find_held_lock+0x2b/0x80 [ 583.759059][ C1] ? fd_install+0x223/0x580 [ 583.760539][ C1] __sys_getsockopt+0x148/0x260 [ 583.762030][ C1] ? __pfx___sys_socket+0x10/0x10 [ 583.763574][ C1] ? __x64_sys_getsockopt+0xbd/0x160 [ 583.765194][ C1] __x64_sys_getsockopt+0xbd/0x160 [ 583.766831][ C1] ? do_syscall_64+0x95/0xf80 [ 583.768376][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 583.770020][ C1] do_syscall_64+0x106/0xf80 [ 583.771570][ C1] ? clear_bhb_loop+0x40/0x90 [ 583.773067][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.774872][ C1] RIP: 0033:0x7fa5a719d76a [ 583.776363][ C1] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 58 9a fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 583.782360][ C1] RSP: 002b:00007ffdcb714eb8 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 583.784927][ C1] RAX: ffffffffffffffda RBX: 00007ffdcb714f40 RCX: 00007fa5a719d76a [ 583.787344][ C1] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 583.789790][ C1] RBP: 0000000000000003 R08: 00007ffdcb714edc R09: 0000000000000000 [ 583.792284][ C1] R10: 00007ffdcb714f40 R11: 0000000000000212 R12: 00007fa5a73e77a0 [ 583.794719][ C1] R13: 00007ffdcb714edc R14: 0000000000000000 R15: 00007fa5a73e7e60 [ 583.797176][ C1] [ 583.798156][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 583.800401][ C1] CPU: 1 UID: 0 PID: 13661 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 583.803727][ C1] Tainted: [L]=SOFTLOCKUP [ 583.805108][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 583.808220][ C1] Call Trace: [ 583.809227][ C1] [ 583.810114][ C1] dump_stack_lvl+0x100/0x190 [ 583.811610][ C1] vpanic+0x552/0x970 [ 583.812816][ C1] ? __pfx_vpanic+0x10/0x10 [ 583.814232][ C1] panic+0xd1/0xe0 [ 583.815419][ C1] ? __pfx_panic+0x10/0x10 [ 583.816797][ C1] ? check_panic_on_warn+0x1f/0x90 [ 583.818370][ C1] check_panic_on_warn.cold+0x19/0x34 [ 583.820214][ C1] ? inet_sock_destruct+0x653/0x800 [ 583.821791][ C1] __warn.cold+0x191/0x2f8 [ 583.823142][ C1] __report_bug+0x296/0x3d0 [ 583.824564][ C1] ? inet_sock_destruct+0x653/0x800 [ 583.826218][ C1] ? __pfx___report_bug+0x10/0x10 [ 583.828165][ C1] ? ipv6_getsockopt+0x207/0x2a0 [ 583.829648][ C1] ? tcp_getsockopt+0xa1/0x110 [ 583.831131][ C1] ? do_sock_getsockopt+0x259/0x3d0 [ 583.832719][ C1] ? __sys_getsockopt+0x148/0x260 [ 583.834270][ C1] ? __x64_sys_getsockopt+0xbd/0x160 [ 583.835958][ C1] ? do_syscall_64+0x106/0xf80 [ 583.837407][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.839267][ C1] ? inet_sock_destruct+0x653/0x800 [ 583.840871][ C1] report_bug+0xb2/0x220 [ 583.842176][ C1] ? inet_sock_destruct+0x653/0x800 [ 583.843751][ C1] handle_bug+0x166/0x2a0 [ 583.845125][ C1] exc_invalid_op+0x17/0x50 [ 583.846510][ C1] asm_exc_invalid_op+0x1a/0x20 [ 583.848022][ C1] RIP: 0010:inet_sock_destruct+0x653/0x800 [ 583.849766][ C1] Code: fc 4e ff e9 06 fd ff ff e8 3a 5b 0b f8 90 0f 0b 90 e9 35 fe ff ff e8 2c 5b 0b f8 90 0f 0b 90 e9 c5 fe ff ff e8 1e 5b 0b f8 90 <0f> 0b 90 e9 04 ff ff ff e8 10 5b 0b f8 90 0f 0b 90 e9 65 fe ff ff [ 583.855571][ C1] RSP: 0018:ffffc900006a0d98 EFLAGS: 00010246 [ 583.857396][ C1] RAX: 0000000000000000 RBX: ffff888026dd7700 RCX: ffffffff89fbb767 [ 583.859747][ C1] RDX: ffff888035a04900 RSI: ffffffff89fbb862 RDI: ffff888035a04900 [ 583.862215][ C1] RBP: 0000000000000f70 R08: 0000000000000005 R09: 0000000000000000 [ 583.864668][ C1] R10: 0000000000000f70 R11: 0000000000000000 R12: ffff888026dd7700 [ 583.867093][ C1] R13: ffff888026dd7790 R14: ffffffff81ed0bad R15: 0000000000000000 [ 583.869466][ C1] ? rcu_core+0x59d/0x10d0 [ 583.870905][ C1] ? inet_sock_destruct+0x557/0x800 [ 583.872530][ C1] ? inet_sock_destruct+0x652/0x800 [ 583.874176][ C1] ? inet_sock_destruct+0x652/0x800 [ 583.875834][ C1] ? __pfx_udp_destruct_sock+0x10/0x10 [ 583.877486][ C1] ? rcu_core+0x59d/0x10d0 [ 583.878819][ C1] __sk_destruct+0x85/0xbb0 [ 583.880218][ C1] ? rcu_core+0x59d/0x10d0 [ 583.881649][ C1] rcu_core+0x5a2/0x10d0 [ 583.882936][ C1] ? __hrtimer_run_queues+0x7d8/0x990 [ 583.884610][ C1] ? __pfx_rcu_core+0x10/0x10 [ 583.886098][ C1] ? ktime_get+0x1a7/0x300 [ 583.887475][ C1] handle_softirqs+0x1ea/0x910 [ 583.888924][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 583.890566][ C1] __irq_exit_rcu+0xef/0x150 [ 583.892044][ C1] irq_exit_rcu+0x9/0x30 [ 583.893345][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 583.895043][ C1] [ 583.895989][ C1] [ 583.896924][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 583.898752][ C1] RIP: 0010:rcu_is_watching+0xd/0xc0 [ 583.900433][ C1] Code: 81 e8 f7 ed 86 00 e9 49 ff ff ff 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 65 ff 05 c3 83 1d 12 6e e8 94 09 48 c7 c3 a8 8a 0a 94 89 c5 83 f8 07 0f 87 82 00 00 [ 583.906237][ C1] RSP: 0018:ffffc90006a6f9c0 EFLAGS: 00000283 [ 583.908176][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 583.910580][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff906c5588 [ 583.912978][ C1] RBP: ffffffff906c5588 R08: 0000000000000001 R09: 0000000000000000 [ 583.915462][ C1] R10: ffffc90006a6fbf0 R11: 0000000000000000 R12: 0000000000000000 [ 583.917866][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 583.920226][ C1] lock_acquire+0x2c4/0x330 [ 583.921623][ C1] ? __pfx___might_resched+0x10/0x10 [ 583.923252][ C1] __mutex_lock+0x1a2/0x1b90 [ 583.924722][ C1] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 583.926465][ C1] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 583.928100][ C1] ? find_held_lock+0x2b/0x80 [ 583.929519][ C1] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 583.931193][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 583.932745][ C1] ? __lock_acquire+0x4a5/0x2630 [ 583.934329][ C1] ? avc_has_perm_noaudit+0x145/0x3b0 [ 583.935999][ C1] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 583.937628][ C1] nf_sockopt_find.isra.0+0x2a/0x290 [ 583.939281][ C1] nf_getsockopt+0x2d/0xe0 [ 583.940653][ C1] ipv6_getsockopt+0x207/0x2a0 [ 583.942140][ C1] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 583.943786][ C1] ? find_held_lock+0x2b/0x80 [ 583.945276][ C1] ? __might_fault+0xc5/0x140 [ 583.946730][ C1] ? __might_fault+0xc5/0x140 [ 583.948173][ C1] tcp_getsockopt+0xa1/0x110 [ 583.949581][ C1] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 583.951401][ C1] do_sock_getsockopt+0x259/0x3d0 [ 583.952897][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 583.954573][ C1] ? find_held_lock+0x2b/0x80 [ 583.956091][ C1] ? fd_install+0x223/0x580 [ 583.957561][ C1] __sys_getsockopt+0x148/0x260 [ 583.959047][ C1] ? __pfx___sys_socket+0x10/0x10 [ 583.960581][ C1] ? __x64_sys_getsockopt+0xbd/0x160 [ 583.962167][ C1] __x64_sys_getsockopt+0xbd/0x160 [ 583.963718][ C1] ? do_syscall_64+0x95/0xf80 [ 583.965221][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 583.966852][ C1] do_syscall_64+0x106/0xf80 [ 583.968317][ C1] ? clear_bhb_loop+0x40/0x90 [ 583.969725][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.971595][ C1] RIP: 0033:0x7fa5a719d76a [ 583.972953][ C1] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 58 9a fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 583.978714][ C1] RSP: 002b:00007ffdcb714eb8 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 583.981248][ C1] RAX: ffffffffffffffda RBX: 00007ffdcb714f40 RCX: 00007fa5a719d76a [ 583.983625][ C1] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 583.986061][ C1] RBP: 0000000000000003 R08: 00007ffdcb714edc R09: 0000000000000000 [ 583.988618][ C1] R10: 00007ffdcb714f40 R11: 0000000000000212 R12: 00007fa5a73e77a0 [ 583.991097][ C1] R13: 00007ffdcb714edc R14: 0000000000000000 R15: 00007fa5a73e7e60 [ 583.993576][ C1] [ 583.995268][ C1] Kernel Offset: disabled [ 583.996599][ C1] Rebooting in 86400 seconds..