last executing test programs: 12m28.456657724s ago: executing program 32 (id=802): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 11m25.363890078s ago: executing program 33 (id=2265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0xfe, 0x0, 0x18}}}}}, 0x36) 9m44.123993445s ago: executing program 34 (id=4311): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x40, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffff7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) 8m40.732455262s ago: executing program 35 (id=5468): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 8m1.977907812s ago: executing program 36 (id=6160): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000240)=[@code={0xa, 0x47, {"660f6626470f65411b66660faebe008000000f214df367f3430f017f42d1c4b8010000000f01c14d0fc72eb9b30a00000f32460f01c2"}}], 0x47}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x3, 0x100000000, 0x0, 0xfffffffffffffff8, 0x100000, 0x0, 0x202004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe, 0x2000000000], 0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m38.717728149s ago: executing program 37 (id=6290): r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) 5m22.99405697s ago: executing program 38 (id=8715): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x23, [0xfffffff8, 0x8, 0x5, 0x9, 0x7, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000001, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x10001, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x8, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x6, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0xb6, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x5, 0x8e, 0xd50, 0x7, 0x2, 0x899, 0x401, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x4, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x1, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0xfffffff8, 0x1ff, 0x81, 0xfffffffc, 0x1, 0x1cb, 0x1, 0x80000004, 0x5, 0x438, 0x77, 0x9, 0x99, 0x7fffffff, 0x4, 0x5c, 0x1, 0x1000, 0xfffff801, 0x5], [0x4, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x82, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x1, 0x5, 0x9, 0xa, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x10000002, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3436, 0x3, 0xd, 0x3, 0x601, 0x0, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x2, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x6300, 0x40, 0xfb, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x0, 0x1ff, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x1b3a, 0x81, 0x3, 0x7, 0x3, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x2, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf5, 0xf, 0x5, 0x6, 0x7, 0x1, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x100400}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='e\x00\x00\x00'], 0x68}, 0x1, 0x0, 0x0, 0x80d0}, 0x4000880) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m53.349903698s ago: executing program 39 (id=11825): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@ip_retopts={{0x10}}], 0x10}, 0x40000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1802000043000701fefffffffcdbdf25037c000004004580000201"], 0x218}}, 0xc000) 3m29.418747375s ago: executing program 40 (id=12258): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00048491ef1a049a80442ae7c48f0526750d1753b5aa8ad4db53a1e7494a83f5"], 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c000) 2m35.020887204s ago: executing program 41 (id=13309): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x1e) write$binfmt_misc(r0, 0x0, 0x0) 2m29.044214553s ago: executing program 42 (id=13396): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) 2m27.393463605s ago: executing program 43 (id=13415): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) recvmsg$can_bcm(r1, &(0x7f00000003c0)={&(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/144, 0x90}], 0x1, &(0x7f0000000380)=""/53, 0x35}, 0x40000040) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x9, &(0x7f0000000400)=[{0xc, 0x5, 0x0, 0x7fff}, {0x1129, 0x1, 0xdf, 0x5a}, {0x7, 0xff, 0x9, 0x6}, {0x5, 0xa6, 0xe2, 0x7}, {0x4e0, 0x2, 0x9, 0x101}, {0xfffb, 0x1, 0x84, 0x1d9d}, {0xe, 0x36, 0x2, 0x659}, {0x1, 0xf9, 0x3, 0x5d}, {0x0, 0xa, 0x3, 0x200}]}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={r4, 0x0, r0, 0x5e8}) socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) 2m25.600165662s ago: executing program 44 (id=13437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0303000000000000000006001400080003f0", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 2m22.902551718s ago: executing program 45 (id=13458): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e74703", 0x3a}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000200)) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[], 0x290}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/66, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}, {&(0x7f0000000500)=""/151}], 0x2, 0x0, 0xffffffffffffffde}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m22.128121563s ago: executing program 46 (id=13462): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200), &(0x7f0000000240)={'enc=', 'oaep', ' hash=', {'tgr128\x00'}}, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626f6e643000000000000000000000001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r8 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_AUDIO(r8, 0x40345622, &(0x7f0000000080)={0x0, "b8819abe830087fffe82bb3915daf944c3968e5a7c02d94f403b3392a3406e33", 0x0, 0x1}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000002c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2m18.883060417s ago: executing program 47 (id=13489): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket(0x2, 0x80805, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000300)=ANY=[], 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x5509, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000c00), &(0x7f0000002000)=0x2) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000100)={0xae, [0xff, 0x1], 0x6}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x80, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="950002000000a35aa8490036cbfe42b57ffee3ee8a936c57db67d017211f0365b61b6736b8ef", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000810) 2m8.232184859s ago: executing program 48 (id=13629): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, 0x0, 0x0, 0x20000805}, 0x20000880) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m0.737418765s ago: executing program 49 (id=13729): r0 = io_uring_setup(0x122e, &(0x7f0000000000)={0x0, 0xa11a, 0x10000, 0x0, 0x365}) r1 = io_uring_setup(0xac6, &(0x7f0000000080)={0x0, 0xe34c, 0x400, 0x1, 0x14c, 0x0, r0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)=""/145, &(0x7f00000001c0)=0x91) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)=""/145, &(0x7f00000001c0)=0x91) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={r0, 0x0, 0x6, 0xbe}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={r0, 0x0, 0x6, 0xbe}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000280)={r3}) (async) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000280)={r3}) r4 = syz_open_dev$mouse(&(0x7f00000002c0), 0x1, 0x42000) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) io_uring_register$IORING_REGISTER_FILES2(r4, 0xd, &(0x7f0000000700)={0x6, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000400)=""/123, 0x7b}, {&(0x7f0000000480)=""/31, 0x1f}, {&(0x7f00000004c0)=""/132, 0x84}, {&(0x7f0000000580)=""/126, 0x7e}, {&(0x7f0000000600)=""/31, 0x1f}], &(0x7f00000006c0)=[0x3]}, 0x20) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r5 = syz_open_dev$dvb_demux(&(0x7f0000000880), 0x3, 0x1c0) ioctl$DVB_DEMUX_DMX_QUERYBUF(r5, 0xc0186f3d, &(0x7f00000008c0)={0x1, 0xf753, 0xfffffff8, 0x4, 0x14}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000009c0)={&(0x7f0000000900)=[0x0], 0x1, r6}) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000a40)="a7a85df32d74629ee99e6868354cd63115bcf99616729f7d526711d735e9e9da733045f88f3a5a5edd4f2efbe32ac919888d464dccaf36991b127385d9a704e4487db7365f81f2aaa0779da8eea134c0bb26b1e13da90903dcc62b31ffb49a69df2d132b1721f2df674e4b6b0c39b1482db87bd53678c16def17e367da4f", 0x7e) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000ac0)={0x4}) read$alg(r2, &(0x7f0000000b00)=""/2, 0x2) connect$inet6(r4, &(0x7f0000000b40)={0xa, 0x4e23, 0xfffffffb, @mcast1, 0x100}, 0x1c) process_madvise(r2, &(0x7f0000002e40)=[{&(0x7f0000000b80)="eb6e43840da7832d7b76ae0c89449b3267f32b08e2576d911f1c65585753c56b5852fe192052804152e001b9868c7f860b74e94535e618d976dc891b16584ae4f38bf2c79c8b84b4db2076df5fc868f31f48b430e0dcd5691b300e42d00d7d8bd3b23a74c3cae922ff6464b5e97ffb01360246ec5fe7af202dd06a8ef62fbb7d4b5b755702636e56055dc3bae8da7d78436bb6c4d03495ee7577ed571a2751f6641f7830ac81dc36869ee77ce8be1c75c1332dca1f3ba5f3a98b4d3dbb962d49a1d1b0d1fde532479d5c26fab49c1db89f5086f1db8f5142bca95a1e9be14ea8c52c", 0xe2}, {&(0x7f0000000c80)="bc139aae4ce49053c6c3ed379dae0499c278baf1f9a70ff6065ec6bf991eb19c3dc29b825afd34f200469f55585beb2464ede8e08963a75d0c06c8e2dc7ae19bb924c63321c4d067e4c073df066b65c97742e732a14cb1ed6bbb06d1118c53df1f0c25839fbf52eee7d8f3ed3697b9926ac15c720489890681f066aefe40dd42e123671cb7a57cbdd390600092e90e14c3b42d6f13196e130abfbdfaefee544875745c9f79da88ff550006fcf204d24a30d8d1f4effb2c231d2754a95827b05ae6a6346cc7deff2e4f103ad1d74fbd293bbc369464ed1578cce9e68f49c07317ecebdc8cc59dc0c2943e312ee94f68075c6725f13dd4c4a3a33d52795b7638d319385a46986f86509a96e912a45916a0b4de067a159a30fc5fff7435655529d9cf3b3928e1118b77d0551a076fdff61fc1b5f51aa6ab077b170c1a3bb32d7df38cfe41421a6d662bdef455f4e47afd1f6ffcb6fa256996afb418c038f75924a6b859119a850705942c8b8202cb60cddfeeb354771cedfd0600cac46231bba56015973dd3201012cea2b4585ada062335af7342848110fdd0833fe9b2ffac0a609404070e70cd9ffa9291cb32e435233a604feb392894f1e04a3af391efbaa05dcfe4b3f16bce5bf48b11469d5d89078c3050c2647a0aaf0dacdae4ed0c4c1287125dbb9bf819d79573cd1fe9d5361f5ac70c18acf65394f07e12898da34152cc75b26d82b5f8bc9e201b81bd301f476c6808aed134ef89aea191fa088ad505987deb65a4629283ef19d5c0a7632f75647fc2e4c5761ecc22a41af7ecb840dddc5208525240a060a399d0ac6ac1a4090d44cebaea9d3809487987ba81f75917b93209aa02deb6bd5c72a1505de6fbf2e71f734a0a4294fe0cf3f34a1b217cfc0ba28a36af7551e0fe4d9f201dbd1ddf094efe77c636c76e1fd46b9735d4bba2dc5976a764485277e290f71ef01e647581a37b37a85a21ba0ab69963ddbe3814434786d38af87a83d9b83e272a28a84c0a1f2c57b87bf4d5dce5f2c045dd3bcbe9af986c7a0af7c8829e0ddb77d71a60d53b40cdcfb5672de25431c80fd7297e95cf23ab92877f53e9f1840f7c91768b82a446a75c7ee11bdac575c5d9e5e07a2e139c7476b0341ed9bfdc62d25847fe4154b380c992780a50d800640a67d647614f5c4faa6337e16160d649e03b20483a4377fa9026044403e1eb4907e0fa7722469f1553592388a4de63995edb0dfacc983984c09c0fb31d5ce6d7b5b310d5c122589c2b1cce0cce620dfab9fb189cbec097a5dd5b7dccf70b67dbd34a3b106b078f4091349df34c142a5f7cafd1da11d80f70cccdde012bfa50301649420b2edbb416bcb05fb6e796389b2e3d8c1703f69bfdf078f68183a47da059e5ce0962a15dff77c88ec277913e4c9a4c00717b5cf11cee8a08c74cc187c0da23e17bf4da434e3e9c5462c0732063ad44fb64dee5bb5cd327795f9e23e415fe3731d45b675838122ad9d6a7eb0c122263ec6cab7ed501ef805f41cbb4a3ca6e1e6bcf119e104f79e36a0d7e1df7e9394087310e6e680945fef7275f74ea64ed228decbeedb0f9af88e3a3641e62a979272766df2bf4714942e3d12a36d86b2433e0a577b7fddee75320ffccf21c8d3ae528745584071e134ae8f0b1e959f9b2fad9f4eec713e9e57dbb2165c7b7d19c775449553ac27adeca3ee66dd3ceab57d5c68b0d1b83114f838a3b73cd4bae17113b2a2aa225bf5951ae6ca9dae054bcab3a97b98e2d4b734158f4ce23c49a5e76c5d758611924363f37ad97e228732055eeddcaf10456654001ea5844e077de3e99621e7011eba85f565f1859d7fd22e5583eab64b946554eaa5218dc4b0f3ea7833bf387be10b407ffb5bb99ab51ef5e2ed61c43eb500be748e1dfd88f1ba1897e410b516cdf04e0104c62afe606c163be1d01321afb91c451e118e38366f563ad109105940c7791a4bd69d9e33c8e59a2557a7c9f6a217d61bd910799aac36c3221fa2b38c6705f5e70d7cd5627f5112c8ac4b1d3b2814a2b495088323a35d343133765c2a40feac1be025011bfb296ef768ff55015d40153e2c4d06d2d8665cf932346a044ae5f36a8975aa4006127e7fd4d833e51db275d7dceb7d59a50d448f95850330aa6f00d50ff35fe98e49a8731dfe8a1ab58d43384c2c142a422f130ffb5da61d02343422de5a874f6c1214ac83ed386ce9c08163ef651f4063baefd5b344762a9bf4bcf2ef7957da4f40cb1e6dd508636d942c97747fae5469df0cfa9330d60dada14ae95a367986a3f8304721b4e9faa7c5943d0bf8313944abdc79d03bd8eee220a24ef05fdf9829d27370878e93da63750674ca975eb069f7bc64dd44f7d8fea81bf2c7234d108c82e3b43c00a7ab1a9da6ddc8ecfb690677d423bf82dbb19b079728abd3aec1f5cc3bf0100e75f712df28e26dc65fa8ae6d9fdcfa283669a58b7d37d189c3b9261670