last executing test programs: 2m17.204537349s ago: executing program 1 (id=91): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(r0, 0x5501) 2m17.124105914s ago: executing program 1 (id=94): openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x46, &(0x7f0000000480)=[{}, {}], 0x10, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xb9, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='attr/keycreate\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000740), 0x40, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000780), 0x101104, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000007c0)={[0xbd3]}, 0x8, 0x800) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x4010}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000004000000000000000002000018000000ff000000000000000180000095000000000000008054fc00000000000018410000080000000000000000000000f527fcfff0ffffff95000000000000009f93464220490a3583b2c81945cb69b8120f363801bbe24eb8cb8432cebb83029be00203136b2b0a0a3eada9eeacc9dfd03bdc08ec46de4fe595c87d9c0e215744fd32158ede0802b2c1b095d84dbfca82bb186c5c947cf88700"/185], &(0x7f0000000180)='syzkaller\x00', 0xc78e, 0x9f, &(0x7f00000001c0)=""/159, 0x41100, 0x46, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0xf, 0x40, 0x40008000}, 0x10, 0x26a3d, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[r2, r3, r4, r2], 0x0, 0x10, 0x4}, 0x94) 2m17.122026714s ago: executing program 1 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x491}]}) syz_emit_ethernet(0x8a, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES32=0x41424344, @ANYRESHEX=r2, @ANYBLOB='P'], 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x894a, &(0x7f00000028c0)={'ip6_vti0\x00', 0x0}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000008ffff0f0000000000000000000000000000000074") 2m16.915275932s ago: executing program 1 (id=102): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0xec0, 0x2000) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r1, 0x800c6f40, &(0x7f0000000100)={""/4, 0x4}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) (async) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], 0x0, r5, 0x0, '\x00', 0x1}) (async) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@mcast1, @empty, @private0, 0x80000001, 0xc, 0x0, 0x0, 0x1200, 0x80890300, r2}) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000763000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xa, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) (async) io_uring_enter(r8, 0x2219, 0x7721, 0x33, 0x0, 0x0) (async) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r9, 0x5201) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x4e21, 0x6, @local}, 0x1c) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x5}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000400)={r12, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x800, 0x4, 0x2, 0x5, 0x99, 0x6}, 0x9c) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, @in=@local, 0x4e21, 0x0, 0x4e22, 0x6, 0xa, 0x80, 0x20, 0x82, r2}, {0xffffffffffffffff, 0x7, 0x3, 0x7, 0x5, 0xffffffff, 0x6, 0xfffffffffffffffb}, {0x9, 0x3ff, 0x8, 0xc}, 0x5, 0x6e6bb4, 0x0, 0x1, 0x1, 0x2}, {{@in6=@private0, 0x4d6, 0xd4}, 0xa, @in6=@mcast1, 0x3505, 0x4, 0x0, 0xcb, 0x2, 0xb, 0x8}}, 0xe8) r13 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) bind$inet6(r13, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fsc']) 2m16.914749643s ago: executing program 1 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='kyber', 0x5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x123140000, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r1, r1], 0x2}, 0x58) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000200)=0x0) mount$nfs4(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./sys/block/nullb0/queue/scheduler\x00', &(0x7f0000000180), 0x10, &(0x7f0000000240)={[{','}, {'@-)\\$[&-s[*]'}, {'sysfs\x00'}, {'$'}, {'sysfs\x00'}, {}, {'sysfs\x00'}, {'%'}], [{@fowner_lt={'fowner<', r2}}]}) 2m16.747076387s ago: executing program 1 (id=105): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='efs\x00', 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x2000000058831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000140)={&(0x7f00002ae000/0x1000)=nil, &(0x7f00009d9000/0x3000)=nil, 0x1000, 0x1}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) waitid(0x2, 0x0, &(0x7f00000000c0), 0x20000000, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000100)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000100)=0xc) setresuid(r1, 0xffffffffffffffff, 0xffffffffffffffff) close(0x3) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3b) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x10000, 0x1, 0xb000, 0x2000, &(0x7f0000272000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x10000, 0x1, 0xb000, 0x2000, &(0x7f0000272000/0x2000)=nil}) sendfile(r4, r4, 0x0, 0x200000) (async) sendfile(r4, r4, 0x0, 0x200000) 2m1.658033303s ago: executing program 32 (id=105): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='efs\x00', 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x2000000058831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000140)={&(0x7f00002ae000/0x1000)=nil, &(0x7f00009d9000/0x3000)=nil, 0x1000, 0x1}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) waitid(0x2, 0x0, &(0x7f00000000c0), 0x20000000, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000100)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000100)=0xc) setresuid(r1, 0xffffffffffffffff, 0xffffffffffffffff) close(0x3) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3b) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x10000, 0x1, 0xb000, 0x2000, &(0x7f0000272000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x10000, 0x1, 0xb000, 0x2000, &(0x7f0000272000/0x2000)=nil}) sendfile(r4, r4, 0x0, 0x200000) (async) sendfile(r4, r4, 0x0, 0x200000) 1m20.131701315s ago: executing program 3 (id=560): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) (async) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f58136", 0x2b}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) (async) ioctl$XFS_IOC_OPEN_BY_HANDLE(r3, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) 1m20.125403639s ago: executing program 3 (id=564): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000100)={0x10, 0xffffffda, 0x3}, 0x10) (async) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3951d, 0x4b7bc}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000d80)=@v={0x93, 0x1, 0x90, 0xb, @MIDI_NOTEON=@note=0x9, 0x2, 0xec}) (async) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1dcd6500}}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000300)={0xad93, 0x101, 0xffffffff}) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) close_range(r7, r0, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=@ipv6_delrule={0x4c, 0x21, 0x1, 0x70bd2c, 0x25dfdbfb, {0xa, 0x14, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x1, 0xa}, [@FRA_SRC={0x14, 0x2, @loopback}, @FRA_DST={0x14, 0x1, @remote}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x15}, 0x44090) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r9}, &(0x7f0000000080), 0x0}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r7, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1m20.000569642s ago: executing program 3 (id=568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) 1m19.911232025s ago: executing program 3 (id=570): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x14, 0x13, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="9a", 0x1, 0x804, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 1m19.462116312s ago: executing program 2 (id=580): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000008c0), 0x802, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff800}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0145401, &(0x7f0000000100)={{0x3, 0x1, 0x1, 0x0, 0x4000}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) (async) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r2, 0x0, 0x2) fchdir(r6) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0x80049370, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r12) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) (async) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0x2}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0xfffffffffffffe59, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) (async) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r15, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0xe, 0x7, 0x7, 0xffffff3e, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m19.360706309s ago: executing program 2 (id=583): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x390c, 0x6536d5ef40a93725}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x22}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x410c0}, 0x4) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc, 0x2, 0x0, 0x0, 0x40000000}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1b, 0x0, 0x0, 0x0}, 0x94) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./mysys/bus/pci/devices/0000:00:04.0/device\x00', 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r6, 0x0) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[], [], 0x2c}) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f00000071c0)={0x18, {"a2e3ad2119c752f91b5e09091bf70e0dd038e7ff7fc6e5539b324d078b089b3b0838721a0890e0878f0e1ac6e7049b3d63959b509a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70d998ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5af098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000108000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b2fc652c54e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f794c9eee1198751adaa13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2dc19a3a375e71e078342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb0100008051fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d8872fe174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0559be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f980000000203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000000280)={'TPROXY\x00'}, &(0x7f00000002c0)=0x1e) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) read(r5, &(0x7f0000000a00), 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c010}, 0x841) 1m19.300575887s ago: executing program 2 (id=585): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r4 = creat(&(0x7f0000000ac0)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x4, 0x43033, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0, 0x0, r1}, 0x68) syz_ublk_setup_io_uring(0x4d8d, &(0x7f0000000140)={0x0, 0x182c, 0x10, 0x2, 0x2d2}, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)) io_uring_setup(0x41e7, &(0x7f00000002c0)={0x0, 0x2dfc, 0x800, 0x3, 0x67, 0x0, r4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x281d, 0xc000, 0x8, 0xc1}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000380)={'netdevsim0\x00', @local}) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0xa, &(0x7f00000000c0)=0x5, 0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r8, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) splice(r8, 0x0, r7, 0x0, 0x10000807, 0x0) getgid() 1m19.012155236s ago: executing program 3 (id=588): r0 = syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0xa1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gre0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x400, &(0x7f0000000700)=ANY=[@ANYBLOB='pids_localevents,memory_hugetlb_accounting,nsdelegate,pids_localevents,favordynmods,nsdelegate,euid=', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c61756469742c7569643c651228721c83029c5cbb968da4aedcdf645c43c2bf367d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dbg/failslab/ignore-gfp-wait\x00', 0x1, 0x0) r5 = syz_clone(0x4000000, &(0x7f0000000540)="671ac69da4fb9968efe1f3aaaa47c02f82f4d5fe559cb0fe8ee714d16a5a8e6426b8ca9f306e8ad271c8e6880152", 0x2e, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="8bd063dbb3c164771552d5d6c7ff18f3982136d73a9c48078b") r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregs(0xc, r6, 0x3, &(0x7f0000000200)=""/114) syz_clone3(&(0x7f0000000680)={0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000280), {0x2f}, &(0x7f00000002c0)=""/191, 0xbf, &(0x7f0000000480)=""/159, &(0x7f0000000640)=[r0, r0, r0, r5, r0, r6, r0, r0, r0], 0x9, {r4}}, 0x58) write$cgroup_freezer_state(r4, &(0x7f0000000100)='THAWED\x00', 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006119a400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 1m18.865530927s ago: executing program 3 (id=589): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sched_rr_get_interval(0x0, &(0x7f00000000c0)) (async) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x0, 0x7, 0x9, 0x0, 0x65, 0x9, 0x12, 0x9, 0x0, 0x1, 0x7, 0x9, 0x0, 0x3, 0xffffffff, 0x0, 0xc, 0x7, 0x5, '\x00', 0x8, 0x9e9b}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x4, 0x10000, 0x22, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x40, 0x3, 0xab}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x48, &(0x7f0000000300)=""/72, 0x41100, 0x1, '\x00', r6, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000480)=[r2, r2, r2, r2, r7, r2, r2], &(0x7f00000004c0)=[{0x0, 0x4, 0x6, 0xb}, {0x4, 0x3, 0xa, 0xb}, {0x3, 0x4, 0x6, 0x4}, {0x4, 0x3, 0xb, 0x3}, {0x0, 0x5, 0x6, 0x3}, {0x3, 0x1, 0xc, 0x1}, {0x4, 0x1, 0x4, 0xb}, {0x5, 0x3, 0x5, 0x6}, {0x2, 0x1, 0x8, 0x9}], 0x10, 0x8001}, 0x94) (async) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) mmap$binder(&(0x7f00000e3000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x3ff) write(r8, &(0x7f0000000140)='off', 0x3) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r9 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x4800}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}}, 0x0) 1m18.382601006s ago: executing program 2 (id=597): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0xfffffffffffffffd) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x68, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"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"}) 1m18.127714304s ago: executing program 2 (id=603): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@broadcast, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x40, 0x3a, 0x1, @empty, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x24a4, {0x7, 0x6, "b1ce39", 0x200, 0x33, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@srh={0x4, 0x0, 0x4, 0x0, 0x0, 0x50, 0x9}], "e7dee9204a281be3"}}}}}}}, 0x0) setrlimit(0x5, &(0x7f0000000040)={0xebc, 0x7fd}) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) 1m17.784049789s ago: executing program 2 (id=608): r0 = socket$kcm(0x10, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (rerun: 32) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x0) (rerun: 32) read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) (async) sendmsg$kcm(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000060020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) 1m2.781426852s ago: executing program 33 (id=589): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sched_rr_get_interval(0x0, &(0x7f00000000c0)) (async) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x0, 0x7, 0x9, 0x0, 0x65, 0x9, 0x12, 0x9, 0x0, 0x1, 0x7, 0x9, 0x0, 0x3, 0xffffffff, 0x0, 0xc, 0x7, 0x5, '\x00', 0x8, 0x9e9b}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x4, 0x10000, 0x22, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x40, 0x3, 0xab}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x48, &(0x7f0000000300)=""/72, 0x41100, 0x1, '\x00', r6, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000480)=[r2, r2, r2, r2, r7, r2, r2], &(0x7f00000004c0)=[{0x0, 0x4, 0x6, 0xb}, {0x4, 0x3, 0xa, 0xb}, {0x3, 0x4, 0x6, 0x4}, {0x4, 0x3, 0xb, 0x3}, {0x0, 0x5, 0x6, 0x3}, {0x3, 0x1, 0xc, 0x1}, {0x4, 0x1, 0x4, 0xb}, {0x5, 0x3, 0x5, 0x6}, {0x2, 0x1, 0x8, 0x9}], 0x10, 0x8001}, 0x94) (async) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) mmap$binder(&(0x7f00000e3000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x3ff) write(r8, &(0x7f0000000140)='off', 0x3) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r9 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x4800}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}}, 0x0) 1m1.584213955s ago: executing program 34 (id=608): r0 = socket$kcm(0x10, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (rerun: 32) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x0) (rerun: 32) read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) (async) sendmsg$kcm(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000060020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) 20.291869691s ago: executing program 0 (id=978): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) fanotify_init(0x40, 0x80000) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) ioctl$DVB_DVR_DMX_QUERYBUF(r3, 0xc0186f3d, &(0x7f0000000140)={0x8, 0x6, 0x1, 0xb0d, 0x4, 0xff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 20.188087757s ago: executing program 0 (id=979): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500005a1b7bee00711184000024c019e7e73863d8000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0xfffffffc, 0x100004, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x100004, 0x4, 0x4, 0x2000, 0x100, r2, r3, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x129102, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)=@getchain={0x34, 0x66, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x10, 0xd}, {0xe, 0x3}, {0xe, 0xffe0}}, [{0x8, 0xb, 0x1c8587da}, {0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x8000) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x0, 0x4e22, 0x4, 0xa, 0x0, 0x80, 0xa, 0x0, r2}, {0x5, 0xc, 0x5, 0xb3ea, 0x7f, 0x200, 0x10000, 0x8000000000000001}, {0x7, 0x0, 0x81, 0x9}, 0x4, 0x6e6bbb, 0x1, 0x1}, {{@in=@multicast2, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x3502, 0x2, 0x1, 0x2, 0x40, 0x3, 0xffffff7f}}, 0xe8) 20.077841089s ago: executing program 0 (id=980): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xbc, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9452}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x6) r1 = socket$rxrpc(0x21, 0x2, 0xa) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000280)=""/202, 0xca}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f0000000500)=""/33, 0x21}, {&(0x7f0000000540)=""/8, 0x8}, {&(0x7f0000000580)=""/85, 0x55}, {&(0x7f0000000600)=""/127, 0x7f}], 0x8) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000800)=0xe8) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000202, r3, &(0x7f0000000840)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=@newneigh={0x50, 0x1c, 0x300, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x2, 0x48, 0x4}, [@NDA_SRC_VNI={0x8, 0xb, 0x5}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_PORT={0x6, 0x6, 0x4e24}, @NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010102}, @NDA_PROBES={0x8, 0x4, 0x4}, @NDA_LLADDR={0xa, 0x2, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000009c0), 0x4000, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a80)=@generic={&(0x7f0000000a40)='./file0\x00', 0x0, 0x8}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000ac0)=@generic={&(0x7f0000000a00)='./file1\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r7, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000d00)={r5, &(0x7f0000000c00)='\\\'\x00', 0x391ae7276e12477c, &(0x7f0000000c40)={@_ha_fsid={[0xfbb, 0x10000]}, {0xffff, 0xfff8, 0x5, 0xffffffff7fffffff}}, 0x8, &(0x7f0000000c80), &(0x7f0000000cc0)=0x1000000}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000dc0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000e00)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r8, &(0x7f0000001040)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e40)={0x184, r9, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000001140)={&(0x7f0000001080), 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, r9, 0x2, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$VT_DISALLOCATE(r8, 0x5608) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000001240)={r13, 0x0, 0x10000, 0x8, &(0x7f0000001200)=[{0xc04, 0xfff, 0x5, 0x2}, {0x580, 0xc, 0x1, 0xff}, {0x4, 0x851, 0x1, 0x404c}, {0xfff9, 0xf001, 0xf581, 0x800}, {0x8, 0x8, 0x8, 0x6}, {0x8, 0x80, 0x401, 0x800}, {0x100, 0x5, 0x0, 0x9}, {0x8, 0x8, 0x4, 0x7bce}]}) r14 = openat$mice(0xffffffffffffff9c, &(0x7f0000001280), 0x40000) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f0000001300)={0x0, r12, r13, 0x0, 0x0, 0x4, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r14, 0xc01864b0, &(0x7f0000001340)={r15, r13, 0xf, 0x7, 0x10000}) r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x18002, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r16, 0x80047210, &(0x7f00000013c0)) connect$inet6(0xffffffffffffffff, &(0x7f0000001440)={0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) 19.98146205s ago: executing program 0 (id=983): socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f00000000c0)='./file1\x00', 0x34) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40900, 0x0) ioctl$CDROMVOLCTRL(r1, 0x530a, &(0x7f00000000c0)={0x5, 0x2, 0x2f, 0x4}) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000940)='./file1\x00') mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r2, 0x0, &(0x7f0000000180)="000000000700f300db04000000010b84721a9aea1a656e75effcece4d8c6613a7e2b8b0c0fcc5c3e1a9fcd480a2128bb2ce3c9b5b1ba538c4989e38701e27b39fa3de0c6f84610bc3fd35adfe65868e135170e00413718dc981d7a3c967be85fe6c71b65734d51cd0ba9a9f9e7ee7f411621f14c4418ff3e75bc559108aeef1d") openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x20402, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x60700, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x60, r4}, './file0\x00'}) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x12020) r7 