a474a20258797cf5e039ab4e7dfe58a9c3d8155a1519cc4180f6728b1889529c936c06c3a188861117218b7079b1039e3dc6ca262807596baa058906d997ae97c3d1a39ecb154ae7eb5fa30568c08fd4b746a6492e01f4b75bf19d6a5b1b17546b6e96293d5ea18409d52bb2fdc1bb9e40947f674bd7610f0615a706d059b8bcd9a9b3764c51bdcfe06d983df77a8d8e623e22d3a480ad3b85b2997813579a3fb7302bc03e43ccd5d3ccb500c372a21622b9036f9f2ad370623e555c7db65ce52e291c0a0897633629f0502507391476f47942dea7e92ba27d08c75d578f4269a446d12284cde015a8a6e41a1e1820ad3500695f4d702d1b0f700c0a188e4882f774b41ed8818ba756485b147fffe9389057283e695e7f64035d0f1dbddf0121460ee5407239cc70d69979963e65bd83d009c83104903491f14c32976b932ffaf72d1bcb83681c8797e70c5bef3fe4a7c9f84ba7d9a108a56160f9f30b8b3f0fa99f7a9b56e087dc94376ee71f686f96e9f071c6c39c6f86840d351531476a2ebc4f2e9a2cd91a994b2229c1590f7cc8b8374fd0888095d09e4af4e7aa098f2a124f669fcd6512011afad1e9dbce477fe30bb6466c3300bfb54d149f50144db07407c176dd23477ae4d1dcb9b64cb347885f0f19a7a9d24c806069d6c8ff796b98b9534d766d7d58ae7539f092035bcc39e01fc004a5602f15f8867c33e08ba134c39443c2b276a1d5a6decc74104aad603c7c9d1d809d7e7e79957b9102e3ad64a10ec34907054d2ce048782425a334d0d8ea96db79c0e52cba483b9bfaa1bd93ee8fcf53d3c9270fc79beb35d9330ce51f6385611ee5546921bab571f5b0991c7bfa942156a6e8df1caf77e16424f2d7cee98fb5132208c306c287606204f302f0b4135f49ad76b80f7dbed634d5a7f5766546917644c49ec438f368f7a7409a6bc61ae5c368812031405da839ee4670b8889491b22c6df2a8552cf4e312a2ee8924e3a51db70a94e0f012510bb29e54e37f1d4e3e224d909be8bd137f098cf13bd54b7b5569c2ba28ae5151568ddb99cb9cf7ce1399031b47ed4d483c3312fc55b05e03d18b33ebdb0959fed606be6a3823336ea632e8d03af34c72c10568c67c46753470c6b76ece9eacb4b579e816b77fb6ac74b98245e43daff7669f577ba20b6f64cb9f799c00d45643bca7e6be0d3dcd3f70fed8971bd1b4798e5c2a71a93e4c06ecb63b9cb4362ab56b3e40f044aa63f290baaa45ee2a6d56f2957b01cd1f5bc9719408a24cacf0fd2df5d4fcdb31c8b393ebaeb2eaa6d941f63fdcd50131f8beae0ddcab9b2018334daf7138d613afcbfe78d9e22a245be8d73997e5eb53ef85199eb095619f7495548a0c93504fe88004944b07d9f63169cb2a6edd738d9be668c77d6fba5d31bc8037b1b4411c6dcc1135f80daf00486ae080902b006b5a6cd024b3fded21b90b8fac261eb2ac1c8104813081006a697e4c967ac62bbf0056a61127caacf4b98936189dc7d595ee2f16cd5727d895679c2e11129179f4f61429dd57f78fd4dfb35322c9379b721014c4eaa562128d1846df6ddcaa5240f08fa622d47f75d845c4b42bcc66fe465bdc946b24b5323fd73d9908a2e1ff07f37b07dde78a8e565e930a377653fc53fad58a66b0b2ea7838fb9edb89b38c9a85ac8cbaeb764ed5eca284f324fc3896a307940266fe6650a21de3e6cbed337a34f662e757f691a215c00dda0156cf7b0902a72261c767f90fd69a479d0d5773af323d8b4c5a7588dc764f731fd542ca1f123b3d6641a8bdc63963c0d22d8a5c0221349266395e0ca8725936f158a3a50d1c993e175c531a16ac2e328aaf43a6412a481f26217112cb6520daeb6e3538fd3e88f3a1b3a35a082892c309c9ad11014388d9877fc639f6be29f9bade3e71b319bd2cf8afd4cd2d0be6662f2ef7f975e19008c6807b7c8bfe5d9dc814dd95bf96c28ef31f72b25b06da2cf238ad737acc935bd9e353dee49ca7712f5a61b5b468248a23cbc83e4db52251b3285f5bc8b674f3f2c19740cbf593759996f159ca06ab55520748034f6b0eaf74de3a849d9fbddfaf2b3491060d4c34d70097a76cc5b10d2d3610fef9085588ebce762b348a96afc4ae6458e62dcc6f44683f2037331ddc3e36f15edac2a61c4821173b78cd1007e8f161b0f103d8d509b8312a17f09a0e84806da9f58fbbe11cdcac832a16ab49d388ebc7af7b263ad5daef2c2655ce83170027b28c869f8fb86eebd12f660606536c10d516886044775ae60aed227980e726801ea4d73eba14bb4988de933e612ae5c18dd8bca80c84e1cb047a8a72d089d6eae4eac884d853f3c3ddfc65b7ea4990042c4b911f67f4d7ce9b929189fa73a288bb7b02adba12994f67c9de458c71a3a097e1a0e7eb994e9a6f708d911a66154eaf97ab53701febe7f1e970297fd4c7df8dc7f396cb1673148651320ae284d16b1bce9f15ff26d6188b1264a39897bb8c7f91f34fdbdcd8226100bee14762bf269d4474f95622c0f2b4ccb3ee09528d0cde015fc5db1880c7ca430ccf87064f5213dee4faa4c23d2276208ad7e1f52622736a0359cd47dc57b595c1491d013b71ebae49c2b3483d5e8e5e53d11aed9c88f428cbf9bf550b390ae35a936c47fc29d70e7a593261f1a6e82c11b4efca35332890fe0e2012c860469577d155cd7dffe82a06ef22bbc8881c3ec29998f20af9a64a0ba37046892cc11c7559699dfcfa0c54de54293191e8dfdf2b7b017a39dc7f69950c6898410b0271870b3e2c4670dd93d807071a813800511096679ae181ca9de5392b84ed719798ac0f1c9f477a3a94a2209903c3e69f42e48dd4d5e8b04fa866104549988bccf336fec7546fe9da24b444f2f43c33fb2775b2d418fa0fe282e7fa82fd242acccb681930009a804c49100f3aa943055559f0dc6eb23ad058212b19d1a559e49f4bd198051816252b8bcf8c359bbe078c402c711dbb659468196aa9072b775d85c17c301f51deeb63b6dee841e07c46a1c7f3627c6db9bd1aeae75f62eaa32bced8c620496027ef28b84cdf1b0cbf5b8a6d40b1a4eea935af635031b50daae4ae620d45a09919bd763ce99b6bef326a5c37128bbcd5bec20094c522cb74179cc5f258bc5237fa587156a84f1123d1c9e9a5aff82613fdd4498a4be49bf8d595b28ac3e1104e85c67c9322bd8d1f58cb6e0d508658ac9373c5cba40a1560c25f8930dcef01876ea42b42561022de98f055ab38c3607b0507db7b1cafee318eaba478b89028f957a9978dd6580a7ed5160", 0x1000}, {&(0x7f0000001c80)="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", 0x1000}, {&(0x7f0000002c80)="2bd89a1da79e8676b4f9a6bf034d0694d76cc1396ce7f856a5ce09d43bf2a2c978ef9120e16589f586a9119a3cf6389184f9e3de8714e94b25a1576e2e55cdc2e5b2a4c8d4381be24462714feac68ba850422f2d6a10ad785b913194175dd15350d0e0843dec983863f1f5ce0791d2dc41d931769c6cf7e6312e40402c4c47ecadf920404299beef4281e5f1f6c40e99a5048c243cc6b52c66114aa554419a2446a6104c6ac55981c00347f855211512bf729ba5a0f33df7f95930264a145d35cbd7877d2a74a073ca504a98c0", 0xcd}, {&(0x7f0000002d80)="8b1a9db421db9d3154d7d03a42be280a2168f771bdcf7936720391d2870dcc2b99e4352f7db517b028155c68fd1d0df140140f5e9ed7ea8b4bed322c3ae34780c5a3d95a3fb5101b3351d2e8c4d8ae277ee90f2a0b35671779f4f27a5a12ca96728bbcd6ce9173561e3596fbda351eb279b0f048ed5b467938707d87c691d6e848a3c0da6bfc0081fedb6e5ac060e850d4a63040bd83312be5ef1713b786", 0x9e}], 0x5, 0x10, 0x0) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f00)={0x5c, 0xc, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040840}, 0x4000000) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000003000)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000030c0), 0x2, 0x0) (async) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000030c0), 0x2, 0x0) write(r7, &(0x7f0000003100)="a0fdb6582927b44c324221fa9ee502259b7ec80f82e2d1beb9414d2ecb497f5fc720d2b90e648cfa4569e928f133b8b5ac7f03f89854f983fdeba2ec7d080ca4514a99a007375e050143ce15b2101c7157e319077daf69729c9a1348dd8aa6dcf660e7081c47c049616b4c156c81ebdbae", 0x71) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000003180)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000003180)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000003300)={0x48, 0x8, r8, 0x0, 0x9, 0xd0, &(0x7f0000003200)="5ee1e1d1e251a379db5fb6cbd462c401a39b8f6effd02d1ab097d3446ab0e1774f5cb23d6543cbde0b4dcdb2483ab4b61a76dafccebc57ef84a740a3f1ac03dcb7a3027f8b8000264df6915d1d9a89ed9b879354d4a9a2a281212bf05f50651ffe6904c83990353c7a4cb6517deea6eaf582eba30a99c34cfbf2438e8bbff867c229e3771d3098f5903054e6ed21084079b9f8471dcd6c9a57d2cde7139c91a68205f618c4d12bf2859d9b9fc3c71a3a617c2185db5f30427f6df9b48be42b478e75e8b5a0144adb0257d2c991fef43a"}) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000003300)={0x48, 0x8, r8, 0x0, 0x9, 0xd0, &(0x7f0000003200)="5ee1e1d1e251a379db5fb6cbd462c401a39b8f6effd02d1ab097d3446ab0e1774f5cb23d6543cbde0b4dcdb2483ab4b61a76dafccebc57ef84a740a3f1ac03dcb7a3027f8b8000264df6915d1d9a89ed9b879354d4a9a2a281212bf05f50651ffe6904c83990353c7a4cb6517deea6eaf582eba30a99c34cfbf2438e8bbff867c229e3771d3098f5903054e6ed21084079b9f8471dcd6c9a57d2cde7139c91a68205f618c4d12bf2859d9b9fc3c71a3a617c2185db5f30427f6df9b48be42b478e75e8b5a0144adb0257d2c991fef43a"}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) fcntl$getown(r8, 0x9) lsm_list_modules(&(0x7f0000003380)=[0x0], &(0x7f00000033c0)=0x8, 0x0) (async) lsm_list_modules(&(0x7f0000003380)=[0x0], &(0x7f00000033c0)=0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000003400)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000003400)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) recvmsg$kcm(r9, &(0x7f0000003580)={&(0x7f0000003440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000003540)=[{&(0x7f00000034c0)=""/120, 0x78}], 0x1}, 0x40002121) 1m56.150668632s ago: executing program 50 (id=13783): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000ac0)={0xa, 0x4e24, 0x3, @mcast1, 0xff}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x200}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)) read(r5, &(0x7f0000001600)=""/233, 0xe9) ptrace$setregset(0x4205, r4, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) ptrace(0x4207, r7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000000)={0xffffffffffffffff}) sendto$inet(r0, 0x0, 0x0, 0x4040883, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x42, 0x4, 0x1310, 0xffffffff, 0x98, 0x98, 0x11e0, 0xffffffff, 0xffffffff, 0x1278, 0x1278, 0x1278, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1148, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1370) sendto$inet(r0, 0x0, 0x0, 0x4004084, 0x0, 0x0) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800200001"], 0x48) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r10, &(0x7f00000002c0)=ANY=[], 0x13) close_range(r9, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x8000, 0x8, 0x10, 0x6}, {0x7, 0x2, 0x2}]}) syz_extract_tcp_res(0x0, 0x1, 0x2) 1m54.621513913s ago: executing program 51 (id=13800): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x200000, 0xa) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000040)) r1 = creat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f00000010c0)={0x2, @multicast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x13, 0x16, &(0x7f0000001100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}]}, &(0x7f00000011c0)='syzkaller\x00', 0xd, 0xad, &(0x7f0000001200)=""/173, 0x40f00, 0x3b, '\x00', 0x0, @fallback=0x21, r1, 0x8, &(0x7f00000012c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001300)={0x5, 0x2, 0xed, 0xd7}, 0x10, 0x0, r1, 0x5, &(0x7f0000001340)=[r0], &(0x7f0000001380)=[{0x4, 0x5, 0x7, 0x5}, {0x4, 0x3, 0x3, 0x7}, {0x0, 0x1, 0x2, 0x6}, {0x3, 0x40, 0x6, 0x5}, {0x2, 0x5, 0x4, 0x7}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={r2, 0x0, 0xf5, 0x20, &(0x7f00000014c0)="0f4268e4caa4ed81550972252d414bb66c189e53ac19a96c2b102f83a59d8202aef0237fc6bd299a45af1a48dca2d5428a8e156f4767292fa1bd96b55b1b4b0e880201b0e30bd1a24d378f8d6d98e4c5b1d7488470aa9e7d4ac4682ad7f61f0a9b63520656b3ffd226ca8fb646949c992536bd471608f0417fa1a283aa661c4609b268d64163ed4676a2574bb12ab3039fedcf2308a967fa9e5b9872ba63e7d52c5ad3856170b4ca512209e1071fd1bed34d82ea424af2724a2350795ec215f6db48adee91a19bc5cd5a1c06e484645b3393aa97036b2742262887b3c1e751586f850928380f37257ed3bd67e7b794b58b7fab5dd0", &(0x7f00000015c0)=""/32, 0x5, 0x0, 0x7c, 0x95, &(0x7f0000001600)="53abf4cbca9350008f466ebca2e7b9a3bc7d9d7bd38f08f304cb8b9ee05ab1d000b98a84538240b3a231cf1fa41525554490ecfcaa90d27c19e982790afe08ff35e9a244167a8d78cf3101c39672b04c09ed7ba1691ee1e2f3c80f28db2980e30b32d5f6e0f2ae00d2ae3471801f98674e2d26a18e47c3023de3674a", &(0x7f0000001680)="1bd3d347c9b0c1684e1aa6f43fc452f580624b6411be5daa524229f1a1bdd9de07bc37c661fb78ddeb46e1bf308e1ced50f683ad7f5e6b95c3b978b7050483c130e18ba747ddd1982928c8a2047b9dc404f4b4a7cb009700a0cd2a11b929dd144b6f592139032cfc3968f7774f3c61e611e1e75b7c3dc69c686d92f33b6cf7eff8bb9d4474ad20231e2d645307a66be37770852757", 0x2, 0x0, 0x7}, 0x50) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000017c0)='veth1_to_hsr\x00') ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r1, 0xc008644e, &(0x7f0000001800)={0x8}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001900)={{r1, 0xffffffffffffffff}, &(0x7f0000001840), &(0x7f00000018c0)=r3}, 0x20) mmap$snddsp_status(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x4, 0x10, r4, 0x82000000) open$dir(&(0x7f0000001940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80000, 0xc0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000002940)) r5 = syz_open_dev$mouse(&(0x7f0000002980), 0xfffffffffffffff9, 0x800) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000002b40)=0x0, &(0x7f0000002b80)=0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002bc0)={0x7ff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x11, 0x19, &(0x7f00000029c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@exit, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @alu={0x4, 0x1, 0x4, 0x4, 0x8, 0xffffffffffffffe0}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x7}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000002ac0)='GPL\x00', 0xb, 0x32, &(0x7f0000002b00)=""/50, 0x40f00, 0x4, '\x00', r6, @fallback=0x1e, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x1, &(0x7f0000002c00)=[r0, r1, r1, r0, r4], &(0x7f0000002c40)=[{0x1, 0x2, 0xd, 0x7}], 0x10, 0x8000}, 0x94) r8 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_UNLOCK(r8, 0xc) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000002d40)={0x0, 0x1}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002dc0), r0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000002fc0)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x1f3afaa48728389b}, 0xc, &(0x7f0000002f80)={&(0x7f0000002e00)={0x154, r9, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x382}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd1bf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x88}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x18c562af}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000054}, 0x24000800) mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x4, 0x8010, r5, 0x83000000) shmctl$IPC_RMID(r8, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003040), r5) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000003140)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003100)={&(0x7f0000003080)={0x80, r10, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}]}, 0x80}, 0x1, 0x0, 0x0, 0x881}, 0xc4) shmctl$IPC_INFO(r8, 0x3, &(0x7f0000003180)=""/133) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000033c0)={&(0x7f0000003240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003280)=[{}, {}], &(0x7f0000003340)=[0x0], &(0x7f0000003380)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000003580)={0x2, r11}) 1m43.833064876s ago: executing program 52 (id=13906): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3090000f1000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x2) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000009c0)={@ifindex, 0x1f, 0x0, 0x6c19, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0}, 0x40) (async, rerun: 32) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000a80)={0x9, 0x80000, r0}) (async, rerun: 64) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000ac0)={0x6, 0x0}, 0x8) (rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a40)={@cgroup=r5, r1, 0x10, 0x2038, 0x0, @void, @void, @value=r6, @void, r4}, 0x20) (async, rerun: 32) sendmmsg$inet(r3, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c00"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c9301ffffffff0000000000000000000000f90000000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa"], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000004c0)="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", 0x4c6}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000000a00)="01", 0x1}], 0x1}}], 0x4, 0xc080) (async, rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = fsmount(r2, 0x0, 0x4) (rerun: 64) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.stat\x00', 0x5000000, 0x0) sendfile(r2, r8, 0x0, 0xc486) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)) (async) socket$inet6_udp(0xa, 0x2, 0x0) 1m42.281409773s ago: executing program 0 (id=13924): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x20098}, 0x1c) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x1001) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x36, &(0x7f0000000200)=[@efer={0x2, 0x4000}, @flags={0x3, 0x100001}], 0x2) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 1m42.226631699s ago: executing program 0 (id=13925): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000003", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 1m42.225592621s ago: executing program 0 (id=13927): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newnexthop={0x24, 0x68, 0x1, 0x70bd2d, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x5865, 0x0, 0x24008000}, 0x40004) 1m42.078757645s ago: executing program 0 (id=13928): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='devpts\x00', 0x3000005, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000180)=""/58, 0x3a}, {&(0x7f0000000400)=""/98, 0x62}, {&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000500)=""/153, 0x99}, {&(0x7f0000000600)=""/93, 0x5d}], 0x6, &(0x7f0000000700)=""/112, 0x70}, 0x3}, {{&(0x7f0000000780)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f00000001c0)=""/26, 0x1a}, {&(0x7f00000008c0)=""/190, 0xbe}, {&(0x7f0000000980)=""/195, 0xc3}], 0x4, &(0x7f0000000a80)=""/250, 0xfa}, 0x3}, {{&(0x7f0000000b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000c00)=""/182, 0xb6}, {&(0x7f0000000cc0)=""/251, 0xfb}, {&(0x7f0000000dc0)=""/219, 0xdb}, {&(0x7f0000000ec0)=""/167, 0xa7}, {&(0x7f0000000f80)=""/140, 0x8c}, {&(0x7f0000001040)=""/6, 0x6}], 0x6}, 0xfffffff8}, {{&(0x7f0000001100)=@in={0x2, 0x0, @private}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001180)=""/253, 0xfd}, {&(0x7f0000001280)=""/118, 0x76}, {&(0x7f0000001300)=""/69, 0x45}, {&(0x7f0000001380)=""/172, 0xac}, {&(0x7f0000001440)=""/224, 0xe0}, {&(0x7f0000001540)=""/30, 0x1e}, {&(0x7f0000001580)=""/172, 0xac}, {&(0x7f0000001640)=""/74, 0x4a}], 0x8, &(0x7f0000001740)=""/243, 0xf3}, 0xb}], 0x4, 0x10000, &(0x7f0000001940)={0x77359400}) 1m41.042287619s ago: executing program 0 (id=13939): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6c", 0x41}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x290}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m40.861826021s ago: executing program 0 (id=13944): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045f5096cff39c6f6a7c34557ff2800002800000000080690786401fc254ae7570bd7105e73e37ebb071e26357fbc5500f58d41d9d56d5b86012154a4dd801a9bdf4a2656421bfe29825742e7f09e7ce9bce0925ae7962a16549de164093547cb240158951cfc30d7f9f329fb25328696395c5fbb4b1e3934494ff04da5f134733baaf578f9bc7587bb9490934dc4c7b8a742d660eac448224ea65564653c471c56d5603560a7325212a45fdbd6ac3e4da4b0b457f8a0e0ff75de61d606", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0800ca90781000"], 0x0) 1m40.73587699s ago: executing program 53 (id=13944): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045f5096cff39c6f6a7c34557ff2800002800000000080690786401fc254ae7570bd7105e73e37ebb071e26357fbc5500f58d41d9d56d5b86012154a4dd801a9bdf4a2656421bfe29825742e7f09e7ce9bce0925ae7962a16549de164093547cb240158951cfc30d7f9f329fb25328696395c5fbb4b1e3934494ff04da5f134733baaf578f9bc7587bb9490934dc4c7b8a742d660eac448224ea65564653c471c56d5603560a7325212a45fdbd6ac3e4da4b0b457f8a0e0ff75de61d606", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0800ca90781000"], 0x0) 1m28.203905698s ago: executing program 3 (id=14140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='v', 0x1}], 0x1, 0x66, 0x0) timerfd_create(0x9, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r5, &(0x7f0000000180)=@file={0x1}, 0x6e) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r6, 0x400caed0, &(0x7f00000000c0)={[{0x1ff, 0x5, 0x9, 0x7f, 0x5, 0x9, 0xe0, 0xb, 0x4, 0x0, 0x0, 0x3, 0xfffffffffffffffb}, {0x4, 0x0, 0x2, 0x4, 0x7, 0x7, 0x9, 0x9, 0xfc, 0x6, 0xb, 0x75, 0x6}, {0x4, 0x3, 0x5, 0x9, 0x2, 0x0, 0x6, 0x8, 0x30, 0x6, 0x5, 0x7, 0x3}], 0x80000000}) 1m28.139307521s ago: executing program 3 (id=14144): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028001300280000000a00000002000000000000010200416c806c00010800000001000004090000000400000001000000010000000061615f5f0000305f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) 1m28.064671423s ago: executing program 3 (id=14146): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x45}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}, 0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') lseek(r2, 0x5, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af83, &(0x7f0000000400)={0x1d}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="110000000000000000000000f52f7cd3a42009f7be4593e0029ff6a740fa68de4ebc20f23cf4ec78ba5c181754b7c10722c7715f4eeb7e97fa3ed2d23c1134edca44fbc222a9", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0xa) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff25, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000600)=ANY=[], 0x10) recvmmsg(r8, &(0x7f00000024c0)=[{{&(0x7f0000000300)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/180, 0xb4}, {&(0x7f0000000380)=""/64, 0x40}], 0x2, &(0x7f0000000600)=""/144, 0x90}}, {{&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000740)=""/252, 0xfc}, {&(0x7f0000000840)=""/115, 0x73}, {&(0x7f00000008c0)=""/151, 0x97}, {&(0x7f0000000980)=""/202, 0xca}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x5, &(0x7f0000001b00)=""/244, 0xf4}, 0x9}, {{&(0x7f0000001c00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001c80)=""/206, 0xce}], 0x1}, 0x4}, {{&(0x7f0000001dc0)=@qipcrtr, 0x80, &(0x7f0000002400)=[{&(0x7f0000001e40)=""/151, 0x97}, {&(0x7f0000001f00)=""/162, 0xa2}, {&(0x7f0000001fc0)=""/103, 0x67}, {&(0x7f0000002040)=""/94, 0x5e}, {&(0x7f00000020c0)=""/81, 0x51}, {&(0x7f0000002140)=""/211, 0xd3}, {&(0x7f0000002240)=""/201, 0xc9}, {&(0x7f0000002340)=""/186, 0xba}], 0x8, &(0x7f0000002480)=""/50, 0x32}, 0x6}], 0x4, 0x2060, &(0x7f00000025c0)={0x0, 0x3938700}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x6], 0x0, 0x0, 0x1}}, 0x40) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x4}) getdents64(r2, &(0x7f0000000140)=""/187, 0xbb) 1m27.751942703s ago: executing program 3 (id=14154): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='devpts\x00', 0x3000005, 0x0) 1m27.751182814s ago: executing program 3 (id=14155): clock_gettime(0x6, &(0x7f0000006980)={0x0, 0x0}) clock_settime(0x0, &(0x7f00000069c0)={r0, r1+10000000}) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x200, 0x0, 0x4, 0x0, 0x0, 0x4}, 0xe) (async) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r4 = getpid() (async) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_open_dev$dri(0x0, 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0), 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) (async) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x15}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2b030000008002001c00128009000100626f6e64000000000c0002800800050001000010"], 0x3c}, 0x1, 0x0, 0x0, 0xfb8d14993e11c6ae}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r7}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) (async) unshare(0x22020400) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) (async) connect(r3, &(0x7f00000000c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80) 1m27.570377003s ago: executing program 3 (id=14156): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000040)={0xc4, 0x0, 0x7}) 1m27.512447538s ago: executing program 54 (id=14156): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000040)={0xc4, 0x0, 0x7}) 1m26.887882851s ago: executing program 1 (id=14167): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xb) 1m26.886810049s ago: executing program 1 (id=14169): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x36, &(0x7f0000000200)=[@efer={0x2, 0x4000}, @flags={0x3, 0x100001}], 0x2) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) (fail_nth: 22) 1m26.716374062s ago: executing program 1 (id=14172): socket(0xa, 0x5, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x600, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1m26.599634052s ago: executing program 1 (id=14175): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3f00) 1m26.599362913s ago: executing program 1 (id=14176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="66b843008ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f38822042394a04b8010000000f01d9410f01df", 0x3c}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xcc9) 1m25.912622439s ago: executing program 1 (id=14184): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{r2, r3+60000000}}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 1m25.867226287s ago: executing program 55 (id=14184): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{r2, r3+60000000}}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 1m13.150236633s ago: executing program 8 (id=14430): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) ioctl$sock_proto_private(r0, 0x89e7, &(0x7f0000000080)="6ca1a06b66beff94023028c791629d24bf3db72018e13879bf1d68c84cab9eb12877966bc1dffa6d2b7804d53341d7b245d43d8f552e5b5266b4bc839f0d31472f254269ff973af6f27454beec3df7de66537fb5b0702e572ac8e046e9428170d45129628b9794d8541c9932f358f4ebf4f62cade9945ee5257739bcf8fc36e9a53a04584349db2f7b94607bdf1088399d0b02f46c56e36ec3bf9f0424edc6ef25a021") r2 = creat(&(0x7f0000000440)='./bus\x00', 0x5) open_by_handle_at(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000f80003000000003dfb"], 0xd71640) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f0000001580)=[{0x5, 0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/233, 