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r7, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x2, 0x3cd}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000280)={0x0, 0xcc40, 0x0, 0x4, 0x40001f4}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x1000, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f71, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 19.875019052s ago: executing program 0 (id=985): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0xf9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write$P9_RSTATu(r2, &(0x7f0000000040)=ANY=[@ANYRESOCT=r2, @ANYRES16=r2], 0x55) (async) fstat(r1, &(0x7f0000000240)) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x48401) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000340)=ANY=[@ANYBLOB='\r\x00\x00\x00\b']) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e79aad9e884ae3c88381f00000000b08900", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdir(&(0x7f0000000200)='trace/events/sched/sched_switch/filter\x00', 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="7832974641584267479fc12cf544922b0787a29646879fbf420109b555b324e9e65aef9b95500054ed39e06013897af895f5bf8c3b504e2dad90d1b64b211e550266379d779c7d171e89afc5bf26b1bcc9d764a966b86c8dd210f5f03be0eed34ea0929da75d9513e75d488654f07fe6e70b6fd1ec6f55577c7431a7dfdf6f12b08b55336b8cd491448da27056d338aef3d58eaf712c90a7b0fa56535d20057d52e6a245bc461014acc2a1de0a3bfe66b942fcc445dfae4aa56362a7c2c724f291a102fde157", @ANYRES32], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000b40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010200bd7000fddbdf251400000008000400cb3900000700000005000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) (async) mkdirat(r1, &(0x7f00000001c0)='./trace\x00', 0x195) (async) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='prev_state.function ~', 0x15) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a00000409005a6ca7994aa8421dcb010073797a310000000008000540000000010900020073797a310000000008000640000000004f49fcf48473e031b8ed6ad4ffa0400000000c0a010100000000feffffff090000020900020073797a31000000000900010073797a310000000014000380100000800c000180050001000100"/178], 0xa4}}, 0x40) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x10000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000b00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="800410ee1ef9e606262a43d1548e533becab96d7f09ae373591cde166b0f29cc8e65e9d2d4a864593d9181b66fd6b45f0bc184c093a19a73bdaad9adb276706385f1e95f0a3f1d1a5782c0d4e0d2000bac52fb06dbc5fcc614b9d744d7607a61149f375161ab219cf68661fa585e60300c5ac10565eaaf5924a566bc4b4d8cf94cd610b188a8875216533aa4f159fe8163cb48af61840af4d5ec183f2e42c87495311d8f55932ea1de95d83ee6e179702bf7725e43aa750390486913c3f9", @ANYRES16=r8, @ANYBLOB="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"], 0x480}, 0x1, 0x0, 0x0, 0x20000050}, 0x11) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000640)=ANY=[], &(0x7f0000000c80)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x1}, 0x94) 19.45055367s ago: executing program 0 (id=994): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="1b90001e81810000"], 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r1, &(0x7f0000000080), 0x10) (async) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="1b90001e81810000"], 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async) 19.42125997s ago: executing program 35 (id=994): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="1b90001e81810000"], 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r1, &(0x7f0000000080), 0x10) (async) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="1b90001e81810000"], 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async) 18.882887498s ago: executing program 5 (id=999): chmod(&(0x7f0000000080)='./gadget/dummy_udc\x00', 0x4) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$OCFS2_IOC_UNRESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x1, 0x1, 0x7, 0x0, 0x101, 0x9}) openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) read(r2, &(0x7f00000003c0)=""/256, 0x100) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 17.922628908s ago: executing program 5 (id=1000): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x2) ptrace$pokeuser(0x6, r0, 0x358, 0xff) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x2}, 0x10) write(r2, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) r3 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000000)={0x98f907, 0x3, @name="f7a278f9d69cbcb2fd4ab033529ce4bf7f15de1f1c21feecb7de00000900"}) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r0) (async) ptrace$pokeuser(0x6, r0, 0x388, 0x2) (async) ptrace$pokeuser(0x6, r0, 0x358, 0xff) (async) socket$inet(0xa, 0x801, 0x84) (async) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x8) (async) accept4(r1, 0x0, 0x0, 0x0) (async) write(r2, &(0x7f0000000000)="ea", 0x1) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x2}, 0x10) (async) write(r2, &(0x7f00000002c0)="04", 0x1) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) (async) syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) (async) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000000)={0x98f907, 0x3, @name="f7a278f9d69cbcb2fd4ab033529ce4bf7f15de1f1c21feecb7de00000900"}) (async) socket(0x2, 0x80805, 0x0) (async) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) (async) 17.762219488s ago: executing program 5 (id=1001): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0) read$FUSE(r1, &(0x7f0000002a80)={0x2020}, 0xfffffffe) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$CDROM_SEND_PACKET(r5, 0x5393, &(0x7f0000000400)={"1a028abb51ca78da5c3e598d", &(0x7f0000000280)="739d60589d9db0eb37b1abb7417b238a4fbae55d6a8d9d6b337fcf2a51b76c8c1223b7629582a32a3db2cc15eaf620811707b970d8a1209fd2d515891dc374671ef2f0d13fd3c876906d8b7b39d4689849d3da457adf3f28cb953281aa16f8b4679bdfc9003683be410dd235a664ad7a060e315a4e3ddb945475d3cde6b151f53dd690b3143af860b9d214cb762ff7da019aee774935de0a204908495a60951e0c26545815b25f3316aa5422037ad516068820f31f6624d93bd8340cdabaaf4ecbc00c3bbf3608bd5cd5de8e63e77c8dbe78693391ddabb2dd7b6963e8680c3d58155818a9da", 0xe6, 0x1, &(0x7f0000000380)={0x2, 0x1, 0x39, 0x7, 0x0, 0x0, 0x0, "7f37a016", 0x3, "ad938740", 0x2, 0x80, 0x5c, "53baef", "060130eabc2029a3e8405173dae5d7097fbe869654dfbe02b4a3597a4b0518f8af3b8e7f743414cb6f1c9ef62c95"}, 0x1, 0x1, 0x131, 0x0}) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000002680)={0x18000000, 0x5}) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x44840}, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain={'key_or_keyring:', r7}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x4000) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_SLAVE(r9, 0x703, 0x60) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x6}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x1) 17.633588385s ago: executing program 5 (id=1004): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$unix(0x1, 0x5, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x40e9, &(0x7f0000000480)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0xfffffffffffffd5e) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x2000001, &(0x7f0000000600)={[{@redirect_dir_follow}, {@default_permissions}, {@index_on}, {@xino_on}, {@redirect_dir_on}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, 'upperdir'}}, {@subj_type={'subj_type', 0x3d, '%+.'}}, {@appraise}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x430, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="20107868c91d0e2de4ab1536b3d38a1a6831e7058e79eaa574e21c56e13c89102c64fe1ceb43a513a4df0c0ca883abd3f7beff5cf99e550721bbfb488aa2a36d5273a766805366ff4e719f51cff33200d580ee3456ba36c6eee1221a6b51828108afaf2ba77a849be8b611a99b644247d8e62fcdd7155a034a5c7b38ca70fea67f52e69f4cfddda970643d80e6d94c213e5dcaf8bc45bcc65fceb4874f007145dd1447699e24c8988b27be84"]) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000006c0)={0x100, 0x4, 0x0, 'queue0\x00', 0x10001}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 17.526381635s ago: executing program 5 (id=1005): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="0308010000000000240012800b0001006272696467650000140002800800040005000000050015"], 0x44}}, 0x4004010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000015000100000000000000ff00fe8800000000000000000000800000010000000000000000000000000000000000040000000000000000b10000000000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x68}}, 0x0) 16.949961671s ago: executing program 5 (id=1015): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="80000000090603000000000000000000050000000900020073797a3100000014340007800c001b4000000000000000080c000180080001400000000008001c4000000001080006400000000605000300020000002c0007801800018014000240fe80000000000000000000000000002c060004404e1f00000500070088000000b0eae41f98387c832a684e592685d0a5c6ac93e79a62362bb76ba48b2a6920548501dc0b346a70065bea271afa7f61cdad9c98b3e9e6ce3741a6e665bb2452d3573a388ef902f9dc444b18b10e76cb2b"], 0x80}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000080) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) madvise(&(0x7f0000180000/0x3000)=nil, 0x3000, 0x12) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000650f00d90f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2d}], 0x1, 0x51, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 16.826337649s ago: executing program 36 (id=1015): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="80000000090603000000000000000000050000000900020073797a3100000014340007800c001b4000000000000000080c000180080001400000000008001c4000000001080006400000000605000300020000002c0007801800018014000240fe80000000000000000000000000002c060004404e1f00000500070088000000b0eae41f98387c832a684e592685d0a5c6ac93e79a62362bb76ba48b2a6920548501dc0b346a70065bea271afa7f61cdad9c98b3e9e6ce3741a6e665bb2452d3573a388ef902f9dc444b18b10e76cb2b"], 0x80}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000080) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) madvise(&(0x7f0000180000/0x3000)=nil, 0x3000, 0x12) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000650f00d90f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2d}], 0x1, 0x51, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 11.339232938s ago: executing program 6 (id=1102): syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "e3", "dd"}}}}}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) (async, rerun: 32) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)=0xfffffffc) (async, rerun: 32) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000000)={0x0, 0x3f, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, 0x1412, 0x1, 0x70bd2a, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8084) (async) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)="df", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="0e", 0x34000}], 0x61}}], 0x2, 0x0) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8}]}}]}, 0x38}}, 0x0) (async) r8 = open$dir(&(0x7f0000000040)='./file0\x00', 0x40100, 0x74) faccessat(r8, &(0x7f0000000080)='./file0\x00', 0x1) 10.238884514s ago: executing program 6 (id=1120): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000003000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x4000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x7) dup2(r0, r2) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00240000000000001800128008000100677470000c000280050005000000000008000300", @ANYRES32=r10, @ANYBLOB="6f30f74a7b7b7005c48c"], 0x40}}, 0x4000000) 10.238418006s ago: executing program 6 (id=1121): openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_test', 0x63c003, 0x40) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801c}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bond0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1b}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x22}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}, 0x1, 0x0, 0x0, 0x2000c814}, 0x20000801) 10.164186231s ago: executing program 6 (id=1123): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001714010025bd7000fedbff250900020073797a310000f3ff9301e267080005007369770014"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001714010025bd7000fedbff250900020073797a310000f3ff9301e267080005007369770014"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0xc0}) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0xc0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0xfffe}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="01031c00100014000600460000650000000040119078ac140002ac1400010100000012344e20004d90780123456789abcdef0123456789abcdef01beed8eff6f1ae77e9c421b5c541a92af25b362d31f0e1ae6b53c2358ddc083dee0a4107392a012493d6f7f3bc975f9cbd0c04d74"], 0x6f) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0xbe9e}}, './file0\x00'}) 10.056342089s ago: executing program 6 (id=1126): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/platform/devices/usbip-vudc.0/modalias\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/256, 0x100) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x98, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x101}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x16a}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x96}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xdf5a}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80000000}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x4000805) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {0x1, 0x4}, [], {0x4, 0x3}, [], {0x10, 0x1}, {0x20, 0x6}}, 0x24, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x2c91, 0x4) (async) sendmsg$sock(r1, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e20, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[@mark={{0x14, 0x1, 0x51, 0x10a}}], 0x18}, 0x5000000) (async) mount$pvfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{'memory.events\x00'}, {'s\x9bst@+\xf6XP`\xa1\xd9\x9b\xd2$\x94em.posix_\xdf\xe0mfdefa\xec\xa6\x8dC\xbe\xf9\xdd\xec\x1c\x9bult\x00(Y\x03\xbe\r\xb9\xbf\x01S\xd7)o\xee\xfe\xab\x13q\x80c\xa8\xd5yTH\xae\xec\x98V\xb6\xacp84\x99(\x0e\xc7\xf5\x99!,\xc0\x8a\x13\xfb\'M\xb1\xa4\x91\xe1\xdf\'j\'\xc3\xdb1\x97\xff\xa8\x05U\x8b;\xec)\xd0\xee@\x83[\xd6\xcb\x93*\x06\xe7P\xb4\xed\xda5Q{\xd4\xb2\xc2dc\xc6z8\xbfF[#\xa8\x13n\t\x82\xc3\xeeB\x0f\xd5\x11\xfe\xc4\xb9\xd7\xb18\x16\x0e\v\xe6\n\xfc\x9e\xbd1\xc2\xf9\xaf5\xd4\xccmu\x9f\xbe\xd3Q~\xb1|Q\x94fA\x84\x9c\xb203\x83\xebL\xb3D\xb8\x9c\xc9C\xd5&\xbdBX\xd4p\xfa)\xf3\xa9\xa3\v\x8c\vS\xc5\xdd\xe7c\xcc\vI\xdd\x01\xcc\xa4\x97\xe7\xf3L\xfc]\xf45\x95\x98\xac\xd1\x9f\x8c&\xa7Ve\x88\x05aC\xa0i\x93\xb5\xd2B\x81.\x1f\x18\xe5\xd4\x96\x97Q\x155\x02\xfd\xa7\x13z\x85\xa3o>\xe4\xef\xa6K\xe2\xe4\xdf\x92\xd2\xe7_\x9d4\xee\xb3\xc4\xfa'}, {':'}, {'\xbe'}, {'system.posix_acl_default\x00'}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x42, 0x8) 9.682778467s ago: executing program 6 (id=1132): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x8, 0x5, 0x600, 0x0, 0x208, 0xffffffff, 0x2f8, 0x2f8, 0x530, 0x530, 0xffffffff, 0x530, 0x530, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, @port, @gre_key=0xfffc}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0x80000000, 0xffffffff, 0x0, 0xff000000], [0xff, 0x0, 0xffffff00, 0xffffffff], 'veth0_to_hsr\x00', 'nr0\x00', {}, {0xff}, 0x3d, 0x4, 0x4, 0x42}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@dev, @icmp_id, @port=0x4e20}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @icmp_id, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}, @gre_key=0x3, @gre_key=0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000f80)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0xffffffffffffffff, 0x3, 0x4, 0x100f24}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/intel_xhci_usb_sw/uevent\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)="41bdb5c4208d39b99792a9", 0xb) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000300)={0xffffffff, 0xb, 0x0, 0x86, 0x80, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000040)={0x0, 0x258cc74d, 0x4000, 0x0, 0x40, "00000000000000000000ffff00"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='0', 0x1) r6 = syz_open_pts(r4, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x81, 0x6, 0x40000005, 0x7ff, 0xd, "d206000094f3ffffd51930f9000100"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x6) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 9.619561589s ago: executing program 37 (id=1132): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x8, 0x5, 0x600, 0x0, 0x208, 0xffffffff, 0x2f8, 0x2f8, 0x530, 0x530, 0xffffffff, 0x530, 0x530, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, @port, @gre_key=0xfffc}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0x80000000, 0xffffffff, 0x0, 0xff000000], [0xff, 0x0, 0xffffff00, 0xffffffff], 'veth0_to_hsr\x00', 'nr0\x00', {}, {0xff}, 0x3d, 0x4, 0x4, 0x42}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@dev, @icmp_id, @port=0x4e20}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @icmp_id, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}, @gre_key=0x3, @gre_key=0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000f80)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0xffffffffffffffff, 0x3, 0x4, 0x100f24}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/intel_xhci_usb_sw/uevent\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)="41bdb5c4208d39b99792a9", 0xb) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000300)={0xffffffff, 0xb, 0x0, 0x86, 0x80, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000040)={0x0, 0x258cc74d, 0x4000, 0x0, 0x40, "00000000000000000000ffff00"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='0', 0x1) r6 = syz_open_pts(r4, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x81, 0x6, 0x40000005, 0x7ff, 0xd, "d206000094f3ffffd51930f9000100"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x6) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 7.138291377s ago: executing program 9 (id=1133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2d, 0xc, 0x9, {0x7, @udp_ip4_spec={@loopback, @multicast1, 0x4e22, 0x4e21, 0xfd}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x9, 0x2, [0x0, 0x1]}, @sctp_ip4_spec={@broadcast, @remote, 0x4e20, 0x4e24, 0x8}, {0x0, @local, 0x3, 0x7, [0xffff, 0x7]}, 0x3, 0xffffffff}}}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) setuid(0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpgid(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x0, r4}) sendmmsg$unix(r2, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x10, &(0x7f0000001540)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040040f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b30000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2d, 0xc, 0x9, {0x7, @udp_ip4_spec={@loopback, @multicast1, 0x4e22, 0x4e21, 0xfd}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x9, 0x2, [0x0, 0x1]}, @sctp_ip4_spec={@broadcast, @remote, 0x4e20, 0x4e24, 0x8}, {0x0, @local, 0x3, 0x7, [0xffff, 0x7]}, 0x3, 0xffffffff}}}) (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) (async) setuid(0xee01) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) getpgid(0x0) (async) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x0, r4}) (async) sendmmsg$unix(r2, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x10, &(0x7f0000001540)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040040f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b30000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 7.026963625s ago: executing program 9 (id=1170): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async, rerun: 32) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x15) (async) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001300f5d10300"/20, @ANYRES32=r1, @ANYBLOB="000000000000000008000d0000000e"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x4094) (rerun: 32) 6.861990975s ago: executing program 9 (id=1174): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) lseek(r1, 0x8, 0x1) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) socket$inet6(0xa, 0x1, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x393000) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[], 0xc8) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f03f, 0x6e}) socket$inet(0x2, 0x4, 0x1) r4 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000003c0)={r5, 0x5, 0x9}) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000100)={0x9, @pix_mp={0x2, 0x10001, 0xb5315241, 0x7, 0x1, [{0xf}, {0xffffffff, 0x7}, {0x81, 0xd16}, {0xf, 0x8a56}, {0x81, 0x9}, {0x0, 0x9}, {0x5, 0x7b}, {0x6, 0x1}], 0x6, 0x81, 0x1, 0x1, 0x6}}) syz_clone(0x20000, &(0x7f0000000100), 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)="5b4b6c50935292f1131209abab21139b36c9cdb4d1735d23dd0603c6d822ce3134e9668c1bc880741b523e9419e12309ff6d60f6bb07725d2a7e137cf443607adf694734ea10f2dfb05a9ef0d4aa94f82d6138aea729d1d36031424299d1739d588d7132c28154f6b4c78b4ce1d046cd91e717b4d793e694117db232e7191d32e1d53b961c34f86a0c3e026b5c5e81754273e5b01fd8ea522c654e7f3194c3") r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000005000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) epoll_create1(0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r7, 0x0, r8) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000080)) 6.729137503s ago: executing program 9 (id=1176): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x587080, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x4}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000900)='smaps\x00') r5 = userfaultfd(0x801) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x300}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x40080000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d02, 0x0, 0x9}]}) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000002c00070100000000fddbdf25017c000008000180020000001c000280180001"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) 1.433212005s