0xe9}, {&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/123, 0x7b}, {&(0x7f0000000480)=""/146, 0x92}], &(0x7f0000000000)=[0x8, 0x2]}, {0x3, 0x1, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/119, 0x77}, {&(0x7f0000000640)=""/229, 0xe5}, {&(0x7f0000000740)=""/78, 0x4e}], &(0x7f00000007c0)=[0x1, 0x7]}, {0x6, 0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/22, 0x16}, {&(0x7f0000000900)=""/21, 0x15}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000980)=""/94, 0x5e}, {&(0x7f0000000a00)=""/104, 0x68}], &(0x7f0000000b00)=[0x2, 0x2, 0x0, 0x101, 0x6, 0x10001, 0xb25, 0x0]}, {0x2, 0x1, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b40)=""/26, 0x1a}, {&(0x7f0000000b80)=""/33, 0x21}], &(0x7f0000000c00)=[0x6, 0x4]}, {0x2, 0x1, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c40)=""/110, 0x6e}, {&(0x7f0000000cc0)=""/244, 0xf4}], &(0x7f0000000e00)=[0x22f, 0x3, 0x4d, 0x40, 0x2]}, {0x1, 0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/167, 0xa7}], &(0x7f0000000f40)=[0x53450e6d, 0x1c00, 0x4, 0x8, 0x6, 0x8]}, {0xa, 0x1, 0x0, &(0x7f0000001480)=[{&(0x7f0000000f80)=""/94, 0x5e}, {&(0x7f0000001000)=""/174, 0xae}, {&(0x7f00000010c0)=""/24, 0x18}, {&(0x7f0000001100)=""/19, 0x13}, {&(0x7f0000001140)=""/55, 0x37}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/165, 0xa5}, {&(0x7f0000001240)=""/242, 0xf2}, {&(0x7f0000001340)=""/182, 0xb6}, {&(0x7f0000001400)=""/114, 0x72}], &(0x7f0000001540)=[0x8b]}], 0x7) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1m13.146133924s ago: executing program 8 (id=14433): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e, 0x0, 0x3f}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000054) 1m12.262775506s ago: executing program 8 (id=14448): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x3000000000000}, 0x0) 1m12.177978784s ago: executing program 8 (id=14452): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='devpts\x00', 0x3000005, 0x0) 1m12.177543885s ago: executing program 8 (id=14453): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x8f, 0x0, 0x9}]}) 1m11.911783781s ago: executing program 8 (id=14461): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0x158, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000002000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "b512b3880e60fe3f6b54c6b909007c9f70d0cfe93e43e9da39542d"}}]}, 0x158}}, 0x844) 1m11.872845771s ago: executing program 56 (id=14461): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0x158, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000002000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "b512b3880e60fe3f6b54c6b909007c9f70d0cfe93e43e9da39542d"}}]}, 0x158}}, 0x844) 1m8.049263236s ago: executing program 7 (id=14526): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x6, 0x200000) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000340)={0x3, 0xa9, &(0x7f0000000280)="593ab1408d6f5198c339f30e1ec54dfa014b8abb1e73afe65c0adf3a15f1df92fb294a23bf52a7a072385d42dba21ebbd56fb7b621d8aa98c1f2c8d98f1ba8e259f431b59bc10574757fe4f82f827f163bec9dbac309807974e7b1d47cc3fd8c0c2d907bf7935e26d027e9ab55ffaafe1414db5af80baee1d9d167d24a2432adab2fa8e93242a4d20db697cafd6aca0651f510ad2f32ae3133a346b17a60c500a2a327c33cd52f5fb1"}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfb61cb0106df6c98}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x411, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x2000000, 0x80}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES8=r1, @ANYBLOB="ad432bbd7000000000000d000000d93a668ee45c10cae95576c22a3f5d2d8318bcd23187a829cb3b95678d9a7dca8ca8c7b7ac210dee5654dfcab5d900"/70], 0x14}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0xbfb, 0x6, 0x7, 0xa}, 0xfffe, 0x9}}, 0x0, 0x600) 1m7.931277867s ago: executing program 7 (id=14527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000102c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0xfc, 0x40004}, 0x0) 1m7.845380984s ago: executing program 7 (id=14529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000006f40)='./file0\x00', 0x140) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1m7.696839619s ago: executing program 7 (id=14533): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='devpts\x00', 0x3000005, 0x0) 1m7.696262635s ago: executing program 7 (id=14534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x38, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d05, 0x0, 0x9}]}) 1m7.497754318s ago: executing program 7 (id=14538): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000200)={r8, 0x0, 0x0, 0x6, 0x3, [], [0x0, 0x0, 0x200000], [0x0, 0xfffffffc, 0xfffffff7], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000bc0)={r8, 0x2, 0xffffffff, 0xc, 0x2, [], [0x4, 0x9, 0x9, 0x5], [0xa, 0x6, 0x40, 0x2], [0xab, 0x2, 0x2, 0x9]}) close_range(r5, 0xffffffffffffffff, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1m7.391454978s ago: executing program 57 (id=14538): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000200)={r8, 0x0, 0x0, 0x6, 0x3, [], [0x0, 0x0, 0x200000], [0x0, 0xfffffffc, 0xfffffff7], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000bc0)={r8, 0x2, 0xffffffff, 0xc, 0x2, [], [0x4, 0x9, 0x9, 0x5], [0xa, 0x6, 0x40, 0x2], [0xab, 0x2, 0x2, 0x9]}) close_range(r5, 0xffffffffffffffff, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1m3.84170682s ago: executing program 9 (id=14539): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @random="facfff00716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3f000000010000", 0x7) 1m3.75937151s ago: executing program 9 (id=14616): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) 1m3.696137161s ago: executing program 9 (id=14619): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e74703", 0x3a}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x290}}], 0x1, 0x810) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0xdc, r0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000080}, 0x10080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m3.435861965s ago: executing program 9 (id=14624): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='devpts\x00', 0x3000005, 0x0) 1m3.420320178s ago: executing program 9 (id=14626): r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x2, 0x501) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0405626, &(0x7f0000000000)={0x0, 0x0, {0x9, 0x2000005, 0xd, 0x3, 0x0, 0x8, 0x1, 0x5}}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x106c0, 0x0) 1m1.556710576s ago: executing program 9 (id=14654): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f000070b000/0x5000)=nil, 0x5000, 0x1000004) lseek(r5, 0x2004, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x21c9b000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) 1m1.521831964s ago: executing program 58 (id=14654): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f000070b000/0x5000)=nil, 0x5000, 0x1000004) lseek(r5, 0x2004, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x21c9b000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) 1.113170907s ago: executing program 5 (id=16388): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000003000000090001"], 0x2c}}, 0x0) 1.040093413s ago: executing program 5 (id=16390): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x8001c9ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 1.039382463s ago: executing program 5 (id=16393): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000280)={&(0x7f0000000080)=0x3, 0x8, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000240)}) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@private=0xa010102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x8}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe5}, {0x2}, 0x70bd2c, 0x0, 0xa, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in=@dev={0xac, 0x14, 0x14, 0x2e}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x2004c805}, 0x40880) 987.275472ms ago: executing program 5 (id=16396): io_uring_setup(0xf08, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000540)={0x5, 0x6dff, 0x3fb, 0x0, 0x12}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r4, r4, 0x2e}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r6, r4, 0x4, r4}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="61023300503001000802110000010802110000"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 622.911628ms ago: executing program 2 (id=16408): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 569.398718ms ago: executing program 2 (id=16409): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x30, 0x1e, 0x21, 0x70bd2d, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r5, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r5, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) readv(r5, &(0x7f0000000680), 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000180)={0x1, [[0x4, 0x5, 0x0, 0xfffffff8, 0x97b, 0xfffffff7, 0x2, 0x1], [0x7b, 0x1, 0x8, 0x6e19, 0x8, 0x5, 0x100, 0xc2], [0x6, 0xcc, 0x7f, 0xe9, 0xffffffff, 0xc, 0x1, 0xfa2b]], '\x00', [{0x4, 0x6fa88b0b, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x32, 0x0, 0x1}, {0xff, 0x1, 0x1, 0x1}, {0xffff, 0xb, 0x1, 0x1}, {0x40000000, 0x10, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x2, 0x1, 0x1, 0x1}, {0xf1f0, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x10000, 0x1ff, 0x1, 0x1, 0x1}, {0x0, 0x5, 0x1, 0x0, 0x1}, {0x7, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xd1, 0x0, 0x0, 0x1}, {0xc204, 0x7f, 0x0, 0x0, 0x0, 0x1}], '\x00', 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1070, 0x28, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x40000000000002, 0x400000000024}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/229, 0xe5, 0x2}, @fda={0x66646185, 0x9, 0x1, 0x10}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r7, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="671723d7c60133", 0x7}, {&(0x7f0000000280)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a", 0x21}], 0x2}, 0x20008b88) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0xa, 0xffffff25}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000440)={r8, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000000500)=0x84) 568.020657ms ago: executing program 2 (id=16411): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {0x0}, {&(0x7f00000008c0)=""/185, 0xb9}, {&(0x7f00000024c0)=""/4092, 0xffc}, {&(0x7f0000000b80)=""/66, 0x42}, {&(0x7f00000002c0)=""/35, 0x23}], 0x6}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) 485.175965ms ago: executing program 2 (id=16416): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000027300000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 419.046914ms ago: executing program 2 (id=16419): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747", 0x39}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x290}}], 0x1, 0x810) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0xdc, r0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000080}, 0x10080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 354.371503ms ago: executing program 6 (id=16422): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0xe7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 354.193485ms ago: executing program 4 (id=16423): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x24000895) r1 = socket$inet(0x2, 0x800, 0xffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r3, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r3, 0x0, &(0x7f00005de000/0x2000)=nil, 0x2000, 0xfffffffffffffff2}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r3, 0x0, &(0x7f0000000300)="469b", 0x2, 0x4}) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) r4 = fcntl$dupfd(r1, 0x0, r1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x8, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)="341c6970826c8d4b5c11b970df9ba99356da67926a9ec3ade529abcdb90bd856d940b30d62502e8bd2da2273e46adca15152c3ada09720c93730f8a240b97dc3ddaf3933416584aeea0849e24c15887cf481a02d1fac21c4741da961105b326e43fc2389a5dac54db82491d54d0fe46230d76297c86effdba339d1eeea410793dc09c0117a422e04d047174251dec07a31cb58e4773ab8715a2a4189fa87ab20b6c6153fc96fe645fa33a965ed60bcc4fc93319cb4397ad0e0e5671cf342697e8f01c11fed", 0xc5}], 0x1}}], 0x1, 0x4008041) write$binfmt_elf32(r4, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0xeb, 0xa, 0x63, 0x8, 0x10, 0x3, 0x3, 0xffffffff, 0xef, 0x38, 0xf7, 0x3, 0x4, 0x20, 0x1, 0x829, 0x9, 0xb0}, [{0x4, 0xfffffa17, 0xb, 0x7, 0x0, 0x0, 