ago: executing program 4 (id=1224): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000080)={'\x00', 0x400000, 0x2, 0x8}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x60, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xa0, 0x40, "b512b3880e60fe3f6b54c6b909007c9f70d0cfe9"}}]}, 0x150}}, 0x844) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x13}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1847e}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6e, 0x401, 0xffffffffffffffff, 0x401, 0x7}, 0x56}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x42) close(r6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x144, 0x10, 0x1, 0x70bd28, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x400, 0xfffffffffffffffc, 0x0, 0x9}, {0x2, 0x400801, 0x9, 0x2}, {0x1cb00000, 0x301, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@sa_dir={0x5, 0x21, 0x1}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x144}}, 0x44050) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r8, 0x42}, 0x80, &(0x7f0000000980)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}, 0x2000600d) syz_clone3(&(0x7f0000000000)={0x2a0a00300, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.227476765s ago: executing program 4 (id=1226): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1.227257882s ago: executing program 4 (id=1227): setns(0xc9, 0x0) r0 = socket$kcm(0x2, 0x200000000000003, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) r1 = socket(0x8, 0x5, 0x5) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400461f1, 0x0) setns(0xc9, 0x0) (async) socket$kcm(0x2, 0x200000000000003, 0x106) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) (async) socket(0x8, 0x5, 0x5) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400461f1, 0x0) (async) 1.134065085s ago: executing program 4 (id=1229): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x8082, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r2, 0x2) write(r0, &(0x7f0000000280)='0', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'veth1_virt_wifi\x00', @remote}) sendto$inet6(r0, &(0x7f00000003c0)="8ecf7ae10c9bfb85489b6a035fd9ed222cce71960e083661545ba61656ff382231b0095cad510d6f33bcd9cf2118583ea8b960d0ac900436a640c91f7d338bcb1ca010b77e32d2a1c331b9a11f9325277361d3e65a5f4625e26e085bd4b4fbd4f3658b8a5a8aa3795de6fdea5db115889f9d13ab972f242c772d92c23b7b4c0b10f5ef0974420988bb2935839ed7e7718bae99608f13", 0x96, 0x40, &(0x7f0000000480)={0xa, 0x4e22, 0x8, @loopback, 0x459}, 0x1c) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0xc480) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0xa, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x2, &(0x7f0000000340)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3ff}], &(0x7f00000004c0)='GPL\x00', 0x7, 0x45, &(0x7f0000000500)=""/69, 0x41100, 0x2, '\x00', r5, @fallback=0x2a, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x2, 0xe, 0x80, 0x10000}, 0x10, r6, 0xffffffffffffffff, 0x5, &(0x7f0000000640)=[r3, r0, r0, r3, r3], &(0x7f0000000680)=[{0x0, 0x4, 0x9, 0x9}, {0xfffffff8, 0x3, 0x7, 0x7}, {0x5, 0x1, 0xb, 0xb}, {0x5, 0x3, 0x9, 0xd}, {0x5, 0x4, 0xe, 0x1}], 0x10, 0x8001}, 0x94) r7 = accept4$inet(r0, &(0x7f0000000700)={0x2, 0x0, @multicast2}, &(0x7f0000000800)=0x10, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r7, 0x8070587c, &(0x7f00000008c0)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, r6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x36, 0x0, &(0x7f0000000380)="3d6ee2e04b91ab10143d9abe86dde5b21365c1ed1785bf79e0f3eb2dba93774cc6b23d0016dd6bd64414ce22c0f77c2158222ff96093", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.045049402s ago: executing program 8 (id=1233): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000540)={0x2, @vbi={0xb3, 0x7, 0x100, 0x494e4f4b, [0x4b6fb5c, 0x8], [0x3], 0x1}}) r1 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x6, 0x2) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) 941.947837ms ago: executing program 8 (id=1235): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@version_u}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000079104800000000007900300000000000950074000000000022187069f9fb6bdbca6359d81e8eecd7934bdcd758593c4e4ead4367ee3caad7a68421695cdba2a119ca79a0a9a842dbeba155bc249578ff037773a2813b594c769c354a802307ef4ea733072570de61c55077543278cb2f2ce50f80aa94017b5ba8805c"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048080}, 0x44010) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x0, 0x0}) 834.988052ms ago: executing program 8 (id=1237): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000880)={r0, &(0x7f0000000780)='compr=none\x00', 0x200, &(0x7f00000007c0)={@_ha_fsid={[0x7, 0x1]}, {0x3d, 0x7f, 0x9, 0xf0}}, 0x4c, &(0x7f0000000800), &(0x7f0000000840)=0x8}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000008c0), 0x802c0, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x2010, r2, 0x283be000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x70}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000300)={@remote, 0x0}, &(0x7f0000000340)=0x14) socket$unix(0x1, 0x5, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@enum={0xa, 0x2, 0x0, 0x6, 0x4, [{0x3, 0x7fffffff}, {0x5, 0x7}]}, @volatile={0x4, 0x0, 0x0, 0x9, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x4}]}, @ptr={0x4, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x2e, 0x30, 0x61, 0x0]}}, &(0x7f0000000400)=""/200, 0x66, 0xc8, 0x1, 0xd2}, 0x28) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x86b}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffff8}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @alu={0x2, 0x0, 0x5, 0x0, 0x8, 0x30}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x44, &(0x7f0000000280)=""/68, 0x40f00, 0x10, '\x00', r4, 0x0, r6, 0x8, &(0x7f0000000540)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000600)=[r7, r0, r0], &(0x7f0000000640)=[{0x4, 0x5, 0x6, 0xa}, {0x4, 0x1, 0xe, 0x9}, {0x4, 0x2, 0x3, 0x4}, {0x2, 0x2, 0x10, 0x5}, {0x0, 0x4, 0xe, 0x2}], 0x10, 0x4}, 0x94) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, &(0x7f0000000140)='compr=none\x00') 653.525374ms ago: executing program 8 (id=1239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000ff19d86ca7588886b7afe74a49bf5e5389cdcf727c25926b1ddde4b794a0", @ANYRES16=r1, @ANYBLOB="02002abd7000fbdbdf250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffedf, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000040)="a8fc7b04bd136c6034ef8b52a07de93f4aae2bb70f8def643940d786be6bbd390d220c500382eaa77810676321558e9227902a1ebf2592534974ec94b4c6be257070d6b540a1d33553433fe13a", 0x4d}], 0x1, 0x6, 0x200, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x28, r2, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000ff19d86ca7588886b7afe74a49bf5e5389cdcf727c25926b1ddde4b794a0", @ANYRES16=r1, @ANYBLOB="02002abd7000fbdbdf250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffedf, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) (async) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) (async) pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000040)="a8fc7b04bd136c6034ef8b52a07de93f4aae2bb70f8def643940d786be6bbd390d220c500382eaa77810676321558e9227902a1ebf2592534974ec94b4c6be257070d6b540a1d33553433fe13a", 0x4d}], 0x1, 0x6, 0x200, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x28, r2, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) 578.065439ms ago: executing program 7 (id=1240): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000040)={0x2a0a00300, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x57) 576.451837ms ago: executing program 8 (id=1241): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0x15) ioctl(r7, 0x404c4701, &(0x7f00000001c0)="0100000000000000000000000100000001000000010000000000000020000000200000000100000001") ioctl$SG_IO(0xffffffffffffffff, 0x2279, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000240)=0xf9) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000241)=0x3) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000242)=0x3f) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000280)=0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000244)=0x1c) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000245)=0xf9) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000000c0)=0x17, 0x4) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40801}, 0x0) 575.111511ms ago: executing program 7 (id=1242): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40800) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000240000000000000001f"], 0x14}}, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fd6000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) 308.863907ms ago: executing program 7 (id=1243): socket$inet_sctp(0x2, 0x4, 0x84) (async) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async, rerun: 64) r0 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) r1 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000680)={0x0, [[0xff7ffffe, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffffe, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x7, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x4}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) (async) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000580)={@my=0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000000000000a9bbc0222f7230e6f84abd8cc55032c5da4b31e1fc2430be2f0000000000000000"], 0x0, 0x1a, 0x0, 0x8}, 0x28) (async, rerun: 64) r4 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000040)) remap_file_pages(&(0x7f00003e3000/0x7000)=nil, 0x7000, 0x0, 0x4, 0x1000) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (rerun: 64) 308.180457ms ago: executing program 7 (id=1244): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000a00)={0x2020}, 0x2020) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000340)={[{0xdee4, 0x7, 0x4, 0x9, 0x8, 0x7, 0x80, 0x1d, 0x16, 0x0, 0xe, 0x1, 0xfffffffffffff028}, {0x80000001, 0x9, 0xd, 0x80, 0xa9, 0xe, 0xe2, 0x3, 0x40, 0x0, 0x2, 0x3, 0x1}, {0xe8ab, 0x9, 0x0, 0xbd, 0x8, 0xc, 0x6, 0x8, 0x2, 0x4b, 0x3, 0xf7, 0x6}], 0x800}) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x5, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffc69}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 191.087498ms ago: executing program 4 (id=1245): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x8000000, 0x0, 0xb, 0xd623, 0x0, 0x6}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x8000000, 0x0, 0xb, 0xd623, 0x0, 0x6}}) accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x0) 63.561941ms ago: executing program 7 (id=1246): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0xc00) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000200)={0x9, 0x3, 0xa, 0x8, 'syz1\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r2, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x10, 0x7, 0x1, 0x4, 0x3, 0x3e, 0xfffffff7, 0x1db, 0xfffffffffffffe42, 0x223, 0x2, 0x6, 0x38, 0x1, 0x74, 0x7, 0x104}, [{0x6474e551, 0x3, 0x8, 0x3, 0x8000000000006, 0xffffffff, 0xffffffff00000001, 0x7}]}, 0x78) close(r2) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000000)={0x8, 0x5, 0x9}) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000240)=[@iv={0x58, 0x117, 0x2, 0x3d, "96da538e9882c897a0e27848bfcea4db5c55758ec7fd663da9f6f3a39acd0f895490ab5366563cd4b09c7a000039998c48ddf3f63ba13b5b36bc043c2a"}, @iv={0x38, 0x117, 0x2, 0x20, "067166f02a1bddd05da663daea6dcf20b61acc04a02a8e492d29eeb0efc0fbf7b73062bebcc629894bf573caf06fc774458768438b713aae26ec5c68715f9006afa830a3753ec8a10000000000000000"}], 0x90, 0x10}], 0x0, 0x20000000) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000040)={0x18028900, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x7, {r4}}, 0x58) 63.029232ms ago: executing program 4 (id=1247): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, r3}, &(0x7f0000000600), &(0x7f0000000640)=r2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000a40)={'gre0\x00', 0x0, 0x1, 0x40, 0xfffffff9, 0x9, {{0x23, 0x4, 0x1, 0x36, 0x8c, 0x64, 0x0, 0x5, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, {[@timestamp={0x44, 0x20, 0x50, 0x0, 0x0, [0x2, 0x3, 0x5, 0x6, 0x2, 0x9417, 0x8]}, @rr={0x7, 0xb, 0x67, [@broadcast, @loopback]}, @timestamp_addr={0x44, 0x4c, 0x21, 0x1, 0x7, [{@loopback, 0xa}, {@broadcast, 0x2}, {@private=0xa010100, 0x2}, {@multicast1, 0x1000}, {@private=0xa010101, 0xe0}, {@rand_addr=0x64010101, 0x7}, {@rand_addr=0x64010102, 0xd869}, {@remote, 0x1bcf}, {@broadcast, 0xcc6}]}]}}}}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000c00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0x24004010) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$BTRFS_IOC_FS_INFO(r6, 0x8400941f, &(0x7f0000000640)) r9 = accept4(r7, 0x0, 0x0, 0x80000) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r9) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r9, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @multicast1, 0xc, 0x2}}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x4a, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, [0x2]}}) 308.453µs ago: executing program 7 (id=1248): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x102) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xcc, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0x4, 0xfffb, 0xa}, 0x55, [0x6, 0xd, 0x6ce, 0xed, 0x9, 0x400, 0xd8c, 0x5, 0x4452, 0x3e38, 0x407, 0x101, 0x0, 0xe662, 0xfffffffa, 0x6, 0x4, 0x7fff, 0x5, 0xb0, 0xfffffffe, 0xd07, 0x0, 0x9, 0x6, 0x8, 0x6, 0x6, 0x6, 0x80000000, 0x0, 0x4, 0xfff, 0x1, 0x79, 0x80000000, 0x8, 0x2, 0x7, 0x8, 0x1, 0xd, 0x401, 0x4, 0x1, 0x1, 0xff, 0x2, 0x101, 0x5c, 0x1, 0x1000000, 0x6, 0x7f, 0x6, 0x49758c69, 0x5, 0xca2, 0x3, 0x7, 0x82e, 0x40000000, 0x1, 0xff6d], [0xfffffffb, 0x85, 0x437d, 0x68, 0x0, 0x5, 0x40, 0x2, 0xfffffffd, 0x7f, 0x5, 0x8f44, 0x6, 0x3aa, 0x7, 0x0, 0x10, 0x1, 0xc, 0x1, 0x7, 0x5, 0x4, 0xfffffffc, 0x8001, 0x6, 0x6, 0x2, 0x8, 0x80000000, 0xd, 0x1, 0x9, 0x3, 0x8171, 0x1, 0xcf34, 0xc9c, 0x1, 0x316c0eca, 0x8, 0x1, 0x5eb7981f, 0x8, 0xb, 0x8, 0x5, 0x0, 0xfffffe00, 0xffff8001, 0x8000, 0x7f, 0x40, 0x9, 0x8, 0x2, 0x3, 0x40ba, 0x7, 0x2, 0x8914, 0x3, 0x2, 0x35c3], [0x57b, 0xfffff000, 0x8001, 0x80000001, 0x9, 0xc, 0x6, 0x9dba, 0xc2e, 0x6, 0x1, 0x2, 0x5, 0x723fffb6, 0x6, 0x80000000, 0x1e3, 0xff, 0x5, 0x4, 0x10000, 0x25, 0x81, 0x9, 0x7, 0x7b, 0xd, 0x9, 0x3, 0x7ad, 0x4, 0x8, 0x40, 0x6, 0x7fff, 0x7, 0xffffe1be, 0x80000001, 0x31, 0x7, 0x7f, 0x10001, 0x2, 0x8, 0x1bf, 0x6, 0x0, 0x1, 0x80000000, 0x7, 0x2, 0x7f, 0x38, 0x7, 0x1, 0x8001, 0x10000, 0xf, 0x1, 0xc57f, 0xfffffff8, 0x6, 0x6, 0x5], [0x3f, 0x4, 0x6, 0x301, 0x8, 0x2, 0x3, 0x9af00000, 0xf2, 0x4, 0x10, 0x4, 0x101, 0xfffffff9, 0x89, 0x3, 0x0, 0x0, 0x5d0, 0x1, 0xa6, 0x5, 0x1e1e2a0c, 0x7, 0xfffffffb, 0x6, 0x6, 0x400, 0x10001, 0x10000, 0x4, 0x7fff, 0xff, 0xe, 0xfffff517, 0x0, 0x457, 0xda, 0x1, 0x400, 0x5, 0x7, 0x8, 0x40, 0x8, 0x3, 0xffff, 0xc526, 0x0, 0x9, 0x7, 0x6, 0x7fff, 0x7ced, 0x7, 0x9, 0x6, 0x1, 0x36, 0xfff, 0x4, 0x1, 0x101, 0x3]}, 0x45c) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x6, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000005c0)={&(0x7f0000000580)=[{0x5, 0x0, 0x7, &(0x7f0000000180)="dc4aff8cac57bf"}, {0x9, 0x3000, 0xb3, &(0x7f0000000300)="fff9ad0fdab9246b4db9c343a97f95a771e34ac93ad33cd0ada6758ff8be158f04b9cc1c75df9311971774e0447692aa222633e416013d2e6fd80c11117bc6ed9924af656649e51ba5a93e24de9e765385c4a5da9954c007d929fb620d676c33bef358e9890066ab37fc37f739c426a116e723525973f484474f177cb388628d6d92051ece90a00f91a095771e7c11cf6e76022fef2b6d5cd0bd999a58f0297db6d8a7a4891c4fbccc42f959c31ba5745d2c43"}, {0x2, 0x1400, 0x8a, &(0x7f00000003c0)="96a6b377cd902e7c35c9e2a8bc9c78ae47d444932d7152752ef11d2391481d5a74e4e0a5e7be1d101916e57a8fef4e76aba2e284871d94541dad29ca26ec28db08c44f7ef6330ab4d08a79f9a3fbcbcfe91c711ce0fc34ba931f53f961335d90e8a5cff15407401438f27e38f0688fafff76fbfe2c16005fa2e3f3a276fe65ae10e90f8e7676a428ac73"}, {0xf, 0x0, 0x81, &(0x7f00000004c0)="f08a6a4e3a24c6be59e79f14b5da3484cc00ce5e7376b187805cb72fc10215ceab18411524a2dcee8fc594852e2986cae89959546fababd35f898617775a3fa2ebfc20ecb2b5265b3095169ef5427aef6c35b8c86fa3f959ce93d6d47847b667d967ea1330778858e3180bd1919d711044ab7d1d1f41fbb2cfd33b662ddacecade"}], 0x4}) r2 = open$dir(&(0x7f0000000000)='./bus\x00', 0x200000, 0xe2) r3 = syz_open_dev$radio(&(0x7f0000000800), 0x0, 0x2) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000840)=0x8) mkdirat(r2, &(0x7f0000000040)='./file1\x00', 0xa4) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf250a400000", @ANYRES32=r6, @ANYBLOB="1400020000000000e10000000000ffff0000000008000800090300"], 0x34}}, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r4]) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', 's}z', 0x20, 0xfcd}, 0x2f, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) 0s ago: executing program 8 (id=1249): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x70000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000140)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x234045, 0x0) ftruncate(r3, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='1\n', 0x2) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='./file0\n', 0x8) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='1\n', 0x2) close(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) kernel console output (not intermixed with test programs): n invalid length. [ 124.536958][ T8441] team0: Port device dummy0 added [ 125.096120][ T8480] 9pnet_virtio: no channels available for device syz [ 125.336257][ T3267] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 125.507207][ T3267] usb 9-1: Using ep0 maxpacket: 8 [ 125.509991][ T3267] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 125.514920][ T3267] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.520841][ T3267] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.525563][ T3267] usb 9-1: config 0 interface 0 has no altsetting 0 [ 125.529729][ T3267] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.538493][ T3267] usb 9-1: config 0 descriptor?? [ 125.993954][ T3267] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 125.996382][ T3267] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 125.998963][ T3267] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 126.001174][ T3267] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 126.003420][ T3267] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 126.006008][ T3267] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 126.057957][ T8500] netlink: 'syz.0.680': attribute type 29 has an invalid length. [ 126.060423][ T8500] netlink: 'syz.0.680': attribute type 3 has an invalid length. [ 126.063977][ T8500] netlink: 76 bytes leftover after parsing attributes in process `syz.0.680'. [ 126.238724][ T5725] usb 9-1: USB disconnect, device number 11 [ 127.560162][ T8532] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 127.809784][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 128.457908][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 128.515279][ T8600] netlink: 156 bytes leftover after parsing attributes in process `syz.4.705'. [ 128.562752][ T8602] bridge_slave_1: left allmulticast mode [ 128.565946][ T8602] bridge_slave_1: left promiscuous mode [ 128.570170][ T8602] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.590043][ T8602] bridge_slave_0: left allmulticast mode [ 128.591959][ T8602] bridge_slave_0: left promiscuous mode [ 128.593995][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.480473][ T42] kauditd_printk_skb: 98 callbacks suppressed [ 129.480487][ T42] audit: type=1800 audit(1787050933.112:1860): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 129.515551][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.708'. [ 129.573073][ T42] audit: type=1800 audit(1787050933.196:1861): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 129.608862][ T42] audit: type=1800 audit(1787050933.233:1862): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156160 res=0 errno=0 [ 129.635827][ T42] audit: type=1800 audit(1787050933.261:1863): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156171 res=0 errno=0 [ 129.653670][ T5729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.670613][ T5729] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.677519][ T5729] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.690824][ T5729] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.694810][ T5729] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.717073][ T42] audit: type=1800 audit(1787050933.327:1864): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156190 res=0 errno=0 [ 129.724189][ T42] audit: type=1800 audit(1787050933.336:1865): pid=7198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156201 res=0 errno=0 [ 129.747342][ T42] audit: type=1800 audit(1787050933.364:1866): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 129.863190][ T8615] lo speed is unknown, defaulting to 1000 [ 129.878011][ T8628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.711'. [ 129.881387][ T8628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.711'. [ 129.884780][ T8628] cgroup: noprefix used incorrectly [ 129.944545][ T8615] xfrm0 speed is unknown, defaulting to 1000 [ 130.100609][ T8615] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.103788][ T8615] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.106963][ T8615] bridge_slave_0: entered allmulticast mode [ 130.110745][ T8615] bridge_slave_0: entered promiscuous mode [ 130.115729][ T8615] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.119261][ T8615] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.122348][ T8615] bridge_slave_1: entered allmulticast mode [ 130.126328][ T8615] bridge_slave_1: entered promiscuous mode [ 130.164379][ T8615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.174837][ T8615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.201512][ T8615] team0: Port device team_slave_0 added [ 130.207016][ T8615] team0: Port device team_slave_1 added [ 130.251564][ T5598] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.256258][ T5598] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.284178][ T8615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.286503][ T8615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.297287][ T8615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.303671][ T8615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.307900][ T8615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.317368][ T8615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.342281][ T8615] hsr_slave_0: entered promiscuous mode [ 130.345497][ T8615] hsr_slave_1: entered promiscuous mode [ 130.376235][ T5598] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.380663][ T5598] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.441460][ T42] audit: type=1800 audit(1787050934.010:1867): pid=8615 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27649 res=0 errno=0 [ 130.455020][ T42] audit: type=1800 audit(1787050934.010:1868): pid=8615 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27648 res=0 errno=0 [ 130.461862][ T42] audit: type=1800 audit(1787050934.010:1869): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164918 res=0 errno=0 [ 130.469558][ T5598] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.472847][ T5598] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.522654][ T8615] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 130.530267][ T8615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 130.533078][ T8615] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 130.537061][ T8615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 130.539827][ T8615] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 130.544910][ T8615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 130.547668][ T8615] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 130.551920][ T8615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 130.560640][ T5598] bridge0: port 3(netdevsim0) entered disabled state [ 130.574329][ T5598] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 130.578353][ T5598] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 130.582312][ T5598] bridge0: port 3(netdevsim0) entered disabled state [ 130.589500][ T5598] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.592767][ T5598] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.613436][ T8615] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.616297][ T8615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.619228][ T8615] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.621904][ T8615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.749430][ T8615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.780287][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.785280][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.799898][ T5598] bridge_slave_1: left allmulticast mode [ 130.803186][ T5598] bridge_slave_1: left promiscuous mode [ 130.811624][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.823449][ T5087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.832550][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.833984][ T5598] bridge_slave_0: left allmulticast mode [ 130.838019][ T5598] bridge_slave_0: left promiscuous mode [ 130.840065][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.840170][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.849261][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.865067][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.009139][ T60] smbdirect: ib_dev[syz1] removed [ 131.050127][ T5598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.058195][ T5598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.062371][ T5598] bond0 (unregistering): Released all slaves [ 131.067421][ T5598] bond1 (unregistering): Released all slaves [ 131.094557][ T3267] xfrm0 speed is unknown, defaulting to 1000 [ 131.098891][ T3267] infiniband syz1: ib_query_port failed (-19) [ 131.101738][ T8615] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.115792][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.118976][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.133653][ T8043] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.136824][ T8043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.231988][ T5087] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 131.357258][ T8647] lo speed is unknown, defaulting to 1000 [ 131.437015][ T5440] 8021q: adding VLAN 0 to HW filter on device eth6 [ 131.607867][ T8615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.625668][ T5440] 8021q: adding VLAN 0 to HW filter on device eth7 [ 131.738775][ T8647] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.741914][ T8647] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.744989][ T8647] bridge_slave_0: entered allmulticast mode [ 131.761458][ T8647] bridge_slave_0: entered promiscuous mode [ 131.777161][ T8647] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.780050][ T8647] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.783330][ T8647] bridge_slave_1: entered allmulticast mode [ 131.793016][ T8647] bridge_slave_1: entered promiscuous mode [ 131.844150][ T5087] Bluetooth: hci0: command tx timeout [ 131.861915][ T5598] hsr_slave_0: left promiscuous mode [ 131.865146][ T5598] hsr_slave_1: left promiscuous mode [ 131.870294][ T5598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.873676][ T5598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.886096][ T5598] veth1_macvtap: left promiscuous mode [ 131.889406][ T5598] veth0_macvtap: left promiscuous mode [ 131.891859][ T5598] veth1_vlan: left promiscuous mode [ 131.894102][ T5598] veth0_vlan: left promiscuous mode [ 131.916732][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.718'. [ 132.060239][ T5598] team0 (unregistering): Port device team_slave_1 removed [ 132.067450][ T5598] team0 (unregistering): Port device team_slave_0 removed [ 132.158594][ T8647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.164189][ T8647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.168603][ T5440] 8021q: adding VLAN 0 to HW filter on device eth8 [ 132.184031][ T8709] bond2: Invalid ad_actor_system MAC address. [ 132.186376][ T8709] bond2: option ad_actor_system: invalid value (65541) [ 132.189744][ T8709] bond2 (unregistering): Released all slaves [ 132.236633][ T8647] team0: Port device team_slave_0 added [ 132.241094][ T8647] team0: Port device team_slave_1 added [ 132.305425][ T8647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.308441][ T8647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.317085][ T8647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.330117][ T8647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.332365][ T8647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.340794][ T8647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.381652][ T8615] veth0_vlan: entered promiscuous mode [ 132.403151][ T8615] veth1_vlan: entered promiscuous mode [ 132.443799][ T8647] hsr_slave_0: entered promiscuous mode [ 132.448376][ T8647] hsr_slave_1: entered promiscuous mode [ 132.451240][ T8647] debugfs: 'hsr0' already exists in 'hsr' [ 132.453554][ T8647] Cannot create hsr debugfs directory [ 132.499705][ T8615] veth0_macvtap: entered promiscuous mode [ 132.504033][ T5440] 8021q: adding VLAN 0 to HW filter on device eth9 [ 132.517714][ T8615] veth1_macvtap: entered promiscuous mode [ 132.556229][ T8615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.575586][ T8615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.598250][ T6836] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.722642][ T8036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.725964][ T8036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.732252][ T6836] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.735115][ T6836] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.746808][ T8647] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 132.752861][ T8647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 132.756673][ T8647] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 132.761699][ T8647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 132.764537][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.764565][ T8647] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 132.767164][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.773440][ T8647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 132.777480][ T8647] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 132.781297][ T8647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 132.809858][ T6836] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.833378][ T8647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.849968][ T8647] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.863133][ T8043] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.865635][ T8043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.886739][ T8738] bond0: option slaves: invalid value (-veth0) [ 132.894350][ T8043] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.894446][ T8043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.939240][ T8647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.942988][ T8733] netlink: 36 bytes leftover after parsing attributes in process `syz.4.720'. [ 132.994838][ T8746] lo speed is unknown, defaulting to 1000 [ 133.126477][ T5087] Bluetooth: hci3: command tx timeout [ 133.167862][ T8766] dns_resolver: Unsupported server list version (0) [ 133.209347][ T8647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.210471][ T8771] Bluetooth: MGMT ver 1.23 [ 133.294482][ T8782] netlink: 'syz.0.727': attribute type 12 has an invalid length. [ 133.413667][ T8746] netlink: 24 bytes leftover after parsing attributes in process `syz.5.721'. [ 133.473765][ T8798] netlink: 24 bytes leftover after parsing attributes in process `syz.5.721'. [ 133.536538][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 133.547099][ T8647] veth0_vlan: entered promiscuous mode [ 133.556104][ T8647] veth1_vlan: entered promiscuous mode [ 133.584046][ T8647] veth0_macvtap: entered promiscuous mode [ 133.595395][ T8647] veth1_macvtap: entered promiscuous mode [ 133.610460][ T8647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.616379][ T8647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.649374][ T8808] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.650103][ T5598] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.706476][ T5440] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.740142][ T8043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.744230][ T8043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.767886][ T5598] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.770778][ T5598] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.778826][ T8047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.782110][ T8047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.790278][ T5598] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.065745][ T8848] binder_alloc: binder_alloc_mmap_handler: 8847 200000ffd000-200001000000 already mapped failed -16 [ 134.066645][ T5087] Bluetooth: hci0: command tx timeout [ 134.074687][ T8848] binder_alloc: binder_alloc_mmap_handler: 8847 200000ffd000-200001000000 already mapped failed -16 [ 134.084231][ T8848] binder_alloc: binder_alloc_mmap_handler: 8847 200000ffd000-200001000000 already mapped failed -16 [ 134.087863][ T8848] binder_alloc: binder_alloc_mmap_handler: 8847 200000ffd000-200001000000 already mapped failed -16 [ 134.091490][ T8848] binder_alloc: binder_alloc_mmap_handler: 8847 200000ffd000-200001000000 already mapped failed -16 [ 134.095197][ T8848] binder_alloc: binder_alloc_mmap_handler: 8847 200000ffd000-200001000000 already mapped failed -16 [ 134.099015][ T8848] binder_alloc: binder_alloc_mmap_handler: 8847 200000ffd000-200001000000 already mapped failed -16 [ 134.102649][ T8848] binder_alloc: binder_alloc_mmap_handler: 8847 200000ffd000-200001000000 already mapped failed -16 [ 134.108804][ T8848] binder_alloc: binder_alloc_mmap_handler: 8847 200000ffd000-200001000000 already mapped failed -16 [ 134.116527][ T8848] binder_alloc: binder_alloc_mmap_handler: 8847 200000ffd000-200001000000 already mapped failed -16 [ 134.591703][ T8874] nbd: socks must be embedded in a SOCK_ITEM attr [ 134.665391][ T3267] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 134.777055][ T8885] syzkaller1: entered promiscuous mode [ 134.778909][ T8885] syzkaller1: entered allmulticast mode [ 134.837363][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.839474][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.839855][ T3267] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 134.845289][ T3267] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.848533][ T3267] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.855873][ T3267] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.858578][ T3267] usb 10-1: Product: syz [ 134.859900][ T3267] usb 10-1: Manufacturer: syz [ 134.861856][ T3267] usb 10-1: SerialNumber: syz [ 134.866531][ T3267] usb 10-1: config 0 descriptor?? [ 134.869538][ T42] kauditd_printk_skb: 107 callbacks suppressed [ 134.869560][ T42] audit: type=1800 audit(1787050938.156:1977): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179839 res=0 errno=0 [ 134.878568][ T42] audit: type=1800 audit(1787050938.156:1978): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=179871 res=0 errno=0 [ 134.886529][ T42] audit: type=1800 audit(1787050938.156:1979): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=179846 res=0 errno=0 [ 134.892850][ T42] audit: type=1800 audit(1787050938.156:1980): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=179847 res=0 errno=0 [ 134.911782][ T8888] syzkaller1: entered promiscuous mode [ 134.913480][ T8888] syzkaller1: entered allmulticast mode [ 134.917012][ T8888] netlink: 'syz.4.753': attribute type 9 has an invalid length. [ 135.049734][ T61] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 135.156479][ T42] audit: type=1800 audit(1787050938.418:1981): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=179868 res=0 errno=0 [ 135.157719][ T3267] usb 10-1: USB disconnect, device number 2 [ 135.163956][ T42] audit: type=1800 audit(1787050938.427:1982): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=179869 res=0 errno=0 [ 135.172741][ T42] audit: type=1800 audit(1787050938.427:1983): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=179848 res=0 errno=0 [ 135.180127][ T42] audit: type=1800 audit(1787050938.427:1984): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=179870 res=0 errno=0 [ 135.194099][ T42] audit: type=1800 audit(1787050938.427:1985): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179891 res=0 errno=0 [ 135.204272][ T42] audit: type=1800 audit(1787050938.427:1986): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180003 res=0 errno=0 [ 135.232726][ T61] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 135.236631][ T61] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.240298][ T61] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 135.245059][ T61] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.249042][ T61] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 135.251630][ T61] usb 5-1: Product: syz [ 135.255605][ T61] usb 5-1: Manufacturer: syz [ 135.257878][ T61] usb 5-1: SerialNumber: syz [ 135.266849][ T61] usb 5-1: config 0 descriptor?? [ 135.273034][ T61] usb 5-1: selecting invalid altsetting 0 [ 135.360877][ T5087] Bluetooth: hci3: command tx timeout [ 135.489982][ T24] usb 5-1: USB disconnect, device number 10 [ 135.732342][ T8899] netlink: 7 bytes leftover after parsing attributes in process `syz.6.757'. [ 135.760201][ T8901] binder: 8896:8901 ioctl c0306201 200000000080 returned -14 [ 135.764120][ T8901] binder: 8896:8901 ioctl c0306201 2000000003c0 returned -14 [ 135.767744][ T8901] netlink: 36 bytes leftover after parsing attributes in process `syz.5.756'. [ 135.779239][ T8903] overlayfs: statfs failed on './file0' [ 135.909332][ T8905] bond3: option downdelay: invalid value (18446744073709551615) [ 135.912318][ T8905] bond3: option downdelay: allowed values 0 - 2147483647 [ 135.919716][ T8905] bond3 (unregistering): Released all slaves [ 136.074405][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 136.185656][ T8912] batadv0: Caught tx_queue_len zero misconfig [ 136.219226][ T8912] netlink: 'syz.0.762': attribute type 30 has an invalid length. [ 136.227961][ T8914] nvme_fabrics: missing parameter 'traddr=%s' [ 136.253558][ T8912] bond2: option arp_missed_max: invalid value (0) [ 136.256260][ T8912] bond2: option arp_missed_max: allowed values 1 - 255 [ 136.260475][ T8912] bond2 (unregistering): Released all slaves [ 136.300551][ T5087] Bluetooth: hci0: command tx timeout [ 136.352003][ T8928] input: syz1 as /devices/virtual/input/input19 [ 136.512782][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.626245][ T8950] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.773'. [ 136.636208][ T8950] netlink: 24 bytes leftover after parsing attributes in process `syz.6.773'. [ 136.691030][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.787288][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.890128][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.946864][ T8966] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8966 comm=syz.4.779 [ 136.953899][ T8966] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8966 comm=syz.4.779 [ 137.037448][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 137.066371][ T8971] syzkaller0: entered promiscuous mode [ 137.068537][ T8971] syzkaller0: entered allmulticast mode [ 137.128985][ T8980] support for the xor transformation has been removed. [ 137.133280][ T8980] support for the xor transformation has been removed. [ 137.237342][ T24] usb 10-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 137.243451][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 137.247585][ T24] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 137.255246][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.258604][ T24] usb 10-1: Product: syz [ 137.260417][ T24] usb 10-1: Manufacturer: syz [ 137.266633][ T24] usb 10-1: SerialNumber: syz [ 137.521187][ T24] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 137.571701][ T5087] Bluetooth: hci3: command tx timeout [ 137.672248][ T8999] netlink: 104 bytes leftover after parsing attributes in process `syz.6.789'. [ 137.796972][ C2] usblp0: nonzero read bulk status received: -71 [ 137.797197][ T5805] usb 10-1: USB disconnect, device number 3 [ 137.799129][ T8962] usblp0: error -71 reading from printer [ 138.277069][ T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 138.445271][ T24] usb 10-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 138.449394][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 138.452381][ T24] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 138.467910][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.470508][ T24] usb 10-1: Product: syz [ 138.471846][ T24] usb 10-1: Manufacturer: syz [ 138.473284][ T24] usb 10-1: SerialNumber: syz [ 138.514679][ T5087] Bluetooth: hci0: command tx timeout [ 138.692646][ T8959] usblp0: removed [ 138.709805][ T24] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 138.718328][ T24] usb 10-1: USB disconnect, device number 4 [ 138.749172][ T24] usblp0: removed [ 139.023646][ T5440] 8021q: adding VLAN 0 to HW filter on device eth10 [ 139.057460][ T9019] tipc: Enabling of bearer rejected, failed to enable media [ 139.202690][ T9031] MTD: Couldn't look up './file0': -15 [ 139.258910][ T13] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 139.261956][ T13] bond0 (unregistering): (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 139.289310][ T13] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 139.296759][ T9032] retu-mfd 0-0001: could not read Retu revision: -6 [ 139.300320][ T13] bond0 (unregistering): Released all slaves [ 139.306347][ T9032] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 139.320853][ T13] bond1 (unregistering): Released all slaves [ 139.334849][ T5805] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 139.497091][ T5805] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 139.501239][ T5805] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 139.503966][ T5805] usb 5-1: config 0 has no interface number 0 [ 139.507533][ T5805] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 139.512209][ T5805] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 139.525269][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.529748][ T5805] usb 5-1: Product: syz [ 139.537057][ T5805] usb 5-1: Manufacturer: syz [ 139.539586][ T5805] usb 5-1: SerialNumber: syz [ 139.552040][ T5805] usb 5-1: config 0 descriptor?? [ 139.566550][ T9027] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 139.597067][ T5805] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 139.628868][ T5440] 8021q: adding VLAN 0 to HW filter on device eth11 [ 139.766628][ T9066] syzkaller0: entered promiscuous mode [ 139.768812][ T9066] syzkaller0: entered allmulticast mode [ 139.797792][ T9027] raw_sendmsg: syz.0.794 forgot to set AF_INET. Fix it! [ 139.807554][ T5805] usb 5-1: USB disconnect, device number 11 [ 139.810098][ T5087] Bluetooth: hci3: command tx timeout [ 139.817100][ T5805] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 139.894828][ T5440] 8021q: adding VLAN 0 to HW filter on device eth12 [ 139.942808][ T13] hsr_slave_0: left promiscuous mode [ 139.945483][ T13] hsr_slave_1: left promiscuous mode [ 139.952889][ T13] veth1_macvtap: left promiscuous mode [ 139.955570][ T13] veth0_macvtap: left promiscuous mode [ 139.958542][ T13] veth1_vlan: left promiscuous mode [ 139.960140][ T13] veth0_vlan: left promiscuous mode [ 139.978567][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.808'. [ 