0xfffffffd}], "05ae1a9f8d766d9df83fc8787720eb6849b8df982a057e64eac5f98841b8fe3a5e1e5961dfe869293e69ab3e75e8c3a8f3f17031acb50bd52ef6ed4678727edce38ea0560eda594bed354a", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5a3) syz_genetlink_get_family_id$fou(&(0x7f0000000300), r4) shutdown(r1, 0x1) 353.992705ms ago: executing program 6 (id=16424): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[], 0x290}}], 0x1, 0x810) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0xdc, r0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000080}, 0x10080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 353.845952ms ago: executing program 4 (id=16425): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) (async) r1 = fsopen(&(0x7f0000000180)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f0000000140)='./file0\x00') (async) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$overlay(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0), 0x10000, &(0x7f0000002300)={[{@redirect_dir_follow}, {@redirect_dir_on}, {@index_on}, {@volatile}, {@index_off}, {@metacopy_off}, {@metacopy_on}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@fowner_gt={'fowner>', r3}}]}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{0xa, 0x6, 0x0, 0xe34, '\x00', 0x5}, 0x1, 0x400, 0x4, r4, 0x1, 0x9, 'syz1\x00', &(0x7f0000000040)=['/dev/nullb0\x00'], 0xc}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="edc08818", 0x4}, {0x0, 0x13}], 0x2) 237.951128ms ago: executing program 4 (id=16426): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e74703", 0x3a}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[], 0x290}}], 0x1, 0x810) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0xc8, r0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000080}, 0x10080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 128.672513ms ago: executing program 4 (id=16427): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x204603, 0x0) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000040)=@hsk={0x2, 0x3, "c52e30e2a3"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r1, 0x0, r1, 0x0, 0x7, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r9 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x121a00) ioctl$MON_IOCX_MFETCH(r9, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x6}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r6, 0x603, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xff}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}]}, 0x30}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x200, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x34040086}, 0x8080) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000005}, 0x4000884) 127.043346ms ago: executing program 6 (id=16435): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000001c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997", 0x27}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce9035979", 0xac}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b4", 0x3a}], 0x3}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 76.699727ms ago: executing program 5 (id=16428): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a00000002000020000000010200416c806c00010800000001000004090000000400000001000000010000000061615f5f0000305f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) 75.631626ms ago: executing program 6 (id=16429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x14, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) 64.072735ms ago: executing program 4 (id=16430): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2, 0x400300}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="671723d7c60133", 0x7}, {&(0x7f0000000280)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a", 0x21}], 0x2}, 0x20008b88) 929.361µs ago: executing program 2 (id=16431): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f0000289000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000c67000/0x3000)=nil) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000852000/0x2000)=nil) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r4, &(0x7f0000001780)=[{&(0x7f0000000680)=""/115, 0x73}, {&(0x7f0000000480)=""/231, 0xe7}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000001800)=""/129, 0x81}, {&(0x7f0000000580)=""/228, 0xe4}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x7) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r6, 0x0, &(0x7f00006fb000/0x3000)=nil, 0x3000, 0x8}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}, 0x3}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000d8a000/0x3000)=nil, 0x3000}) madvise(&(0x7f0000cbf000/0x1000)=nil, 0x1000, 0x4) munmap(&(0x7f0000446000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00003d6000/0x8000)=nil, 0x8000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x1c4, 0x0, 0x9}]}) 718.157µs ago: executing program 5 (id=16432): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x8001, 0x1, 0x2, 0xc, 0x6b, 0x8}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x8001, 0x1, 0x2, 0xc, 0x6b, 0x8}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1715, 0x4b7bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) 632.053µs ago: executing program 6 (id=16433): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000008100000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 445.777µs ago: executing program 4 (id=16434): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e74703", 0x3a}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[], 0x290}}], 0x1, 0x810) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x10080) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 6 (id=16436): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e74703", 0x3a}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[], 0x290}}], 0x1, 0x810) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0xc8, r0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000080}, 0x10080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): process `syz.4.14656'. [ 791.780264][T13902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.796357][T13915] bridge0: entered promiscuous mode [ 791.798425][T13915] macsec1: entered allmulticast mode [ 791.800346][T13915] bridge0: entered allmulticast mode [ 791.803212][T13915] bridge0: port 3(macsec1) entered blocking state [ 791.805874][T13915] bridge0: port 3(macsec1) entered disabled state [ 791.809661][T13915] bridge0: left allmulticast mode [ 791.811236][T13915] bridge0: left promiscuous mode [ 791.827464][T13902] team0: Port device team_slave_0 added [ 791.830950][T13902] team0: Port device team_slave_1 added [ 791.850699][T13902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.852900][T13902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.860851][T13902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.865332][T13902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.867762][T13902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.875599][T13902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.904649][T13902] hsr_slave_0: entered promiscuous mode [ 791.907044][T13902] hsr_slave_1: entered promiscuous mode [ 791.909184][T13902] debugfs: 'hsr0' already exists in 'hsr' [ 791.911781][T13902] Cannot create hsr debugfs directory [ 792.153402][T13934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14661'. [ 792.161742][T13934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14661'. [ 792.231807][T13942] netlink: 232 bytes leftover after parsing attributes in process `syz.2.14663'. [ 792.640369][T13902] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 792.645063][T13902] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 792.649955][T13902] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 792.660015][T13902] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 792.691318][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 792.706024][T13902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.717551][T13902] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.727469][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.730019][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.740335][ T1198] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.742996][ T1198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.768613][T13975] EXT4-fs error: 2499 callbacks suppressed [ 792.768626][T13975] EXT4-fs error (device sda1): ext4_lookup:1785: inode #182: comm chmod: iget: checksum invalid [ 792.797709][T13977] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm rm: iget: checksum invalid [ 792.801922][T13978] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 792.818793][T13979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 792.836494][T13980] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 792.842998][T13982] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 792.846961][T13982] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 792.850774][T13982] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 792.855185][T13981] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 792.856120][T13982] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 792.892095][T13902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.013802][T14005] overlayfs: missing 'lowerdir' [ 793.027027][T13902] veth0_vlan: entered promiscuous mode [ 793.033024][T13902] veth1_vlan: entered promiscuous mode [ 793.053235][T13902] veth0_macvtap: entered promiscuous mode [ 793.059008][T13902] veth1_macvtap: entered promiscuous mode [ 793.068583][T13902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.074961][T13902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.082321][ T1144] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.101363][T14013] bond1: option downdelay: invalid value (18446744073709551615) [ 793.103715][T14013] bond1: option downdelay: allowed values 0 - 2147483647 [ 793.106919][T14013] bond1 (unregistering): Released all slaves [ 793.120255][ T1144] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.123128][ T1144] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.133927][ T1144] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.241735][ T46] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.265841][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.270259][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.307617][ T1198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.310065][ T1198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.337629][ T46] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.371009][ T40] audit: type=1800 audit(786.382:1541): pid=14031 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.14673" name="/newroot/37/file0" dev="tmpfs" ino=212 res=0 errno=0 [ 793.446362][ T46] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.583586][ T46] bridge_slave_1: left allmulticast mode [ 793.586042][ T46] bridge_slave_1: left promiscuous mode [ 793.588378][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.595659][ T46] bridge_slave_0: left allmulticast mode [ 793.597535][ T46] bridge_slave_0: left promiscuous mode [ 793.599458][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.688447][T14067] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14681'. [ 793.718501][ T5944] Bluetooth: hci2: command tx timeout [ 793.723075][T12369] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 793.738918][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 793.745237][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.749233][ T46] bond0 (unregistering): Released all slaves [ 793.768338][T14067] 8021q: adding VLAN 0 to HW filter on device bond3 [ 793.803951][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 793.873798][T14078] netlink: 232 bytes leftover after parsing attributes in process `syz.6.14682'. [ 793.893595][T12369] usb 10-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 793.903007][T12369] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.905595][T12369] usb 10-1: Product: syz [ 793.906990][T12369] usb 10-1: Manufacturer: syz [ 793.908481][T12369] usb 10-1: SerialNumber: syz [ 793.915782][T12369] usb 10-1: config 0 descriptor?? [ 793.922489][T12369] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 793.933384][T12369] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 793.936738][T12369] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 793.939739][T12369] usb 10-1: media controller created [ 793.948936][T12369] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 793.979023][T12369] DVB: Unable to find symbol mt352_attach() [ 794.000138][T12369] DVB: Unable to find symbol nxt6000_attach() [ 