140.010586][ T5725] SELinux: failure in sel_netif_sid_slow(), invalid network interface (51) [ 140.052008][ T5806] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 140.192916][ T13] team0 (unregistering): Port device wg2 removed [ 140.235238][ T5806] usb 10-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 140.239638][ T5806] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 140.246238][ T5806] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 140.250953][ T5806] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.258871][ T5440] 8021q: adding VLAN 0 to HW filter on device eth13 [ 140.259818][ T42] kauditd_printk_skb: 171 callbacks suppressed [ 140.259845][ T42] audit: type=1800 audit(1787050943.200:2158): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=182451 res=0 errno=0 [ 140.263369][ T5806] usb 10-1: USB2VGA dongle found at address 5 [ 140.271868][ T42] audit: type=1800 audit(1787050943.209:2159): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=182480 res=0 errno=0 [ 140.275676][ T5806] usb 10-1: Allocated 8 output buffers [ 140.284167][ T42] audit: type=1800 audit(1787050943.209:2160): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=182458 res=0 errno=0 [ 140.292764][ T42] audit: type=1800 audit(1787050943.209:2161): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=182459 res=0 errno=0 [ 140.301394][ T42] audit: type=1800 audit(1787050943.218:2162): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=182460 res=0 errno=0 [ 140.311866][ T42] audit: type=1800 audit(1787050943.218:2163): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=182500 res=0 errno=0 [ 140.331646][ T42] audit: type=1800 audit(1787050943.218:2164): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=182519 res=0 errno=0 [ 140.393142][ T42] audit: type=1800 audit(1787050943.321:2165): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 140.428350][ T42] audit: type=1800 audit(1787050943.359:2166): pid=9095 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.809" name="nx_huge_pages" dev="sysfs" ino=57277 res=0 errno=0 [ 140.444824][ T42] audit: type=1804 audit(1787050943.368:2167): pid=9095 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.809" name="/newroot/268/tracing/uprobe_events" dev="tracefs" ino=3095 res=1 errno=0 [ 140.723449][ T9112] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 140.830717][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 140.844746][ T9128] openvswitch: netlink: Key type 15878 is out of range max 32 [ 141.138211][ T9159] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 141.141973][ T9164] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 141.198560][ T9164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9164 comm=syz.4.824 [ 141.251181][ T9172] netlink: 'syz.5.827': attribute type 1 has an invalid length. [ 141.253451][ T9172] netlink: 224 bytes leftover after parsing attributes in process `syz.5.827'. [ 141.300951][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.825'. [ 141.461557][ T9183] bridge1: entered promiscuous mode [ 141.463641][ T9183] bridge1: entered allmulticast mode [ 141.780141][ T9193] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 141.785490][ T61] IPVS: starting estimator thread 0... [ 141.890284][ T9194] IPVS: using max 48 ests per chain, 115200 per kthread [ 141.947257][ T9198] nvme nvme0: rdma connection establishment failed (-104) [ 142.366617][ T65] block nbd0: Receive control failed (result -32) [ 142.376594][ T9237] gadgetfs: bound to dummy_udc driver [ 142.386034][ T9237] netlink: 32 bytes leftover after parsing attributes in process `syz.4.841'. [ 142.390010][ T9237] netlink: 32 bytes leftover after parsing attributes in process `syz.4.841'. [ 142.599651][ T9258] netlink: 108 bytes leftover after parsing attributes in process `syz.6.848'. [ 142.626378][ T5826] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 142.629828][ C3] gadgetfs: connected [ 142.631784][ T5826] gadgetfs: disconnected [ 142.760852][ T9265] syzkaller0: entered promiscuous mode [ 142.764726][ T9265] syzkaller0: entered allmulticast mode [ 142.790586][ C3] gadgetfs: connected [ 142.792038][ T5826] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 142.796814][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.805576][ C3] gadgetfs: configuration #1 [ 142.812900][ T5826] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input21 [ 142.858951][ C1] usbtouchscreen 5-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 142.882268][ C1] usbtouchscreen 5-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 143.176548][ T9229] gadgetfs: suspended from state 3 [ 143.179437][ T9229] gadgetfs: disconnected [ 143.183854][ T10] usb 5-1: USB disconnect, device number 12 [ 143.257523][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.861'. [ 143.514751][ T9305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9305 comm=syz.4.865 [ 144.035323][ T9314] CIFS: Unable to determine destination address [ 144.154476][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 144.438858][ T9351] dvmrp1: entered allmulticast mode [ 144.592588][ T24] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 144.786044][ T24] usb 11-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 144.792023][ T24] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 144.795019][ T24] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 144.806689][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.985184][ T9379] serio: Serial port ptm0 [ 145.096937][ T5732] usb 11-1: USB disconnect, device number 2 [ 145.122447][ T9387] bridge0: port 3(netdevsim0) entered blocking state [ 145.124627][ T9387] bridge0: port 3(netdevsim0) entered disabled state [ 145.140377][ T9387] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 145.157935][ T9387] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 145.173887][ T9390] No source specified [ 145.231711][ T9387] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 145.361293][ T9406] netlink: 28 bytes leftover after parsing attributes in process `syz.6.884'. [ 145.609419][ T42] kauditd_printk_skb: 136 callbacks suppressed [ 145.609440][ T42] audit: type=1800 audit(1787050948.206:2304): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 145.642228][ T42] audit: type=1800 audit(1787050948.234:2305): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 145.661903][ T42] audit: type=1800 audit(1787050948.253:2306): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 145.680128][ T42] audit: type=1800 audit(1787050948.272:2307): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 145.701176][ T9438] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 145.705407][ T9438] CIFS mount error: No usable UNC path provided in device string! [ 145.705407][ T9438] [ 145.705955][ T42] audit: type=1800 audit(1787050948.300:2308): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 145.711211][ T9438] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 145.728647][ T9438] sock: sock_timestamping_bind_phc: sock not bind to device [ 145.732050][ T42] audit: type=1800 audit(1787050948.318:2309): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 145.746886][ T9441] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.892'. [ 145.752437][ T9433] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.892'. [ 145.794477][ T9443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5121 sclass=netlink_route_socket pid=9443 comm=syz.4.895 [ 145.846611][ T42] audit: type=1800 audit(1787050948.421:2310): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 145.881198][ T42] audit: type=1800 audit(1787050948.459:2311): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 145.902311][ T42] audit: type=1800 audit(1787050948.478:2312): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 145.931997][ T42] audit: type=1800 audit(1787050948.496:2313): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 145.978959][ T9462] sctp: [Deprecated]: syz.4.899 (pid 9462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.978959][ T9462] Use struct sctp_sack_info instead [ 146.121988][ T9471] erspan0: entered promiscuous mode [ 146.125814][ T9471] erspan0: entered allmulticast mode [ 146.133356][ T9471] netlink: 'syz.6.903': attribute type 1 has an invalid length. [ 146.326178][ T9489] lo speed is unknown, defaulting to 1000 [ 146.617459][ T9489] gfs2: gfs2 mount does not exist [ 146.651721][ T9498] Process accounting resumed [ 146.671954][ T9503] __nla_validate_parse: 2 callbacks suppressed [ 146.671968][ T9503] netlink: 44 bytes leftover after parsing attributes in process `syz.4.912'. [ 151.911464][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 151.911483][ T42] audit: type=1400 audit(1787050954.102:2346): avc: denied { write } for pid=9519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.969734][ T42] audit: type=1400 audit(1787050954.158:2347): avc: denied { write } for pid=9522 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.049472][ T42] audit: type=1400 audit(1787050954.233:2348): avc: denied { write } for pid=9525 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.113599][ T42] audit: type=1400 audit(1787050954.289:2349): avc: denied { write } for pid=9528 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.216258][ T42] audit: type=1400 audit(1787050955.318:2350): avc: denied { write } for pid=9531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.269141][ T42] audit: type=1400 audit(1787050955.374:2351): avc: denied { write } for pid=9534 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.360784][ T42] audit: type=1400 audit(1787050955.459:2352): avc: denied { write } for pid=9537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.415384][ T42] audit: type=1400 audit(1787050955.505:2353): avc: denied { write } for pid=9540 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.877954][ T42] audit: type=1800 audit(1787050968.111:2354): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 166.886935][ T42] audit: type=1800 audit(1787050968.120:2355): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 166.896186][ T9563] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 166.932555][ T9573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.917'. [ 166.943464][ T42] audit: type=1400 audit(1787050968.167:2356): avc: denied { bind } for pid=9574 comm="syz.5.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 166.956226][ T42] audit: type=1400 audit(1787050968.176:2357): avc: denied { listen } for pid=9574 comm="syz.5.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 166.977693][ T42] audit: type=1800 audit(1787050968.204:2358): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 166.982712][ T9580] fuse: blksize only supported for fuseblk [ 167.007351][ T42] audit: type=1800 audit(1787050968.232:2359): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 167.022803][ T42] audit: type=1800 audit(1787050968.242:2360): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 167.040988][ T42] audit: type=1800 audit(1787050968.260:2361): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 167.045188][ T9584] syz.0.926 (9584): drop_caches: 0 [ 167.050005][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.926'. [ 167.051929][ T9582] bridge2: entered promiscuous mode [ 167.097624][ T42] audit: type=1400 audit(1787050968.307:2362): avc: denied { write } for pid=9587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.113215][ T42] audit: type=1800 audit(1787050968.316:2363): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 167.171423][ T9592] syz.4.928 (9592) used obsolete PPPIOCDETACH ioctl [ 167.233250][ T9582] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 167.237033][ T9582] Cannot find add_set index 0 as target [ 167.289613][ T9200] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 167.328484][ T9603] syzkaller1: entered promiscuous mode [ 167.330702][ T9603] syzkaller1: entered allmulticast mode [ 167.442219][ T9617] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 167.446087][ T9617] netlink: 36 bytes leftover after parsing attributes in process `syz.4.932'. [ 167.450417][ T9200] usb 11-1: Using ep0 maxpacket: 32 [ 167.453263][ T9619] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 167.459324][ T9200] usb 11-1: unable to get BOS descriptor or descriptor too short [ 167.465786][ T9200] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 167.472706][ T9200] usb 11-1: string descriptor 0 read error: -22 [ 167.474789][ T9200] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.483221][ T9200] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 167.490913][ T9200] dw2102: su3000_power_ctrl: 1, initialized 0 [ 167.493602][ T9200] dvb-usb: bulk message failed: -22 (2/0) [ 167.499446][ T9624] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 167.518427][ T9200] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 167.522368][ T9200] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 167.527378][ T9200] usb 11-1: media controller created [ 167.529590][ T9200] dvb-usb: bulk message failed: -22 (6/0) [ 167.532312][ T9200] dw2102: i2c transfer failed. [ 167.536132][ T9200] dvb-usb: bulk message failed: -22 (6/0) [ 167.538887][ T9200] dw2102: i2c transfer failed. [ 167.540462][ T9200] dvb-usb: bulk message failed: -22 (6/0) [ 167.542556][ T9200] dw2102: i2c transfer failed. [ 167.544115][ T9200] dvb-usb: bulk message failed: -22 (6/0) [ 167.547127][ T9200] dw2102: i2c transfer failed. [ 167.548764][ T9200] dvb-usb: bulk message failed: -22 (6/0) [ 167.551037][ T9200] dw2102: i2c transfer failed. [ 167.552924][ T9200] dvb-usb: bulk message failed: -22 (6/0) [ 167.559465][ T9200] dw2102: i2c transfer failed. [ 167.562361][ T9200] dvb-usb: MAC address: 02:02:02:02:02:02 [ 167.583590][ T9200] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.611607][ T9200] dvb-usb: bulk message failed: -22 (3/0) [ 167.615703][ T9200] dw2102: command 0x0e transfer failed. [ 167.617628][ T9200] dvb-usb: bulk message failed: -22 (3/0) [ 167.619471][ T9200] dw2102: command 0x0e transfer failed. [ 167.763161][ T9658] loop9: detected capacity change from 0 to 255852544 [ 167.821448][ T9659] netlink: 'syz.5.946': attribute type 11 has an invalid length. [ 167.824543][ T9659] netlink: 224 bytes leftover after parsing attributes in process `syz.5.946'. [ 167.839220][ T9658] Invalid logical block size (4) [ 167.857620][ T40] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 167.952161][ T9200] dvb-usb: bulk message failed: -22 (3/0) [ 167.953991][ T9200] dw2102: command 0x0e transfer failed. [ 167.954812][ T9682] serio: Serial port ptm0 [ 167.957745][ T9200] dvb-usb: bulk message failed: -22 (3/0) [ 167.959588][ T9200] dw2102: command 0x0e transfer failed. [ 167.962514][ T9200] dvb-usb: bulk message failed: -22 (1/0) [ 167.969874][ T9200] dw2102: command 0x51 transfer failed. [ 167.988666][ T9200] DVB: Unable to find symbol ds3000_attach() [ 167.990580][ T9200] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 168.016793][ T40] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 168.021838][ T9682] netlink: 144 bytes leftover after parsing attributes in process `syz.0.943'. [ 168.025734][ T40] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 168.030361][ T40] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 168.034338][ T40] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.037693][ T9200] rc_core: IR keymap rc-su3000 not found [ 168.044833][ T9200] Registered IR keymap rc-empty [ 168.048751][ T9641] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 168.058351][ T40] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 168.062094][ T9200] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 168.075417][ T9200] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input23 [ 168.095998][ T9200] dvb-usb: schedule remote query interval to 150 msecs. [ 168.103692][ T9200] dw2102: su3000_power_ctrl: 0, initialized 1 [ 168.107434][ T9200] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 168.123329][ T9200] usb 11-1: USB disconnect, device number 3 [ 168.201135][ T9200] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 168.288064][ T9692] syzkaller0: entered promiscuous mode [ 168.290521][ T9692] syzkaller0: entered allmulticast mode [ 168.355507][ T9703] lo speed is unknown, defaulting to 1000 [ 168.402843][ T55] usb 9-1: USB disconnect, device number 12 [ 169.013976][ T9724] XFS (nbd0): SB validate failed with error -5. [ 169.167934][ T9724] netlink: 116 bytes leftover after parsing attributes in process `syz.0.953'. [ 169.414798][ T9745] netlink: 128 bytes leftover after parsing attributes in process `syz.6.960'. [ 169.426778][ T9745] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 169.438199][ T9754] ip_tables: iptables: counters copy to user failed while replacing table [ 169.488295][ T9754] openvswitch: netlink: IP tunnel dst address not specified [ 169.502459][ T9200] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 169.673095][ T9200] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 169.679131][ T9200] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 169.687074][ T9200] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 169.696543][ T9200] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.700754][ T9200] usb 9-1: Product: syz [ 169.702432][ T9200] usb 9-1: Manufacturer: syz [ 169.706672][ T9200] usb 9-1: SerialNumber: syz [ 169.719956][ T9200] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 169.734521][ T9200] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 169.743908][ T9200] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 170.228532][ T9782] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 170.277831][ T9786] xt_cluster: node mask cannot exceed total number of nodes [ 170.424550][ T9788] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 170.485167][ T9788] kvm: pic: non byte read [ 170.494149][ T9788] kvm: pic: level sensitive irq not supported [ 170.496363][ T9788] kvm: pic: non byte read [ 170.503956][ T9788] kvm: pic: level sensitive irq not supported [ 170.504375][ T9788] kvm: pic: non byte read [ 170.721566][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.6.973'. [ 170.741217][ T55] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 170.922828][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 170.925517][ T55] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 170.930098][ T55] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 170.933129][ T55] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.936721][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.940113][ T55] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 170.944281][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 170.948024][ T55] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.952891][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.176506][ T55] usb 5-1: GET_CAPABILITIES returned 0 [ 171.178318][ T55] usbtmc 5-1:16.0: can't read capabilities [ 171.400679][ T5732] usb 5-1: USB disconnect, device number 13 [ 171.582935][ T9801] FAULT_INJECTION: forcing a failure. [ 171.582935][ T9801] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 171.587909][ T9801] CPU: 0 UID: 0 PID: 9801 Comm: syz.6.975 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.587928][ T9801] Tainted: [L]=SOFTLOCKUP [ 171.587932][ T9801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 171.587944][ T9801] Call Trace: [ 171.587949][ T9801] [ 171.587953][ T9801] dump_stack_lvl+0x100/0x190 [ 171.588041][ T9801] should_fail_ex.cold+0x5/0xa [ 171.588072][ T9801] _copy_to_user+0x32/0xd0 [ 171.588120][ T9801] simple_read_from_buffer+0xcb/0x170 [ 171.588156][ T9801] proc_fail_nth_read+0x1af/0x230 [ 171.588176][ T9801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.588190][ T9801] ? rw_verify_area+0xce/0x6d0 [ 171.588216][ T9801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.588229][ T9801] vfs_read+0x1e4/0xb40 [ 171.588241][ T9801] ? __pfx_vfs_read+0x10/0x10 [ 171.588250][ T9801] ? __fget_files+0x215/0x3d0 [ 171.588266][ T9801] ? __fget_files+0x21f/0x3d0 [ 171.588281][ T9801] ksys_read+0x12a/0x250 [ 171.588296][ T9801] ? __pfx_ksys_read+0x10/0x10 [ 171.588309][ T9801] do_syscall_64+0x115/0x870 [ 171.588333][ T9801] ? clear_bhb_loop+0x70/0xc0 [ 171.588348][ T9801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.588359][ T9801] RIP: 0033:0x7f89e095e90e [ 171.588374][ T9801] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 171.588385][ T9801] RSP: 002b:00007f89e1865fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.588403][ T9801] RAX: ffffffffffffffda RBX: 00007f89e18666c0 RCX: 00007f89e095e90e [ 171.588410][ T9801] RDX: 000000000000000f RSI: 00007f89e18660a0 RDI: 0000000000000003 [ 171.588416][ T9801] RBP: 00007f89e1866090 R08: 0000000000000000 R09: 0000000000000000 [ 171.588422][ T9801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.588428][ T9801] R13: 00007f89e0c26038 R14: 00007f89e0c25fa0 R15: 00007ffe33ede848 [ 171.588442][ T9801] [ 171.767028][ T1346] psmouse serio9: Failed to reset mouse on : -5 [ 171.938528][ T9743] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 171.954257][ T29] usb 9-1: USB disconnect, device number 13 [ 171.970283][ T29] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 171.979162][ T29] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 171.982952][ T29] ti_usb_3410_5052 9-1:2.0: device disconnected [ 172.229924][ T9821] netlink: 20 bytes leftover after parsing attributes in process `syz.5.982'. [ 172.263154][ T9821] bond1: ARP target 9.0.0.0 is already present [ 172.265060][ T9821] bond1: option arp_ip_target: invalid value (9) [ 172.268395][ T9821] bond1 (unregistering): Released all slaves [ 172.281103][ T42] kauditd_printk_skb: 150 callbacks suppressed [ 172.281121][ T42] audit: type=1800 audit(1787050973.173:2514): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 172.356679][ T42] audit: type=1400 audit(1787050973.239:2515): avc: denied { append } for pid=9825 comm="syz.0.983" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 172.381579][ T42] audit: type=1800 audit(1787050973.257:2516): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 172.421566][ T42] audit: type=1800 audit(1787050973.304:2517): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 172.493678][ T42] audit: type=1800 audit(1787050973.360:2518): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 172.515253][ T42] audit: type=1800 audit(1787050973.379:2519): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 172.552168][ T42] audit: type=1800 audit(1787050973.417:2520): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 172.597363][ T42] audit: type=1800 audit(1787050973.463:2521): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 172.614273][ T42] audit: type=1804 audit(1787050973.473:2522): pid=9836 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.987" name="/newroot/57/file1" dev="tmpfs" ino=319 res=1 errno=0 [ 172.630431][ T42] audit: type=1800 audit(1787050973.491:2523): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 172.720194][ T9852] netlink: 'syz.4.992': attribute type 1 has an invalid length. [ 172.733592][ T9852] bond4: option mode: invalid value (7) [ 172.737228][ T9852] bond4 (unregistering): Released all slaves [ 172.921145][ T29] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 172.927787][ T9859] netlink: 20 bytes leftover after parsing attributes in process `syz.5.995'. [ 172.949242][ T5729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.953968][ T5729] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.957101][ T5729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.961901][ T5729] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.967809][ T5729] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.049418][ T9200] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 173.081568][ T29] usb 11-1: Using ep0 maxpacket: 8 [ 173.084298][ T29] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 173.088338][ T29] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.095515][ T29] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 173.098658][ T29] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 173.103782][ T29] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 173.107279][ T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.115629][ T29] hub 11-1:1.0: bad descriptor, ignoring hub [ 173.117559][ T29] hub 11-1:1.0: probe with driver hub failed with error -5 [ 173.120032][ T29] cdc_wdm 11-1:1.0: skipping garbage [ 173.121709][ T29] cdc_wdm 11-1:1.0: skipping garbage [ 173.125926][ T29] cdc_wdm 11-1:1.0: cdc-wdm1: USB WDM device [ 173.127796][ T29] cdc_wdm 11-1:1.0: Unknown control protocol [ 173.141716][ T9862] lo speed is unknown, defaulting to 1000 [ 173.210090][ T9200] usb 9-1: Using ep0 maxpacket: 16 [ 173.215467][ T9200] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 173.218759][ T9880] netlink: 232 bytes leftover after parsing attributes in process `syz.5.998'. [ 173.227053][ T9200] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.230526][ T9200] usb 9-1: config 0 interface 0 has no altsetting 0 [ 173.237074][ T9200] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.247842][ T9200] usb 9-1: Product: syz [ 173.249151][ T9200] usb 9-1: Manufacturer: syz [ 173.250695][ T9200] usb 9-1: SerialNumber: syz [ 173.261958][ T9200] usb 9-1: config 0 descriptor?? [ 173.268619][ T9880] netlink: 32 bytes leftover after parsing attributes in process `syz.5.998'. [ 173.271832][ T9880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=9880 comm=syz.5.998 [ 173.430214][ T9862] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.432846][ T9862] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.436281][ T9862] bridge_slave_0: entered allmulticast mode [ 173.439889][ T9862] bridge_slave_0: entered promiscuous mode [ 173.444112][ T9891] gadgetfs: bound to dummy_udc driver [ 173.444587][ T9862] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.449144][ T9862] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.452126][ T9862] bridge_slave_1: entered allmulticast mode [ 173.454889][ T9862] bridge_slave_1: entered promiscuous mode [ 173.457615][ T29] usb 11-1: USB disconnect, device number 4 [ 173.488568][ T9862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.490994][ C2] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 173.498798][ T9200] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input25 [ 173.498799][ T9862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.507110][ T9200] imon:send_packet: packet tx failed (-71) [ 173.528135][ T9862] team0: Port device team_slave_0 added [ 173.540923][ T9200] imon 9-1:0.0: panel buttons/knobs setup failed [ 173.542578][ T9862] team0: Port device team_slave_1 added [ 173.563076][ T9862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.565477][ T9862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.573398][ T9862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.577826][ T9862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.580048][ T9862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.588033][ T9862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.594553][ T9200] rc_core: IR keymap rc-imon-pad not found [ 173.596711][ T9200] Registered IR keymap rc-empty [ 173.598532][ T9200] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 173.601600][ T9200] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 173.604707][ T9200] imon:send_packet: packet tx failed (-71) [ 173.610893][ T9862] hsr_slave_0: entered promiscuous mode [ 173.613163][ T9862] hsr_slave_1: entered promiscuous mode [ 173.615245][ T9862] debugfs: 'hsr0' already exists in 'hsr' [ 173.617166][ T9862] Cannot create hsr debugfs directory [ 173.626488][ T9200] imon 9-1:0.0: remote input dev register failed [ 173.628646][ T9200] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 173.642473][ T9200] imon 9-1:0.0: unable to initialize intf0, err 0 [ 173.645050][ T9200] imon:imon_probe: failed to initialize context! [ 173.647202][ T9200] imon 9-1:0.0: unable to register, err -19 [ 173.651194][ T9200] usb 9-1: USB disconnect, device number 14 [ 173.722891][ T55] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 173.726237][ C3] gadgetfs: connected [ 173.728199][ T55] gadgetfs: disconnected [ 173.748878][ T9862] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 173.754086][ T9862] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.757156][ T9862] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 173.763684][ T9862] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.766581][ T9862] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 173.770879][ T9862] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.773672][ T9862] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 173.779945][ T9862] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.807561][ T9862] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.810680][ T9862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.813906][ T9862] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.816929][ T9862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.850657][ T9862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.858173][ T8048] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.861106][ T8048] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.869686][ T9862] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.876316][ T8048] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.879379][ T8048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.889164][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.891760][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.907192][ C3] gadgetfs: connected [ 173.909073][ T55] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 173.915697][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.932533][ C3] gadgetfs: configuration #1 [ 174.032586][ T29] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 174.075429][ T9200] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 174.151987][ T9862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.192785][ T29] usb 11-1: Using ep0 maxpacket: 8 [ 174.194881][ T29] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 174.198655][ T29] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.201757][ T29] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 174.204628][ T29] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 174.208152][ T29] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 174.211580][ T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.220207][ T29] hub 11-1:1.0: bad descriptor, ignoring hub [ 174.222117][ T29] hub 11-1:1.0: probe with driver hub failed with error -5 [ 174.224517][ T29] cdc_wdm 11-1:1.0: skipping garbage [ 174.226175][ T29] cdc_wdm 11-1:1.0: skipping garbage [ 174.230194][ T29] cdc_wdm 11-1:1.0: cdc-wdm1: USB WDM device [ 174.232123][ T29] cdc_wdm 11-1:1.0: Unknown control protocol [ 174.247484][ T9200] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 174.259918][ T9200] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 174.264387][ T9200] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 174.266909][ T9886] gadgetfs: suspended from state 3 [ 174.268617][ T9200] usb 9-1: config 0 interface 0 has no altsetting 0 [ 174.271092][ T55] usb 5-1: can't set config #1, error -71 [ 174.274904][ T9200] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.275410][ T9886] gadgetfs: disconnected [ 174.278799][ T9200] usb 9-1: Product: syz [ 174.281783][ T9200] usb 9-1: Manufacturer: syz [ 174.283660][ T9200] usb 9-1: SerialNumber: syz [ 174.285169][ T55] usb 5-1: USB disconnect, device number 14 [ 174.289804][ T9200] usb 9-1: config 0 descriptor?? [ 174.294740][ T9852] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 174.305829][ T9862] veth0_vlan: entered promiscuous mode [ 174.317018][ T9862] veth1_vlan: entered promiscuous mode [ 174.338159][ T9862] veth0_macvtap: entered promiscuous mode [ 174.342206][ T9862] veth1_macvtap: entered promiscuous mode [ 174.352295][ T9862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.357114][ T9862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.420028][ T5598] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.440043][ T5598] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.457801][ T5598] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.478096][ T8047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.480395][ T8047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.492841][ T5598] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.507989][ T8048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.510569][ T8048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.527046][ C2] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 174.532211][ T9200] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input27 [ 174.556801][ T5826] usb 11-1: USB disconnect, device number 5 [ 174.593874][ T9928] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 174.597651][ T9928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.691988][ T9936] overlay: Unknown parameter 'mask' [ 174.712650][ T8615] overlayfs: failed lookup in lower (newroot/66, name='bus', err=-40): overlapping layers [ 174.717074][ T8615] overlayfs: failed lookup in lower (newroot/66, name='bus', err=-40): overlapping layers [ 174.844989][ T9200] rc_core: IR keymap rc-imon-pad not found [ 174.847910][ T9200] Registered IR keymap rc-empty [ 174.850055][ T9200] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 174.854167][ T9200] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 175.018497][ T9200] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 175.033100][ T9200] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input28 [ 175.068147][ T9200] imon 9-1:0.0: iMON device (15c2:0045, intf0) on usb<9:15> initialized [ 175.183860][ T9200] usb 9-1: USB disconnect, device number 15 [ 175.558683][ T5729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.570117][ T5729] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.575447][ T5729] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.580851][ T5729] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.583300][ T1346] misc userio: Buffer overflowed, userio client isn't keeping up [ 175.588058][ T5729] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.632404][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1017'. [ 175.716561][ T9976] f_midi2: Invalid MIDI1 group definitions for block 0:0 [ 175.729871][ T9976] Config c/1 of g1 needs at least one function. [ 175.733289][ T9976] udc dummy_udc.0: failed to start g1: -22 [ 175.737592][ T9976] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 175.747806][ T9976] UDC core: g1: couldn't find an available UDC or it's busy [ 175.830646][ T9963] lo speed is unknown, defaulting to 1000 [ 176.107520][ T9999] ip6gretap0: entered promiscuous mode [ 176.116579][ T9963] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.119781][ T9963] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.122843][ T9963] bridge_slave_0: entered allmulticast mode [ 176.125540][ T9963] bridge_slave_0: entered promiscuous mode [ 176.130727][ T9963] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.132963][ T9963] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.135120][ T9963] bridge_slave_1: entered allmulticast mode [ 176.138356][ T9963] bridge_slave_1: entered promiscuous mode [ 176.165545][ T9963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.172263][ T9963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.200675][T10003] netlink: 'syz.6.1022': attribute type 19 has an invalid length. [ 176.209684][ T9963] team0: Port device team_slave_0 added [ 176.213336][ T9963] team0: Port device team_slave_1 added [ 176.246103][ T9963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.248487][ T9963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.256861][ T9963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.261218][ T9963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.263382][ T9963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.271634][ T9963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.300906][ T9963] hsr_slave_0: entered promiscuous mode [ 176.303229][ T9963] hsr_slave_1: entered promiscuous mode [ 176.305428][ T9963] debugfs: 'hsr0' already exists in 'hsr' [ 176.307213][ T9963] Cannot create hsr debugfs directory [ 176.424373][T10011] tipc: Started in network mode [ 176.426208][T10011] tipc: Node identity 2000004, cluster identity 4711 [ 176.428376][T10011] tipc: Node number set to 33554436 [ 176.456184][ T9963] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 176.463060][ T9963] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.465785][ T9963] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 176.470129][ T9963] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.472790][ T9963] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 176.476826][ T9963] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.480072][ T9963] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 176.486034][ T9963] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.510919][ T9963] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.513344][ T9963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.515727][ T9963] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.517959][ T9963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.580549][ T9963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.602101][ T8047] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.608172][ T8047] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.625904][ T9963] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.634864][ T8047] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.637881][ T8047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.646523][ T8047] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.649559][ T8047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.813348][ T5729] Bluetooth: hci1: command tx timeout [ 176.930104][ T1346] input: PS/2 Generic Mouse as /devices/serio9/input/input24 [ 176.941271][ T9963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.002738][T10049] netlink: 'syz.4.1030': attribute type 1 has an invalid length. [ 177.021160][T10049] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.033080][T10048] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.036547][T10048] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 177.040337][T10048] bond4: (slave vti0): Error -95 calling set_mac_address [ 177.086877][ T9963] veth0_vlan: entered promiscuous mode [ 177.093332][ T9963] veth1_vlan: entered promiscuous mode [ 177.116954][ T9963] veth0_macvtap: entered promiscuous mode [ 177.123554][ T9963] veth1_macvtap: entered promiscuous mode [ 177.132573][ T9963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.140050][ T9963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.166334][ T1346] psmouse serio9: Failed to enable mouse on [ 177.214196][ T6836] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.225592][T10055] syz.4.1031 (10055) used greatest stack depth: 19280 bytes left [ 177.307258][T10057] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 177.311003][T10057] SELinux: failed to load policy [ 177.332615][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.336025][ T6836] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.337181][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.355988][ T6836] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.358947][ T6836] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.392399][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.400817][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.402537][T10060] netlink: NAT attribute has 4 unknown bytes [ 177.405754][T10060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.511120][T10063] 9p: Bad value for 'rfdno' [ 177.545431][T10071] synth uevent: /bus/platform/drivers/intel_xhci_usb_sw: unknown uevent action string [ 177.551031][T10072] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 177.553749][T10071] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1038'. [ 177.555590][T10072] SELinux: failed to load policy [ 177.650631][ T42] kauditd_printk_skb: 168 callbacks suppressed [ 177.650650][ T42] audit: type=1800 audit(1787050978.189:2692): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 177.663076][T10088] vivid-000: ================= START STATUS ================= [ 177.667575][T10088] vivid-000: Enable Output Cropping: true grabbed [ 177.673816][T10088] vivid-000: Enable Output Composing: true grabbed [ 177.675979][T10088] vivid-000: Enable Output Scaler: true grabbed [ 177.678057][T10088] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 177.680248][T10088] vivid-000: Transmit Mode: HDMI grabbed [ 177.681349][ T42] audit: type=1800 audit(1787050978.217:2693): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 177.682017][T10088] vivid-000: Hotplug Present: 0x00000000 [ 177.690468][T10088] vivid-000: RxSense Present: 0x00000000 [ 177.692479][T10088] vivid-000: EDID Present: 0x00000000 [ 177.694249][T10088] vivid-000: ================== END STATUS ================== [ 177.729921][ T42] audit: type=1800 audit(1787050978.264:2694): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0 [ 177.751691][ T5729] Bluetooth: hci0: command tx timeout [ 177.758629][T10097] overlayfs: missing 'lowerdir' [ 177.759751][T10091] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 177.798095][ T42] audit: type=1800 audit(1787050978.330:2695): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 177.805748][T10100] tmpfs: Bad value for 'mpol' [ 177.890620][T10101] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 177.911101][ T42] audit: type=1800 audit(1787050978.432:2696): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 177.934288][ T42] audit: type=1800 audit(1787050978.461:2697): pid=10106 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1046" name="pm_wakeup_irq" dev="sysfs" ino=871 res=0 errno=0 [ 177.958310][ T42] audit: type=1800 audit(1787050978.479:2698): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 177.993303][ T42] audit: type=1800 audit(1787050978.507:2699): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 178.001024][ T42] audit: type=1804 audit(1787050978.517:2700): pid=10110 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.1048" name="/newroot/16/file0" dev="tmpfs" ino=104 res=1 errno=0 [ 178.026146][ T42] audit: type=1800 audit(1787050978.535:2701): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 178.207915][T10129] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1052'. [ 178.216329][T10129] netlink: 'syz.7.1052': attribute type 11 has an invalid length. [ 178.219990][T10129] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 178.502839][T10142] fuse: Bad value for 'fd' [ 178.542021][ T10] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 178.554190][T10144] netlink: 'syz.6.1058': attribute type 1 has an invalid length. [ 178.583164][T10144] bond1: entered promiscuous mode [ 178.586249][T10144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.607789][T10144] bond1: (slave bridge3): making interface the new active one [ 178.610649][T10144] bridge3: entered promiscuous mode [ 178.613896][T10144] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 178.637213][T10144] erspan0: left promiscuous mode [ 178.643191][T10144] erspan0: left allmulticast mode [ 178.666142][T10144] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.669384][T10144] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.703695][ T10] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.709115][ T10] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.712782][ T10] usb 12-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 178.718392][ T10] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.722025][ T10] usb 12-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 178.727536][ T10] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 178.733656][ T10] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 178.734624][T10144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.740262][ T10] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.743454][T10144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.743913][ T10] usb 12-1: Product: syz [ 178.748053][ T10] usb 12-1: Manufacturer: syz [ 178.752811][T10137] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 178.757540][ T10] cdc_wdm 12-1:1.0: skipping garbage [ 178.759778][ T10] cdc_wdm 12-1:1.0: skipping garbage [ 178.763221][ T10] cdc_wdm 12-1:1.0: cdc-wdm1: USB WDM device [ 178.765144][ T10] cdc_wdm 12-1:1.0: Unknown control protocol [ 178.854481][T10144] bond1: left promiscuous mode [ 178.856243][T10144] bridge3: left promiscuous mode [ 178.894684][ T6836] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.898435][ T6836] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.902101][ T6836] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.906664][ T6836] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.977084][ T61] usb 12-1: USB disconnect, device number 2 [ 179.033647][T10157] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 179.049401][ T5729] Bluetooth: hci1: command tx timeout [ 179.067303][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1062'. [ 179.079164][T10157] batadv_slave_1: entered promiscuous mode [ 179.263426][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1065'. [ 179.351535][T10175] netlink: 'syz.4.1067': attribute type 1 has an invalid length. [ 179.365164][T10175] 8021q: adding VLAN 0 to HW filter on device bond5 [ 179.393143][T10175] bond5: (slave geneve3): making interface the new active one [ 179.396265][T10175] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 179.400604][T10178] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 179.407643][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 179.412442][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 179.418498][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 179.438535][T10183] loop9: detected capacity change from 0 to 524287999 [ 179.441974][T10183] buffer_io_error: 10 callbacks suppressed [ 179.441984][T10183] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.446247][T10183] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.448755][T10183] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.451634][T10183] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.454149][T10183] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.456595][T10183] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.458969][T10183] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.461919][T10183] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.464695][T10183] ldm_validate_partition_table(): Disk read failed. [ 179.466686][T10183] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.470080][T10183] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.473297][T10183] Dev loop9: unable to read RDB block 0 [ 179.476192][T10183] loop9: unable to read partition table [ 179.480503][T10183] loop_reread_partitions: partition scan of loop9 (3 x) failed (rc=-5) [ 179.517694][T10186] kernel read not supported for file /policy (pid: 10186 comm: syz.8.1070) [ 179.522431][T10186] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1070'. [ 179.526281][T10186] netlink: 3 bytes leftover after parsing attributes in process `syz.8.1070'. [ 179.660853][T10193] vlan2: entered promiscuous mode [ 179.662509][T10193] bridge0: entered promiscuous mode [ 179.958908][T10204] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1077'. [ 179.968207][T10202] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 179.974072][ T5729] Bluetooth: hci0: command tx timeout [ 180.026710][T10208] binder: 10207:10208 ioctl c0306201 200000000100 returned -14 [ 180.194092][T10215] overlayfs: failed lookup in lower (/, name='file1', err=-40): overlapping layers [ 180.284442][ T6836] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 180.550304][T10246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64528 sclass=netlink_route_socket pid=10246 comm=syz.4.1092 [ 180.665007][T10255] ip_tables: iptables: counters copy to user failed while replacing table [ 180.681002][T10257] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1096'. [ 180.684701][T10257] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1096'. [ 180.700828][T10257] XFS (nullb0): Invalid superblock magic number [ 180.717626][T10255] Console: switching to colour dummy device 80x25 [ 180.777191][ T3267] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 180.795800][T10269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1098'. [ 180.866881][T10273] netlink: 'syz.6.1100': attribute type 10 has an invalid length. [ 180.873245][T10273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.877892][T10273] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 180.942939][T10276] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1101'. [ 180.942939][T10279] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1101'. [ 180.960203][ T3267] usb 12-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 180.971099][ T3267] usb 12-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 180.976728][ T3267] usb 12-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 180.983472][ T3267] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.987657][ T3267] usb 12-1: Product: syz [ 180.989741][ T3267] usb 12-1: Manufacturer: syz [ 180.991695][ T3267] usb 12-1: SerialNumber: syz [ 181.000530][ T3267] ti_usb_3410_5052 12-1:2.0: TI USB 5052 2 port adapter converter detected [ 181.006895][ T3267] usb 12-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 181.012898][ T3267] usb 12-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 181.048416][ T5729] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 181.192453][ T29] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 181.267228][ T5729] Bluetooth: hci1: command tx timeout [ 181.374315][ T29] usb 11-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 181.377713][ T29] usb 11-1: config 0 has no interfaces? [ 181.381001][ T29] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.383576][ T29] usb 11-1: Product: syz [ 181.384951][ T29] usb 11-1: Manufacturer: syz [ 181.386479][ T29] usb 11-1: SerialNumber: syz [ 181.391474][ T29] usb 11-1: config 0 descriptor?? [ 181.607379][T10323] TCP: TCP_TX_DELAY enabled [ 181.686471][T10334] bond6: Unable to set up delay as MII monitoring is disabled [ 181.690659][T10334] bond6 (unregistering): Released all slaves [ 181.720831][T10336] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 181.720831][T10336] The task syz.8.1117 (10336) triggered the difference, watch for misbehavior. [ 181.824379][T10278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.833654][T10278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.836983][T10278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.840435][T10278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.843513][T10278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.846424][T10278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.850198][T10278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.853225][T10278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.857546][T10278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.860512][T10278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.997510][ T40] usb 11-1: USB disconnect, device number 6 [ 182.051083][T10345] macsec1: entered allmulticast mode [ 182.053366][T10345] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 182.057217][T10345] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 182.066687][T10350] : renamed from bond0 [ 182.122538][T10357] Bluetooth: MGMT ver 1.23 [ 182.196722][ T5729] Bluetooth: hci0: command tx timeout [ 182.503528][T10384] netlink: 'syz.4.1131': attribute type 1 has an invalid length. [ 182.518682][T10384] bond7: entered promiscuous mode [ 182.520501][T10384] 8021q: adding VLAN 0 to HW filter on device bond7 [ 182.759695][ T5087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 182.767245][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 182.773860][ T5087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 182.790372][ T5087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 182.797655][ T5087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 182.816450][ T3267] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 182.955397][ T3267] usb 9-1: device descriptor read/64, error -71 [ 182.961835][ T6836] bridge_slave_1: left allmulticast mode [ 182.964649][ T6836] bridge_slave_1: left promiscuous mode [ 182.970766][ T6836] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.974475][ T6836] bridge_slave_0: left allmulticast mode [ 182.976266][ T6836] bridge_slave_0: left promiscuous mode [ 182.978423][ T6836] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.003649][ T42] kauditd_printk_skb: 188 callbacks suppressed [ 183.003662][ T42] audit: type=1800 audit(1787050983.196:2890): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0 [ 183.047629][ T42] audit: type=1800 audit(1787050983.242:2891): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0 [ 183.055030][ T42] audit: type=1800 audit(1787050983.242:2892): pid=10414 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1141" name="pm_print_times" dev="sysfs" ino=870 res=0 errno=0 [ 183.056040][T10242] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 183.069746][ T40] usb 12-1: USB disconnect, device number 3 [ 183.099160][ T40] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 183.123499][ T40] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 183.130516][T10414] /dev/sr0: Can't open blockdev [ 183.133076][ T40] ti_usb_3410_5052 12-1:2.0: device disconnected [ 183.157909][ T42] audit: type=1800 audit(1787050983.336:2893): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0 [ 183.170990][ T6836] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 183.181700][ T6836]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.186032][ T6836]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.195576][ T42] audit: type=1800 audit(1787050983.383:2894): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0 [ 183.208950][ T6836]  (unregistering): (slave batadv0): Releasing backup interface [ 183.216862][ T6836]  (unregistering): Released all slaves [ 183.221691][ T6836] bond1 (unregistering): Released all slaves [ 183.222704][ T3267] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 183.242847][T10391] lo speed is unknown, defaulting to 1000 [ 183.343112][ T42] audit: type=1400 audit(1787050983.523:2895): avc: denied { write } for pid=10424 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.382800][ T3267] usb 9-1: device descriptor read/64, error -71 [ 183.403542][ T42] audit: type=1400 audit(1787050983.570:2896): avc: denied { write } for pid=10431 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.444820][ T6836] tipc: Left network mode [ 183.447263][ T5440] 8021q: adding VLAN 0 to HW filter on device eth14 [ 183.482413][ T6836] rxrpc: Leaked peer 1d4 {1} 127.0.0.1:70 [ 183.491498][ T42] audit: type=1800 audit(1787050983.664:2897): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0 [ 183.513050][ T3267] usb usb9-port1: attempt power cycle [ 183.527661][ T42] audit: type=1800 audit(1787050983.692:2898): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0 [ 183.555616][ T42] audit: type=1400 audit(1787050983.720:2899): avc: denied { write } for pid=10442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.578212][T10391] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.580530][T10391] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.582851][T10391] bridge_slave_0: entered allmulticast mode [ 183.585574][T10391] bridge_slave_0: entered promiscuous mode [ 183.589404][T10391] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.592335][T10391] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.595453][T10391] bridge_slave_1: entered allmulticast mode [ 183.599844][T10391] bridge_slave_1: entered promiscuous mode [ 183.655902][T10391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.660473][ T5440] 8021q: adding VLAN 0 to HW filter on device eth15 [ 183.675071][T10391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.733118][T10391] team0: Port device team_slave_0 added [ 183.741367][T10391] team0: Port device team_slave_1 added [ 183.807317][T10391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.809595][T10391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.819128][T10391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.824644][T10391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.827184][T10391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.836553][T10391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.849098][ T6836] hsr_slave_0: left promiscuous mode [ 183.851563][ T6836] hsr_slave_1: left promiscuous mode [ 183.854031][ T6836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.857431][ T6836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.885902][ T3267] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 183.909176][ T3267] usb 9-1: device descriptor read/8, error -71 [ 183.990973][ T6836] team0 (unregistering): Port device team_slave_1 removed [ 183.998296][ T6836] team0 (unregistering): Port device team_slave_0 removed [ 184.095611][ T5440] 8021q: adding VLAN 0 to HW filter on device eth16 [ 184.114357][T10391] hsr_slave_0: entered promiscuous mode [ 184.118122][T10391] hsr_slave_1: entered promiscuous mode [ 184.127068][T10391] debugfs: 'hsr0' already exists in 'hsr' [ 184.129429][T10391] Cannot create hsr debugfs directory [ 184.184602][ T3267] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 184.190839][T10475] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 184.230444][ T3267] usb 9-1: device descriptor read/8, error -71 [ 184.254341][T10479] comedi comedi0: c6xdigio: I/O port conflict (0x100,3) [ 184.308697][T10391] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 184.334325][T10391] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.347990][T10391] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 184.351986][T10391] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.356967][ T5440] 8021q: adding VLAN 0 to HW filter on device eth17 [ 184.358136][ T3267] usb usb9-port1: unable to enumerate USB device [ 184.364022][T10391] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 184.374718][T10391] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 184.379368][T10391] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 184.383234][T10391] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 184.419584][ T5729] Bluetooth: hci0: command tx timeout [ 184.442646][T10391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.462986][T10391] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.472093][ T8047] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.474405][ T8047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.480386][ T8047] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.482706][ T8047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.482934][T10498] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 184.490041][T10498] overlayfs: failed to set xattr on upper [ 184.491875][T10498] overlayfs: ...falling back to redirect_dir=nofollow. [ 184.495617][T10498] overlayfs: ...falling back to index=off. [ 184.499424][T10498] overlayfs: ...falling back to uuid=null. [ 184.501412][T10498] overlayfs: maximum fs stacking depth exceeded [ 184.644384][T10511] netlink: 'syz.7.1156': attribute type 6 has an invalid length. [ 184.728156][T10391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.807068][T10534] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 184.812201][T10534] trusted_key: syz.7.1160 sent an empty control message without MSG_MORE. [ 184.901741][T10541] __nla_validate_parse: 11 callbacks suppressed [ 184.901760][T10541] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1162'. [ 184.911378][ T5729] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 184.921116][T10391] veth0_vlan: entered promiscuous mode [ 184.927497][T10391] veth1_vlan: entered promiscuous mode [ 184.944523][T10391] veth0_macvtap: entered promiscuous mode [ 184.947194][T10545] netlink: NAT attribute has 5 unknown bytes [ 184.948971][T10391] veth1_macvtap: entered promiscuous mode [ 184.951601][T10545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.959324][T10391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.961802][ T5729] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 184.965344][T10391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.990429][ T6836] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.028611][ T5729] Bluetooth: hci2: command tx timeout [ 185.079154][ T8044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.082847][ T6836] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.085641][ T8044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.089102][ T6836] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.111285][ T8044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.113973][ T8044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.126939][T10550] netlink: 'syz.8.1165': attribute type 4 has an invalid length. [ 185.132333][T10550] netlink: 'syz.8.1165': attribute type 4 has an invalid length. [ 185.143184][T10550] netlink: 'syz.8.1165': attribute type 4 has an invalid length. [ 185.157911][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.196664][T10569] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1168'. [ 185.241101][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1170'. [ 185.244942][T10579] syz_tun: refused to change device tx_queue_len [ 185.247111][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1170'. [ 185.250159][T10579] syz_tun: refused to change device tx_queue_len [ 185.252175][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1170'. [ 185.255935][T10579] syz_tun: refused to change device tx_queue_len [ 185.258110][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1170'. [ 185.261020][T10579] syz_tun: refused to change device tx_queue_len [ 185.263490][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1170'. [ 185.268977][T10579] syz_tun: refused to change device tx_queue_len [ 185.271124][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1170'. [ 185.274908][T10579] syz_tun: refused to change device tx_queue_len [ 185.277159][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1170'. [ 185.280178][T10579] syz_tun: refused to change device tx_queue_len [ 185.282276][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1170'. [ 185.285410][T10579] syz_tun: refused to change device tx_queue_len [ 185.287704][T10579] syz_tun: refused to change device tx_queue_len [ 185.289855][T10579] syz_tun: refused to change device tx_queue_len [ 185.292091][T10579] syz_tun: refused to change device tx_queue_len [ 185.294311][T10579] syz_tun: refused to change device tx_queue_len [ 185.297677][T10579] syz_tun: refused to change device tx_queue_len [ 185.300028][T10579] syz_tun: refused to change device tx_queue_len [ 185.302242][T10579] syz_tun: refused to change device tx_queue_len [ 185.304471][T10579] syz_tun: refused to change device tx_queue_len [ 185.308892][T10579] syz_tun: refused to change device tx_queue_len [ 185.311107][T10579] syz_tun: refused to change device tx_queue_len [ 185.313267][T10579] syz_tun: refused to change device tx_queue_len [ 185.316773][T10579] syz_tun: refused to change device tx_queue_len [ 185.319401][T10579] syz_tun: refused to change device tx_queue_len [ 185.321630][T10579] syz_tun: refused to change device tx_queue_len [ 185.323802][T10579] syz_tun: refused to change device tx_queue_len [ 185.325982][T10579] syz_tun: refused to change device tx_queue_len [ 185.328366][T10579] syz_tun: refused to change device tx_queue_len [ 185.330625][T10579] syz_tun: refused to change device tx_queue_len [ 185.333290][T10579] syz_tun: refused to change device tx_queue_len [ 185.335427][T10579] syz_tun: refused to change device tx_queue_len [ 185.337492][T10579] syz_tun: refused to change device tx_queue_len [ 185.339785][T10579] syz_tun: refused to change device tx_queue_len [ 185.342090][T10579] syz_tun: refused to change device tx_queue_len [ 185.344306][T10579] syz_tun: refused to change device tx_queue_len [ 185.346373][T10579] syz_tun: refused to change device tx_queue_len [ 185.496397][T10593] netlink: 'syz.9.1174': attribute type 5 has an invalid length. [ 185.570488][ T5729] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 185.575527][ T5729] CPU: 3 UID: 0 PID: 5729 Comm: kworker/u34:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.575563][ T5729] Tainted: [L]=SOFTLOCKUP [ 185.575571][ T5729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.575591][ T5729] Workqueue: hci0 hci_rx_work [ 185.575667][ T5729] Call Trace: [ 185.575680][ T5729] [ 185.575688][ T5729] dump_stack_lvl+0x100/0x190 [ 185.575792][ T5729] sysfs_warn_dup.cold+0x1c/0x28 [ 185.575860][ T5729] sysfs_create_dir_ns+0x24b/0x2b0 [ 185.575920][ T5729] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 185.575947][ T5729] ? find_held_lock+0x2b/0x80 [ 185.575987][ T5729] ? kobject_add_internal+0x25f/0x930 [ 185.576035][ T5729] ? kobject_add_internal+0x25f/0x930 [ 185.576068][ T5729] ? do_raw_spin_unlock+0x145/0x1e0 [ 185.576106][ T5729] kobject_add_internal+0x2c8/0x930 [ 185.576140][ T5729] kobject_add+0x16a/0x1e0 [ 185.576172][ T5729] ? __pfx_kobject_add+0x10/0x10 [ 185.576200][ T5729] ? class_to_subsys+0x10f/0x150 [ 185.576275][ T5729] ? kobject_put+0xb9/0x640 [ 185.576305][ T5729] ? _raw_spin_unlock+0x28/0x50 [ 185.576343][ T5729] device_add+0x294/0x1970 [ 185.576373][ T5729] ? __pfx_dev_set_name+0x10/0x10 [ 185.576395][ T5729] ? __pfx_device_add+0x10/0x10 [ 185.576426][ T5729] ? mgmt_send_event_skb+0x2fb/0x460 [ 185.576473][ T5729] hci_conn_add_sysfs+0x1a3/0x260 [ 185.576502][ T5729] le_conn_complete_evt+0x11eb/0x1f60 [ 185.576531][ T5729] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 185.576551][ T5729] ? hci_event_packet+0x186/0xcd0 [ 185.576577][ T5729] hci_le_conn_complete_evt+0x23c/0x3a0 [ 185.576599][ T5729] ? skb_pull_data+0x15f/0x1e0 [ 185.576635][ T5729] hci_le_meta_evt+0x34a/0x5f0 [ 185.576660][ T5729] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 185.576688][ T5729] hci_event_packet+0x51c/0xcd0 [ 185.576709][ T5729] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 185.576733][ T5729] ? __pfx_hci_event_packet+0x10/0x10 [ 185.576757][ T5729] ? kcov_remote_start+0x384/0x670 [ 185.576807][ T5729] ? lockdep_hardirqs_on+0x78/0x100 [ 185.576840][ T5729] hci_rx_work+0x451/0xfc0 [ 185.576868][ T5729] process_one_work+0xa23/0x1940 [ 185.576912][ T5729] ? __pfx_process_one_work+0x10/0x10 [ 185.576942][ T5729] ? __pfx_hci_rx_work+0x10/0x10 [ 185.576967][ T5729] worker_thread+0x5ef/0xe50 [ 185.577000][ T5729] ? kthread+0x13a/0x450 [ 185.577020][ T5729] ? __pfx_worker_thread+0x10/0x10 [ 185.577044][ T5729] kthread+0x370/0x450 [ 185.577063][ T5729] ? __pfx_kthread+0x10/0x10 [ 185.577084][ T5729] ret_from_fork+0x72b/0xd50 [ 185.577131][ T5729] ? __pfx_ret_from_fork+0x10/0x10 [ 185.577161][ T5729] ? rcu_is_watching+0x12/0xc0 [ 185.577198][ T5729] ? __switch_to+0x800/0x10f0 [ 185.577227][ T5729] ? __pfx_kthread+0x10/0x10 [ 185.577249][ T5729] ret_from_fork_asm+0x1a/0x30 [ 185.577294][ T5729] [ 185.577319][ T5729] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 185.636311][T10603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=10603 comm=syz.8.1177 [ 185.643645][ T5729] Bluetooth: hci0: failed to register connection device [ 185.751836][T10610] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 185.789971][T10612] tipc: Started in network mode [ 185.791949][T10612] tipc: Node identity ac1414aa, cluster identity 4711 [ 185.795270][T10612] tipc: Enabled bearer , priority 10 [ 185.812796][T10613] netlink: Conntrack attr has 8 unknown bytes [ 185.816946][T10613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.620797][ T9] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 186.642155][ T5087] Bluetooth: hci0: command tx timeout [ 186.673053][T10636] netlink: 'syz.4.1185': attribute type 1 has an invalid length. [ 186.691843][T10636] 8021q: adding VLAN 0 to HW filter on device bond8 [ 186.781644][ T9] usb 12-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 186.785104][ T9] usb 12-1: config 0 has no interfaces? [ 186.786893][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.792575][ T9] usb 12-1: config 0 descriptor?? [ 186.807685][T10641] SELinux: syz.4.1185 (10641) wrote to checkreqprot. This is no longer supported. [ 186.892029][ T29] tipc: Node number set to 2886997162 [ 187.018141][ T34] usb 12-1: USB disconnect, device number 4 [ 187.240466][ T5087] Bluetooth: hci2: command tx timeout [ 187.684147][T10648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10648 comm=syz.4.1190 [ 187.688184][T10648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10648 comm=syz.4.1190 [ 187.693154][T10648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10648 comm=syz.4.1190 [ 187.697183][T10648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10648 comm=syz.4.1190 [ 187.701402][T10648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10648 comm=syz.4.1190 [ 187.705380][T10648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10648 comm=syz.4.1190 [ 187.709316][T10648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10648 comm=syz.4.1190 [ 187.713791][T10648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10648 comm=syz.4.1190 [ 187.717998][T10648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10648 comm=syz.4.1190 [ 187.722328][T10648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10648 comm=syz.4.1190 [ 187.892359][ T9] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 187.977937][ T5598] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.980928][ T5598] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.002537][ T5598] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.005979][ T5598] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.052622][ T9] usb 13-1: Using ep0 maxpacket: 8 [ 188.054822][ T9] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 188.059156][ T9] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10 [ 188.063097][ T9] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024 [ 188.067196][ T9] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.073075][ T9] usb 13-1: config 0 descriptor?? [ 188.293890][ T9] iowarrior 13-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 188.602753][ T42] kauditd_printk_skb: 97 callbacks suppressed [ 188.602787][ T42] audit: type=1800 audit(1787050988.436:2997): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 188.619051][ T42] audit: type=1800 audit(1787050988.445:2998): pid=10670 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1196" name="control" dev="sysfs" ino=5649 res=0 errno=0 [ 188.681673][ T9] usb 13-1: USB disconnect, device number 2 [ 188.711814][ T42] audit: type=1800 audit(1787050988.539:2999): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 188.764601][ T42] audit: type=1800 audit(1787050988.586:3000): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 188.791346][T10679] netlink: 'syz.4.1198': attribute type 10 has an invalid length. [ 188.798026][T10679] geneve4: entered promiscuous mode [ 188.799689][T10679] geneve4: entered allmulticast mode [ 188.871783][ T42] audit: type=1800 audit(1787050988.689:3001): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 188.911952][ T42] audit: type=1800 audit(1787050988.726:3002): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 188.946030][ T42] audit: type=1800 audit(1787050988.764:3003): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 189.007301][ T42] audit: type=1800 audit(1787050988.820:3004): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 189.025890][ T42] audit: type=1800 audit(1787050988.829:3005): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 189.037303][ T42] audit: type=1800 audit(1787050988.848:3006): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=229722 res=0 errno=0 [ 189.050570][T10689] SELinux: policydb version 0 does not match my version range 15-35 [ 189.053875][T10689] SELinux: failed to load policy [ 189.059446][T10689] SELinux: policydb version 0 does not match my version range 15-35 [ 189.062323][T10689] SELinux: failed to load policy [ 189.066949][T10687] lo speed is unknown, defaulting to 1000 [ 189.316843][T10706] Bluetooth: MGMT ver 1.23 [ 189.399216][ T3267] usb 12-1: new full-speed USB device number 5 using dummy_hcd [ 189.419855][T10709] xt_hashlimit: size too large, truncated to 1048576 [ 189.427296][T10711] syz_tun: entered allmulticast mode [ 189.465849][ T5087] Bluetooth: hci2: command tx timeout [ 189.513630][T10716] syz_tun (unregistering): left allmulticast mode [ 189.564277][ T3267] usb 12-1: not running at top speed; connect to a high speed hub [ 189.566885][ T3267] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.571963][ T3267] usb 12-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 189.577491][ T3267] usb 12-1: config 1 interface 0 has no altsetting 0 [ 189.584417][ T3267] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.589846][ T3267] usb 12-1: Product: Е [ 189.597394][ T3267] usb 12-1: Manufacturer: 跸碾땩쳭䖁呿ⷦ察␥ꂒ硫꾖᫠㮇ᅕ辙翙콏栎葬਽둗 [ 189.601223][ T3267] usb 12-1: SerialNumber: syz [ 189.733779][T10728] netlink: 'syz.4.1213': attribute type 1 has an invalid length. [ 189.763789][T10728] 8021q: adding VLAN 0 to HW filter on device bond9 [ 189.775827][T10731] /dev/sr0: Can't open blockdev [ 189.780601][T10728] bond9: (slave dummy0): making interface the new active one [ 189.787444][T10728] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 189.796913][T10728] netlink: 'syz.4.1213': attribute type 10 has an invalid length. [ 189.799737][T10728] dummy0: entered promiscuous mode [ 189.804842][T10728] bond9: (slave dummy0): Releasing active interface [ 190.047272][ T3267] cdc_ether 12-1:1.0: probe with driver cdc_ether failed with error -22 [ 190.056680][ T3267] usb 12-1: USB disconnect, device number 5 [ 190.341573][ T34] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 190.388631][T10747] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 190.506250][ T34] usb 13-1: unable to get BOS descriptor or descriptor too short [ 190.509234][ T34] usb 13-1: New USB device found, idVendor=006d, idProduct=0000, bcdDevice= 0.00 [ 190.513072][ T34] usb 13-1: no configurations [ 190.514879][ T34] usb 13-1: can't read configurations, error -22 [ 190.585430][T10751] xt_hashlimit: size too large, truncated to 1048576 [ 190.778204][T10764] netlink: 'syz.4.1222': attribute type 1 has an invalid length. [ 190.783148][T10764] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 190.867090][T10776] syzkaller0: entered promiscuous mode [ 190.871856][T10776] syzkaller0: entered allmulticast mode [ 191.085953][T10786] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.1227:10786 [ 191.135615][T10781] 0000:00:03.0 (uninitialized): Cannot find proper PCI device base address, aborting [ 191.299947][T10802] __nla_validate_parse: 36 callbacks suppressed [ 191.299967][T10802] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1233'. [ 191.577110][T10812] jffs2: notice: (10812) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 191.623641][T10817] sctp: [Deprecated]: syz.7.1238 (pid 10817) Use of int in maxseg socket option. [ 191.623641][T10817] Use struct sctp_assoc_value instead [ 191.643714][T10819] tipc: Started in network mode [ 191.645535][T10819] tipc: Node identity , cluster identity 7 [ 191.647522][T10819] tipc: Failed to obtain node identity [ 191.649244][T10819] tipc: Enabling of bearer rejected, failed to enable media [ 191.701327][ T5729] Bluetooth: hci2: command tx timeout [ 191.747984][T10828] kvm: kvm [10827]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 191.791251][T10831] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 191.794344][T10831] SELinux: failed to load policy [ 192.025551][T10840] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1244'. [ 192.104161][T10840] geneve2: entered promiscuous mode [ 192.108260][T10840] geneve2: entered allmulticast mode [ 192.247714][T10852] netlink: 'syz.4.1247': attribute type 4 has an invalid length. [ 192.280374][T10854] input: syz0 as /devices/virtual/input/input29 [ 192.314180][T10854] afs: Unknown parameter '00000000000000000000005' [ 192.329286][T10854] overlayfs: failed to resolve './file1': -2 [ 192.366164][T10858] nvmet: adding nsid 1 to subsystem testsubsys [ 192.392746][T10858] [ 192.393574][T10858] ====================================================== [ 192.395950][T10858] WARNING: possible circular locking dependency detected [ 192.398251][T10858] syzkaller #0 Tainted: G L [ 192.400393][T10858] ------------------------------------------------------ [ 192.402628][T10858] syz.8.1249/10858 is trying to acquire lock: [ 192.404528][T10858] ffff88802ccce460 (sb_writers#6){.+.+}-{0:0}, at: lookup_open+0x150/0x1990 [ 192.407441][T10858] [ 192.407441][T10858] but task is already holding lock: [ 192.409623][T10858] ffff888035da1868 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x5d0 [ 192.412524][T10858] [ 192.412524][T10858] which lock already depends on the new lock. [ 192.412524][T10858] [ 192.415961][T10858] [ 192.415961][T10858] the existing dependency chain (in reverse order) is: [ 192.418886][T10858] [ 192.418886][T10858] -> #3 (&subsys->lock){+.+.}-{4:4}: [ 192.421294][T10858] lock_acquire+0x1b9/0x370 SYZFAIL: failed to recv rpc [ 192.422883][T10858] __mutex_lock+0x1a4/0x1bd0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 192.424657][T10858] nvmet_ns_buffered_io_store+0xc0/0x1e0 [ 192.426482][T10858] configfs_write_iter+0x302/0x4e0 [ 192.428133][T10858] vfs_write+0x6ac/0x1050 [ 192.429492][T10858] ksys_write+0x12a/0x250 [ 192.430865][T10858] do_syscall_64+0x115/0x870 [ 192.432297][T10858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.434111][T10858] [ 192.434111][T10858] -> #2 (&p->frag_sem){++++}-{4:4}: [ 192.436146][T10858] lock_acquire+0x1b9/0x370 [ 192.437604][T10858] down_read+0x99/0x4c0 [ 192.438949][T10858] __configfs_open_file+0xe8/0x9c0 [ 192.440491][T10858] do_dentry_open+0x6ab/0x14d0 [ 192.441956][T10858] vfs_open+0x82/0x3f0 [ 192.443251][T10858] dentry_open+0x71/0xd0 [ 192.444570][T10858] ima_calc_file_hash+0xe1/0x380 [ 192.446100][T10858] ima_collect_measurement+0x94f/0xb30 [ 192.447783][T10858] process_measurement+0xdfe/0x2350 [ 192.449323][T10858] ima_file_check+0xc3/0x110 [ 192.450732][T10858] security_file_post_open+0xc4/0x210 [ 192.452347][T10858] path_openat+0x5cd/0x2440 [ 192.453736][T10858] do_file_open+0x20e/0x430 [ 192.455152][T10858] do_sys_openat2+0x10f/0x1e0 [ 192.456622][T10858] __x64_sys_openat+0x12d/0x210 [ 192.458115][T10858] do_syscall_64+0x115/0x870 [ 192.459547][T10858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.461281][T10858] [ 192.461281][T10858] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 192.463639][T10858] lock_acquire+0x1b9/0x370 [ 192.465031][T10858] __mutex_lock+0x1a4/0x1bd0 [ 192.466500][T10858] process_measurement+0x5ab/0x2350 [ 192.468122][T10858] ima_file_check+0xc3/0x110 [ 192.469550][T10858] security_file_post_open+0xc4/0x210 [ 192.471200][T10858] path_openat+0x5cd/0x2440 [ 192.472621][T10858] do_file_open+0x20e/0x430 [ 192.474062][T10858] do_sys_openat2+0x10f/0x1e0 [ 192.475504][T10858] __x64_sys_openat+0x12d/0x210 [ 192.477070][T10858] do_syscall_64+0x115/0x870 [ 192.478525][T10858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.480314][T10858] [ 192.480314][T10858] -> #0 (sb_writers#6){.+.+}-{0:0}: [ 192.482395][T10858] check_prev_add+0xeb/0xe60 [ 192.483830][T10858] __lock_acquire+0x136c/0x1a40 [ 192.485332][T10858] lock_acquire+0x1b9/0x370 [ 192.486812][T10858] mnt_want_write+0x6f/0x410 [ 192.488251][T10858] lookup_open+0x150/0x1990 [ 192.489692][T10858] path_openat+0xa2c/0x2440 [ 192.491108][T10858] do_file_open+0x20e/0x430 [ 192.492512][T10858] file_open_name+0x1c3/0x3e0 [ 192.493951][T10858] filp_open+0x2e/0x50 [ 192.495239][T10858] nvmet_file_ns_enable+0x95/0x420 [ 192.496959][T10858] nvmet_ns_enable+0x35f/0x5d0 [ 192.498817][T10858] nvmet_ns_enable_store+0x11e/0x160 [ 192.500909][T10858] configfs_write_iter+0x302/0x4e0 [ 192.502936][T10858] vfs_write+0x6ac/0x1050 [ 192.504712][T10858] ksys_write+0x12a/0x250 [ 192.506535][T10858] do_syscall_64+0x115/0x870 [ 192.508128][T10858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.510102][T10858] [ 192.510102][T10858] other info that might help us debug this: [ 192.510102][T10858] [ 192.513250][T10858] Chain exists of: [ 192.513250][T10858] sb_writers#6 --> &p->frag_sem --> &subsys->lock [ 192.513250][T10858] [ 192.516953][T10858] Possible unsafe locking scenario: [ 192.516953][T10858] [ 192.519244][T10858] CPU0 CPU1 [ 192.520902][T10858] ---- ---- [ 192.522576][T10858] lock(&subsys->lock); [ 192.523935][T10858] lock(&p->frag_sem); [ 192.526058][T10858] lock(&subsys->lock); [ 192.528185][T10858] rlock(sb_writers#6); [ 192.529543][T10858] [ 192.529543][T10858] *** DEADLOCK *** [ 192.529543][T10858] [ 192.532084][T10858] 6 locks held by syz.8.1249/10858: [ 192.533800][T10858] #0: ffff88805cc81cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 192.536616][T10858] #1: ffff888024574460 (sb_writers#16){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 192.539425][T10858] #2: ffff88801321c480 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 192.542527][T10858] #3: ffff888022b32c70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 192.545480][T10858] #4: ffffffff8ff299c8 (nvmet_config_sem){+.+.}-{4:4}, at: nvmet_ns_enable_store+0xa5/0x160 [ 192.548605][T10858] #5: ffff888035da1868 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x5d0 [ 192.551528][T10858] [ 192.551528][T10858] stack backtrace: [ 192.553441][T10858] CPU: 0 UID: 0 PID: 10858 Comm: syz.8.1249 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.553461][T10858] Tainted: [L]=SOFTLOCKUP [ 192.553466][T10858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.553484][T10858] Call Trace: [ 192.553492][T10858] [ 192.553499][T10858] dump_stack_lvl+0x100/0x190 [ 192.553544][T10858] print_circular_bug.cold+0x178/0x1c7 [ 192.553567][T10858] check_noncircular+0x146/0x160 [ 192.553586][T10858] check_prev_add+0xeb/0xe60 [ 192.553599][T10858] __lock_acquire+0x136c/0x1a40 [ 192.553615][T10858] lock_acquire+0x1b9/0x370 [ 192.553629][T10858] ? lookup_open+0x150/0x1990 [ 192.553646][T10858] ? __pfx___might_resched+0x10/0x10 [ 192.553666][T10858] ? find_held_lock+0x2b/0x80 [ 192.553676][T10858] mnt_want_write+0x6f/0x410 [ 192.553688][T10858] ? lookup_open+0x150/0x1990 [ 192.553706][T10858] lookup_open+0x150/0x1990 [ 192.553724][T10858] path_openat+0xa2c/0x2440 [ 192.553740][T10858] ? __pfx_path_openat+0x10/0x10 [ 192.553753][T10858] ? kasan_save_stack+0x3f/0x50 [ 192.553773][T10858] ? kasan_save_stack+0x30/0x50 [ 192.553785][T10858] ? kasan_save_track+0x14/0x30 [ 192.553797][T10858] ? __kasan_slab_alloc+0x89/0x90 [ 192.553810][T10858] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 192.553829][T10858] ? do_getname_kernel+0x5d/0x250 [ 192.553844][T10858] ? filp_open+0x1d/0x50 [ 192.553859][T10858] ? nvmet_file_ns_enable+0x95/0x420 [ 192.553875][T10858] do_file_open+0x20e/0x430 [ 192.553888][T10858] ? __pfx_do_file_open+0x10/0x10 [ 192.553930][T10858] ? rcu_is_watching+0x12/0xc0 [ 192.553958][T10858] file_open_name+0x1c3/0x3e0 [ 192.553973][T10858] ? __pfx_file_open_name+0x10/0x10 [ 192.553987][T10858] ? do_getname_kernel+0x5d/0x250 [ 192.554001][T10858] ? __asan_memcpy+0x3c/0x60 [ 192.554012][T10858] ? do_getname_kernel+0x1be/0x250 [ 192.554026][T10858] filp_open+0x2e/0x50 [ 192.554041][T10858] nvmet_file_ns_enable+0x95/0x420 [ 192.554057][T10858] nvmet_ns_enable+0x35f/0x5d0 [ 192.554071][T10858] nvmet_ns_enable_store+0x11e/0x160 [ 192.554082][T10858] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 192.554100][T10858] ? configfs_write_iter+0x388/0x4e0 [ 192.554117][T10858] configfs_write_iter+0x302/0x4e0 [ 192.554133][T10858] vfs_write+0x6ac/0x1050 [ 192.554144][T10858] ? __pfx_configfs_write_iter+0x10/0x10 [ 192.554160][T10858] ? __pfx_vfs_write+0x10/0x10 [ 192.554173][T10858] ksys_write+0x12a/0x250 [ 192.554183][T10858] ? __pfx_ksys_write+0x10/0x10 [ 192.554199][T10858] do_syscall_64+0x115/0x870 [ 192.554214][T10858] ? clear_bhb_loop+0x70/0xc0 [ 192.554230][T10858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.554243][T10858] RIP: 0033:0x7f346e19e0d9 [ 192.554255][T10858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.554271][T10858] RSP: 002b:00007f346ef94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 192.554298][T10858] RAX: ffffffffffffffda RBX: 00007f346e426090 RCX: 00007f346e19e0d9 [ 192.554311][T10858] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: 0000000000000007 [ 192.554318][T10858] RBP: 00007f346e235024 R08: 0000000000000000 R09: 0000000000000000 [ 192.554325][T10858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.554333][T10858] R13: 00007f346e426128 R14: 00007f346e426090 R15: 00007ffd6148abf8 [ 192.554346][T10858] [ 192.558777][T10861] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 192.661087][T10861] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 192.686013][T10862] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(12) [ 192.688047][T10862] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 192.696815][T10858] nvmet: failed to open file ./file0: (-2) [ 192.699375][T10861] vhci_hcd vhci_hcd.0: Device attached [ 192.701164][T10862] vhci_hcd vhci_hcd.0: Device attached [ 192.719419][T10865] vhci_hcd: connection closed [ 192.719446][T10864] vhci_hcd: connection closed [ 192.724627][ T12] vhci_hcd vhci_hcd.7: stop threads [ 192.727833][ T12] vhci_hcd vhci_hcd.7: release socket [ 192.729507][ T12] vhci_hcd vhci_hcd.7: disconnect device [ 192.738011][ T12] vhci_hcd vhci_hcd.7: stop threads [ 192.739522][ T12] vhci_hcd vhci_hcd.7: release socket [ 192.743407][ T12] vhci_hcd vhci_hcd.7: disconnect device [ 194.507052][ T9200] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 194.508916][ T9200] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 195.271683][ T42] kauditd_printk_skb: 158 callbacks suppressed [ 195.271706][ T42] audit: type=1400 audit(1787050994.678:3165): avc: denied { write } for pid=10869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.306849][ T42] audit: type=1400 audit(1787050994.706:3166): avc: denied { write } for pid=10872 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.869821][ T42] audit: type=1400 audit(1787050995.239:3167): avc: denied { write } for pid=10875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.899290][ T42] audit: type=1400 audit(1787050995.267:3168): avc: denied { write } for pid=10878 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.150068][ T42] audit: type=1400 audit(1787050995.501:3169): avc: denied { write } for pid=10881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.178071][ T42] audit: type=1400 audit(1787050995.529:3170): avc: denied { write } for pid=10885 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.251198][ T42] audit: type=1400 audit(1787050995.604:3171): avc: denied { write } for pid=10888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.282798][ T42] audit: type=1400 audit(1787050995.632:3172): avc: denied { write } for pid=10891 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.503404][ T1438] ieee802154 phy1 wpan1: encryption failed: -22