794.003340][T12369] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 794.014936][T12369] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input52 [ 794.020686][T12369] dvb-usb: schedule remote query interval to 1000 msecs. [ 794.023121][T12369] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 794.026703][T12369] dvb-usb: bulk message failed: -22 (7/0) [ 794.030372][T12369] dvb-usb: bulk message failed: -22 (7/0) [ 794.140108][T14051] dvb-usb: bulk message failed: -22 (7/0) [ 794.146975][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14677'. [ 794.179282][ T40] audit: type=1400 audit(787.130:1542): avc: denied { create } for pid=14049 comm="syz.5.14677" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 794.185656][T14051] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14677'. [ 794.230945][T14108] FAULT_INJECTION: forcing a failure. [ 794.230945][T14108] name failslab, interval 1, probability 0, space 0, times 0 [ 794.235413][T14108] CPU: 3 UID: 0 PID: 14108 Comm: syz.4.14688 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.235431][T14108] Tainted: [L]=SOFTLOCKUP [ 794.235435][T14108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 794.235442][T14108] Call Trace: [ 794.235446][T14108] [ 794.235450][T14108] dump_stack_lvl+0x100/0x190 [ 794.235503][T14108] should_fail_ex.cold+0x5/0xa [ 794.235520][T14108] ? tomoyo_realpath_from_path+0xb6/0x690 [ 794.235544][T14108] should_failslab+0xc2/0x120 [ 794.235559][T14108] __kmalloc_noprof+0xe0/0x850 [ 794.235575][T14108] tomoyo_realpath_from_path+0xb6/0x690 [ 794.235592][T14108] tomoyo_path_number_perm+0x23c/0x580 [ 794.235610][T14108] ? tomoyo_path_number_perm+0x22e/0x580 [ 794.235639][T14108] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 794.235672][T14108] ? find_held_lock+0x2b/0x80 [ 794.235685][T14108] ? __fget_files+0x215/0x3d0 [ 794.235700][T14108] ? hook_file_ioctl_common+0x146/0x410 [ 794.235718][T14108] ? __fget_files+0x21f/0x3d0 [ 794.235736][T14108] security_file_ioctl+0xd3/0x230 [ 794.235749][T14108] __x64_sys_ioctl+0xb7/0x210 [ 794.235764][T14108] do_syscall_64+0x106/0xf80 [ 794.235788][T14108] ? clear_bhb_loop+0x40/0x90 [ 794.235806][T14108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.235818][T14108] RIP: 0033:0x7fa00af9bf79 [ 794.235828][T14108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.235839][T14108] RSP: 002b:00007fa00bea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.235850][T14108] RAX: ffffffffffffffda RBX: 00007fa00b215fa0 RCX: 00007fa00af9bf79 [ 794.235857][T14108] RDX: 0000200000000200 RSI: 000000004008ae89 RDI: 0000000000000005 [ 794.235864][T14108] RBP: 00007fa00bea6090 R08: 0000000000000000 R09: 0000000000000000 [ 794.235871][T14108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.235877][T14108] R13: 00007fa00b216038 R14: 00007fa00b215fa0 R15: 00007ffe8e9c3188 [ 794.235893][T14108] [ 794.235898][T14108] ERROR: Out of memory at tomoyo_realpath_from_path. [ 794.328617][T14051] bond1 (unregistering): Released all slaves [ 794.344836][ T46] hsr_slave_0: left promiscuous mode [ 794.347230][ T46] hsr_slave_1: left promiscuous mode [ 794.349549][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.351919][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.354825][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.357248][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.366299][ T46] veth1_macvtap: left promiscuous mode [ 794.368153][ T46] veth0_macvtap: left promiscuous mode [ 794.369967][ T46] veth1_vlan: left promiscuous mode [ 794.375976][ T46] veth0_vlan: left promiscuous mode [ 794.454660][T12369] usb 10-1: USB disconnect, device number 26 [ 794.506195][T12369] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 794.572045][ T46] team0 (unregistering): Port device team_slave_1 removed [ 794.582497][ T46] team0 (unregistering): Port device team_slave_0 removed [ 794.866130][T14148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14700'. [ 794.900997][T14151] FAULT_INJECTION: forcing a failure. [ 794.900997][T14151] name failslab, interval 1, probability 0, space 0, times 0 [ 794.905121][T14151] CPU: 3 UID: 0 PID: 14151 Comm: syz.4.14701 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.905140][T14151] Tainted: [L]=SOFTLOCKUP [ 794.905144][T14151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 794.905150][T14151] Call Trace: [ 794.905155][T14151] [ 794.905160][T14151] dump_stack_lvl+0x100/0x190 [ 794.905195][T14151] should_fail_ex.cold+0x5/0xa [ 794.905211][T14151] ? tomoyo_encode2+0xfb/0x3c0 [ 794.905223][T14151] should_failslab+0xc2/0x120 [ 794.905238][T14151] __kmalloc_noprof+0xe0/0x850 [ 794.905254][T14151] tomoyo_encode2+0xfb/0x3c0 [ 794.905269][T14151] tomoyo_encode+0x29/0x50 [ 794.905281][T14151] tomoyo_realpath_from_path+0x18c/0x690 [ 794.905298][T14151] tomoyo_path_number_perm+0x23c/0x580 [ 794.905316][T14151] ? tomoyo_path_number_perm+0x22e/0x580 [ 794.905335][T14151] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 794.905368][T14151] ? find_held_lock+0x2b/0x80 [ 794.905381][T14151] ? __fget_files+0x215/0x3d0 [ 794.905396][T14151] ? hook_file_ioctl_common+0x146/0x410 [ 794.905415][T14151] ? __fget_files+0x21f/0x3d0 [ 794.905444][T14151] security_file_ioctl+0xd3/0x230 [ 794.905459][T14151] __x64_sys_ioctl+0xb7/0x210 [ 794.905474][T14151] do_syscall_64+0x106/0xf80 [ 794.905490][T14151] ? clear_bhb_loop+0x40/0x90 [ 794.905504][T14151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.905516][T14151] RIP: 0033:0x7fa00af9bf79 [ 794.905526][T14151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.905537][T14151] RSP: 002b:00007fa00bea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.905564][T14151] RAX: ffffffffffffffda RBX: 00007fa00b215fa0 RCX: 00007fa00af9bf79 [ 794.905571][T14151] RDX: 0000200000000200 RSI: 000000004008ae89 RDI: 0000000000000005 [ 794.905578][T14151] RBP: 00007fa00bea6090 R08: 0000000000000000 R09: 0000000000000000 [ 794.905585][T14151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.905592][T14151] R13: 00007fa00b216038 R14: 00007fa00b215fa0 R15: 00007ffe8e9c3188 [ 794.905607][T14151] [ 794.916396][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 794.917059][T14151] ERROR: Out of memory at tomoyo_realpath_from_path. [ 794.934134][T14156] overlayfs: failed to clone upperpath [ 795.003242][ T40] audit: type=1400 audit(787.896:1543): avc: denied { link } for pid=14155 comm="syz.6.14703" name="file0" dev="tmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 795.295031][T14189] netlink: 60 bytes leftover after parsing attributes in process `syz.6.14709'. [ 795.298003][ T46] bridge_slave_1: left allmulticast mode [ 795.299877][ T46] bridge_slave_1: left promiscuous mode [ 795.304495][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.310983][ T46] bridge_slave_0: left allmulticast mode [ 795.314139][ T46] bridge_slave_0: left promiscuous mode [ 795.316866][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.471228][T14209] fuse: Bad value for 'fd' [ 795.523616][T14215] netlink: 'syz.2.14716': attribute type 32 has an invalid length. [ 795.639436][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.647000][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.653241][ T46] bond0 (unregistering): Released all slaves [ 795.705815][T14223] netlink: 'syz.6.14718': attribute type 13 has an invalid length. [ 795.765224][T14232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44310 sclass=netlink_route_socket pid=14232 comm=syz.6.14718 [ 795.787762][T14232] overlayfs: missing 'lowerdir' [ 795.943696][ T5944] Bluetooth: hci2: command tx timeout [ 796.039627][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 796.150663][T14272] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 796.251939][T14281] netlink: 'syz.2.14735': attribute type 1 has an invalid length. [ 796.252713][T14283] geneve1: entered allmulticast mode [ 796.271318][T14281] bond3: entered promiscuous mode [ 796.273159][T14281] 8021q: adding VLAN 0 to HW filter on device bond3 [ 796.304491][ T46] hsr_slave_0: left promiscuous mode [ 796.309214][ T46] hsr_slave_1: left promiscuous mode [ 796.311760][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.314352][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.319084][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.321576][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.333750][ T46] veth1_macvtap: left promiscuous mode [ 796.335782][ T46] veth0_macvtap: left promiscuous mode [ 796.337873][ T46] veth1_vlan: left promiscuous mode [ 796.340678][ T46] veth0_vlan: left promiscuous mode [ 796.382460][T14303] netlink: 'syz.4.14742': attribute type 10 has an invalid length. [ 796.439868][T14310] netlink: 'syz.4.14742': attribute type 10 has an invalid length. [ 796.539035][ T46] team0 (unregistering): Port device team_slave_1 removed [ 796.549194][ T46] team0 (unregistering): Port device team_slave_0 removed [ 796.631883][T14303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.636921][T14303] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 796.654014][T14310] batadv0: entered promiscuous mode [ 796.655753][T14310] batadv0: entered allmulticast mode [ 796.671439][T14310] bond0: (slave batadv0): Releasing backup interface [ 796.686533][T14310] bridge0: port 3(batadv0) entered blocking state [ 796.688861][T14310] bridge0: port 3(batadv0) entered disabled state [ 796.716577][ T1144] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 796.719923][ T1144] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 796.785917][ T9605] IPVS: starting estimator thread 0... [ 796.818476][T14336] netlink: 'syz.4.14753': attribute type 12 has an invalid length. [ 796.878754][T14330] IPVS: using max 46 ests per chain, 110400 per kthread [ 796.981904][ T40] audit: type=1400 audit(789.747:1544): avc: denied { setopt } for pid=14349 comm="syz.2.14757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 797.141699][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 797.234420][T14391] __nla_validate_parse: 8 callbacks suppressed [ 797.234433][T14391] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.14769'. [ 797.243070][T14391] netlink: Conntrack attr has 4 unknown bytes [ 797.260266][T10271] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 797.440962][T10271] usb 9-1: Using ep0 maxpacket: 8 [ 797.443968][T10271] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 797.446890][T10271] usb 9-1: config 0 has no interface number 0 [ 797.449311][T10271] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 797.453133][T10271] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 797.456712][T10271] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 797.460470][T10271] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 797.464274][T10271] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 797.470423][T10271] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 797.473828][T10271] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.476383][T10271] usb 9-1: Product: syz [ 797.477708][T10271] usb 9-1: Manufacturer: syz [ 797.479281][T10271] usb 9-1: SerialNumber: syz [ 797.482572][T10271] usb 9-1: config 0 descriptor?? [ 797.704377][T10271] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 797.927857][T14368] overlay: ./file0 is not a directory [ 797.937420][T10271] usb 9-1: USB disconnect, device number 9 [ 798.027924][T14416] batman_adv: batadv0: Adding interface: macsec1 [ 798.028682][T14417] dns_resolver: Unsupported content type (234) [ 798.030123][T14416] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.040752][T14416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.043994][T14416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.047093][T14416] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 798.169022][ T5944] Bluetooth: hci2: command tx timeout [ 798.210775][T14433] netlink: 'syz.2.14783': attribute type 5 has an invalid length. [ 798.254031][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 798.269664][T14439] IPv6: Can't replace route, no match found [ 798.366803][T14449] EXT4-fs error: 1394 callbacks suppressed [ 798.366815][T14449] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 798.389323][T14452] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 798.579160][T14467] netlink: 84 bytes leftover after parsing attributes in process `syz.5.14796'. [ 798.579279][T14468] netlink: 84 bytes leftover after parsing attributes in process `syz.5.14796'. [ 798.586551][T14463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14794'. [ 798.863834][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 799.045590][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 799.048523][ T10] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 799.051000][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 799.053342][T14470] netlink: 232 bytes leftover after parsing attributes in process `syz.6.14797'. [ 799.054007][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 799.060318][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 799.063323][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 799.068196][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 799.071031][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.083370][ T6013] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 799.087063][ T6013] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 799.093312][ T6013] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 799.292059][ T10] usb 9-1: GET_CAPABILITIES returned 0 [ 799.294023][ T10] usbtmc 9-1:16.0: can't read capabilities [ 799.366618][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 799.378888][ T40] audit: type=1400 audit(792.000:1545): avc: denied { validate_trans } for pid=14482 comm="syz.5.14802" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 799.507240][ T3251] usb 9-1: USB disconnect, device number 10 [ 799.609818][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14806'. [ 799.750908][T14498] FAULT_INJECTION: forcing a failure. [ 799.750908][T14498] name failslab, interval 1, probability 0, space 0, times 0 [ 799.755082][T14498] CPU: 0 UID: 0 PID: 14498 Comm: syz.5.14808 Tainted: G L syzkaller #0 PREEMPT(full) [ 799.755100][T14498] Tainted: [L]=SOFTLOCKUP [ 799.755105][T14498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 799.755112][T14498] Call Trace: [ 799.755116][T14498] [ 799.755120][T14498] dump_stack_lvl+0x100/0x190 [ 799.755142][T14498] should_fail_ex.cold+0x5/0xa [ 799.755157][T14498] ? tomoyo_realpath_from_path+0xb6/0x690 [ 799.755171][T14498] should_failslab+0xc2/0x120 [ 799.755186][T14498] __kmalloc_noprof+0xe0/0x850 [ 799.755202][T14498] tomoyo_realpath_from_path+0xb6/0x690 [ 799.755219][T14498] tomoyo_path_number_perm+0x23c/0x580 [ 799.755237][T14498] ? tomoyo_path_number_perm+0x22e/0x580 [ 799.755256][T14498] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 799.755289][T14498] ? find_held_lock+0x2b/0x80 [ 799.755301][T14498] ? __fget_files+0x215/0x3d0 [ 799.755316][T14498] ? hook_file_ioctl_common+0x146/0x410 [ 799.755334][T14498] ? __fget_files+0x21f/0x3d0 [ 799.755352][T14498] security_file_ioctl+0xd3/0x230 [ 799.755366][T14498] __x64_sys_ioctl+0xb7/0x210 [ 799.755380][T14498] do_syscall_64+0x106/0xf80 [ 799.755396][T14498] ? clear_bhb_loop+0x40/0x90 [ 799.755410][T14498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.755422][T14498] RIP: 0033:0x7fe0a519bf79 [ 799.755432][T14498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.755466][T14498] RSP: 002b:00007fe0a600c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 799.755478][T14498] RAX: ffffffffffffffda RBX: 00007fe0a5415fa0 RCX: 00007fe0a519bf79 [ 799.755485][T14498] RDX: 0000200000000200 RSI: 000000004008ae89 RDI: 0000000000000005 [ 799.755497][T14498] RBP: 00007fe0a600c090 R08: 0000000000000000 R09: 0000000000000000 [ 799.755503][T14498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.755510][T14498] R13: 00007fe0a5416038 R14: 00007fe0a5415fa0 R15: 00007fff8d6ca638 [ 799.755525][T14498] [ 799.755531][T14498] ERROR: Out of memory at tomoyo_realpath_from_path. [ 800.006242][T14502] Invalid logical block size (18) [ 800.129953][T14509] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 800.164216][T14512] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 800.193734][T14514] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 800.220674][T14515] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 800.278200][T14522] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 800.283343][T14522] exFAT-fs (nullb0): invalid boot record signature [ 800.285413][T14522] exFAT-fs (nullb0): failed to read boot sector [ 800.290468][T14522] exFAT-fs (nullb0): failed to recognize exfat type [ 800.305849][T14526] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 800.341225][T14532] Invalid logical block size (19) [ 800.404388][ T5944] Bluetooth: hci2: command tx timeout [ 800.433614][T14544] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14826'. [ 800.479155][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 800.585045][ T13] bridge_slave_1: left allmulticast mode [ 800.586610][T14572] netlink: 'syz.6.14834': attribute type 13 has an invalid length. [ 800.587674][T10214] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 800.592117][ T13] bridge_slave_1: left promiscuous mode [ 800.594408][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.605069][ T13] bridge_slave_0: left allmulticast mode [ 800.607192][ T13] bridge_slave_0: left promiscuous mode [ 800.609857][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.613427][T14574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14835'. [ 800.623205][ T13] bridge_slave_1: left allmulticast mode [ 800.625393][ T13] bridge_slave_1: left promiscuous mode [ 800.627754][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.637470][ T13] bridge_slave_0: left allmulticast mode [ 800.639828][ T13] bridge_slave_0: left promiscuous mode [ 800.641173][T14575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44310 sclass=netlink_route_socket pid=14575 comm=syz.6.14834 [ 800.642052][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.648469][T14575] overlayfs: missing 'lowerdir' [ 800.769118][T10214] usb 10-1: config 1 interface 0 has no altsetting 0 [ 800.783374][T10214] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 800.786232][T10214] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.788736][T10214] usb 10-1: Product: syz [ 800.791353][T10214] usb 10-1: Manufacturer: syz [ 800.792826][T10214] usb 10-1: SerialNumber: syz [ 800.902108][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.907623][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.913111][ T13] bond0 (unregistering): Released all slaves [ 801.066752][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.071617][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.075526][ T13] bond0 (unregistering): Released all slaves [ 801.139514][T14584] xt_TCPMSS: Only works on TCP SYN packets [ 801.151555][T14584] xt_bpf: check failed: parse error [ 801.231921][T10214] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 801.591639][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 801.604076][T14610] netlink: zone id is out of range [ 801.606536][T14610] netlink: get zone limit has 4 unknown bytes [ 801.685745][ T13] hsr_slave_0: left promiscuous mode [ 801.688721][ T13] hsr_slave_1: left promiscuous mode [ 801.691011][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.693410][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.696542][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.699119][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.705863][ T13] hsr_slave_0: left promiscuous mode [ 801.708357][ T13] hsr_slave_1: left promiscuous mode [ 801.729381][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.739087][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.762341][ T13] veth1_macvtap: left promiscuous mode [ 801.764850][ T13] veth0_macvtap: left promiscuous mode [ 801.890429][ T13] team0 (unregistering): Port device team_slave_1 removed [ 802.025302][ T13] team0 (unregistering): Port device team_slave_1 removed [ 802.037825][ T13] team0 (unregistering): Port device team_slave_0 removed [ 802.110289][T14624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14851'. [ 802.499742][T14667] FAULT_INJECTION: forcing a failure. [ 802.499742][T14667] name failslab, interval 1, probability 0, space 0, times 0 [ 802.504264][T14667] CPU: 2 UID: 0 PID: 14667 Comm: syz.4.14863 Tainted: G L syzkaller #0 PREEMPT(full) [ 802.504282][T14667] Tainted: [L]=SOFTLOCKUP [ 802.504287][T14667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 802.504293][T14667] Call Trace: [ 802.504298][T14667] [ 802.504302][T14667] dump_stack_lvl+0x100/0x190 [ 802.504324][T14667] should_fail_ex.cold+0x5/0xa [ 802.504339][T14667] ? tomoyo_encode2+0xfb/0x3c0 [ 802.504352][T14667] should_failslab+0xc2/0x120 [ 802.504367][T14667] __kmalloc_noprof+0xe0/0x850 [ 802.504384][T14667] tomoyo_encode2+0xfb/0x3c0 [ 802.504398][T14667] tomoyo_encode+0x29/0x50 [ 802.504411][T14667] tomoyo_realpath_from_path+0x18c/0x690 [ 802.504427][T14667] tomoyo_path_number_perm+0x23c/0x580 [ 802.504445][T14667] ? tomoyo_path_number_perm+0x22e/0x580 [ 802.504471][T14667] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 802.504504][T14667] ? find_held_lock+0x2b/0x80 [ 802.504517][T14667] ? __fget_files+0x215/0x3d0 [ 802.504532][T14667] ? hook_file_ioctl_common+0x146/0x410 [ 802.504550][T14667] ? __fget_files+0x21f/0x3d0 [ 802.504568][T14667] security_file_ioctl+0xd3/0x230 [ 802.504581][T14667] __x64_sys_ioctl+0xb7/0x210 [ 802.504595][T14667] do_syscall_64+0x106/0xf80 [ 802.504610][T14667] ? clear_bhb_loop+0x40/0x90 [ 802.504625][T14667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.504637][T14667] RIP: 0033:0x7fa00af9bf79 [ 802.504647][T14667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.504658][T14667] RSP: 002b:00007fa00bea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 802.504669][T14667] RAX: ffffffffffffffda RBX: 00007fa00b215fa0 RCX: 00007fa00af9bf79 [ 802.504676][T14667] RDX: 0000200000000040 RSI: 00000000800448d4 RDI: 0000000000000004 [ 802.504682][T14667] RBP: 00007fa00bea6090 R08: 0000000000000000 R09: 0000000000000000 [ 802.504689][T14667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.504696][T14667] R13: 00007fa00b216038 R14: 00007fa00b215fa0 R15: 00007ffe8e9c3188 [ 802.504710][T14667] [ 802.504721][T14667] ERROR: Out of memory at tomoyo_realpath_from_path. [ 802.611762][T14670] tun0: tun_chr_ioctl cmd 1074025675 [ 802.613927][T14670] tun0: persist enabled [ 802.615965][T14670] tun0: tun_chr_ioctl cmd 1074025675 [ 802.621368][T14670] tun0: persist disabled [ 802.704169][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 802.767220][T14668] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 802.902990][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14869'. [ 802.966571][T14689] netlink: 'syz.4.14870': attribute type 13 has an invalid length. [ 803.004396][T14689] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.006958][T14689] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.021681][T14690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44310 sclass=netlink_route_socket pid=14690 comm=syz.4.14870 [ 803.026591][T14690] overlayfs: missing 'lowerdir' [ 803.049959][T14689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.055554][T14689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.144064][ T61] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.146918][ T61] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.153521][ T61] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.156518][ T61] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.195260][ T40] audit: type=1400 audit(795.562:1546): avc: denied { setattr } for pid=14694 comm="syz.4.14871" name="SCTP" dev="sockfs" ino=235030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 803.203239][ T40] audit: type=1400 audit(795.571:1547): avc: denied { map } for pid=14694 comm="syz.4.14871" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 803.232568][ C3] usblp0: nonzero write bulk status received: -71 [ 803.237691][ T6001] usb 10-1: USB disconnect, device number 27 [ 803.253882][ T6001] usblp0: removed [ 803.268941][T14703] sctp: [Deprecated]: syz.2.14874 (pid 14703) Use of struct sctp_assoc_value in delayed_ack socket option. [ 803.268941][T14703] Use struct sctp_sack_info instead [ 803.363353][T14710] fuse: Bad value for 'fd' [ 803.417534][T14715] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 803.668524][T14742] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.14889'. [ 803.816707][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 803.854999][T14755] EXT4-fs error: 411 callbacks suppressed [ 803.855014][T14755] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 803.896646][T14756] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 803.904275][T14759] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 803.908733][T14759] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 803.912572][T14759] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 803.916644][T14759] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 803.920491][T14759] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 803.927300][T14759] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 803.927779][T14761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14896'. [ 803.930912][T14759] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 803.938191][T14759] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 804.207600][ T40] audit: type=1400 audit(796.506:1548): avc: denied { ioctl } for pid=14788 comm="syz.5.14907" path="socket:[235934]" dev="sockfs" ino=235934 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 804.237251][T14797] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.14909'. [ 804.324812][T14809] netlink: 'syz.5.14913': attribute type 5 has an invalid length. [ 804.331102][T14809] ip6erspan0: entered promiscuous mode [ 804.393935][T14813] netlink: 596 bytes leftover after parsing attributes in process `syz.5.14915'. [ 804.520395][T14824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14920'. [ 804.929460][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 805.000324][T14884] IPVS: length: 18 != 8 [ 805.013156][T14886] netlink: 76 bytes leftover after parsing attributes in process `syz.2.14937'. [ 805.109007][T14896] fuse: Bad value for 'fd' [ 805.236492][T14910] netlink: 'syz.2.14941': attribute type 13 has an invalid length. [ 805.291366][T14914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44310 sclass=netlink_route_socket pid=14914 comm=syz.2.14941 [ 805.296576][T14914] overlayfs: missing 'lowerdir' [ 805.527453][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.530993][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.538711][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.541652][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.660026][T14927] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14945'. [ 805.684380][T14927] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14927 comm=syz.5.14945 [ 805.754985][T14934] netlink: 6040 bytes leftover after parsing attributes in process `syz.5.14948'. [ 805.810798][T14940] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.14950'. [ 805.852288][T14939] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 805.886210][T14954] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 805.927725][T14959] netlink: 'syz.6.14959': attribute type 10 has an invalid length. [ 805.935150][T14959] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 805.974657][T14959] bond1: (slave bond0): Releasing active interface [ 805.979958][T14959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.987431][T14959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.995093][T14959] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 806.003693][T14959] bond0 (unregistering): Released all slaves [ 806.041502][T14974] netlink: ct family unspecified [ 806.042109][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 806.078329][T14976] mkiss: ax0: crc mode is auto. [ 806.113381][T14981] netlink: 'syz.5.14967': attribute type 9 has an invalid length. [ 806.127614][ T40] audit: type=1326 audit(798.300:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.2.14966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8619b9bf79 code=0x7ffc0000 [ 806.130484][T14981] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 806.134892][ T40] audit: type=1326 audit(798.300:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.2.14966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8619b9bf79 code=0x7ffc0000 [ 806.145776][T14981] macvtap0: entered allmulticast mode [ 806.146931][ T40] audit: type=1326 audit(798.300:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.2.14966" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8619b9bf79 code=0x7ffc0000 [ 806.148083][T14981] veth0_macvtap: entered allmulticast mode [ 806.156098][ T40] audit: type=1326 audit(798.310:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.2.14966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8619b9bf79 code=0x7ffc0000 [ 806.179163][ T40] audit: type=1326 audit(798.310:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14982 comm="syz.2.14966" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8619b5c84e code=0x7ffc0000 [ 806.188327][ T40] audit: type=1326 audit(798.310:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.2.14966" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8619b9bf79 code=0x7ffc0000 [ 806.197701][ T40] audit: type=1326 audit(798.310:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.2.14966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8619b9bf79 code=0x7ffc0000 [ 806.206467][ T40] audit: type=1326 audit(798.310:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.2.14966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8619b9bf79 code=0x7ffc0000 [ 806.214997][ T40] audit: type=1326 audit(798.310:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.2.14966" exe="/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8619b9bf79 code=0x7ffc0000 [ 806.410267][T15008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=15008 comm=syz.4.14971 [ 806.493208][T15015] netlink: ct family unspecified [ 806.504142][T15017] Invalid logical block size (85) [ 807.087950][T15050] netlink: ct family unspecified [ 807.154595][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 808.052945][T15111] Invalid logical block size (245) [ 808.156534][T15106] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=60 sclass=netlink_tcpdiag_socket pid=15106 comm=syz.6.14998 [ 808.216377][T15131] fuse: blksize only supported for fuseblk [ 808.277585][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 808.492916][ T40] audit: type=1400 audit(800.516:1558): avc: denied { lock } for pid=15153 comm="syz.5.15018" path="/dev/v4l-subdev0" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 808.659914][T15174] FAT-fs (nullb0): bogus number of reserved sectors [ 808.661959][T15174] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 808.666203][T15174] __nla_validate_parse: 7 callbacks suppressed [ 808.666214][T15174] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15025'. [ 808.671292][T15174] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 808.743153][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15028'. [ 808.811778][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15030'. [ 808.986985][T15200] Invalid logical block size (768) [ 809.004633][T15202] ipt_rpfilter: unknown options [ 809.052013][T15208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15040'. [ 809.061084][T15209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15040'. [ 809.063887][T15209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15040'. [ 809.110408][T15214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 809.139263][T15222] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 809.142313][T15222] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 809.156513][T15222] netlink: 'syz.2.15045': attribute type 2 has an invalid length. [ 809.312993][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15050'. [ 809.390147][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 809.494287][T15249] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 809.498716][T15247] overlay: Bad value for 'verity' [ 809.502541][T15247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15051'. [ 809.505401][T15247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15051'. [ 810.037708][T15279] netlink: 'syz.4.15062': attribute type 2 has an invalid length. [ 810.245233][T15284] EXT4-fs error: 639 callbacks suppressed [ 810.245247][T15284] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 810.273430][T15288] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 810.325547][T15297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15067'. [ 810.409620][ C1] sr 2:0:0:0: [sr0] tag#11 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 810.412996][ C1] sr 2:0:0:0: [sr0] tag#11 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 810.501187][T15318] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 810.502712][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 810.522026][T15320] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 810.700166][T15346] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 810.719455][T15347] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 810.787811][T15353] netlink: zone id is out of range [ 810.802669][T15353] bridge0: port 3(syz_tun) entered blocking state [ 810.804881][T15353] bridge0: port 3(syz_tun) entered disabled state [ 810.807112][T15353] syz_tun: entered allmulticast mode [ 810.809703][T15353] syz_tun: entered promiscuous mode [ 810.967089][ T5337] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 810.971812][ T5337] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 810.975657][ T5337] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 811.070540][T15377] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 811.604519][ C2] net_ratelimit: 55 callbacks suppressed [ 811.604532][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 811.872848][T15414] netlink: 'syz.4.15110': attribute type 4 has an invalid length. [ 811.886829][T15417] netlink: ct family unspecified [ 812.014678][T15437] macsec2: entered promiscuous mode [ 812.113579][T15457] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 812.123668][T15440] syzkaller0: entered promiscuous mode [ 812.125436][T15440] syzkaller0: entered allmulticast mode [ 812.216065][T15464] overlayfs: failed to clone upperpath [ 812.348984][T15479] overlay: ./file0 is not a directory [ 812.393039][T15496] netlink: ct family unspecified [ 812.418356][T15499] erspan1: entered promiscuous mode [ 812.717575][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 812.850471][T15550] Invalid logical block size (7936) [ 812.876672][T15552] No control pipe specified [ 812.941355][T15565] netlink: ct family unspecified [ 813.051139][T15582] input: syz0 as /devices/virtual/input/input54 [ 813.128199][T15593] overlayfs: missing 'lowerdir' [ 813.153252][T15597] macvtap1: entered promiscuous mode [ 813.155000][T15597] macvtap1: entered allmulticast mode [ 813.161580][T15597] mac80211_hwsim hwsim86 wlan0: entered allmulticast mode [ 813.163860][T15597] mac80211_hwsim hwsim86 wlan0: entered promiscuous mode [ 813.166968][T15597] team0: Device macvtap1 failed to register rx_handler [ 813.169566][T15597] mac80211_hwsim hwsim86 wlan0: left allmulticast mode [ 813.171616][T15597] mac80211_hwsim hwsim86 wlan0: left promiscuous mode [ 813.441859][T15620] netlink: ct family unspecified [ 813.623671][T15641] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 813.682935][T15649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15649 comm=syz.5.15197 [ 813.782462][T15654] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 813.818931][T15658] netlink: ct family unspecified [ 813.829796][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 813.933746][T15668] Invalid logical block size (21760) [ 814.581268][T15707] __nla_validate_parse: 21 callbacks suppressed [ 814.581282][T15707] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.15217'. [ 814.586326][T15707] netlink: ct family unspecified [ 814.630162][T15714] Invalid logical block size (38911) [ 814.728970][T15725] netlink: 'syz.5.15224': attribute type 4 has an invalid length. [ 814.761781][T15731] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.15227'. [ 815.109896][T15758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15236'. [ 815.112850][T15758] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15236'. [ 815.290235][T15769] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.15239'. [ 815.321567][T15771] CIFS: iocharset name too long [ 815.541595][T15793] Invalid logical block size (51711) [ 815.560704][T15796] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15248'. [ 815.564059][T15796] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15248'. [ 815.572793][T15798] : renamed from vlan0 [ 815.660130][T15804] mkiss: ax0: crc mode is auto. [ 815.663120][T15804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15253'. [ 815.666058][T15804] netlink: 'syz.4.15253': attribute type 7 has an invalid length. [ 815.674795][ T1144] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.674855][T15804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15253'. [ 815.677869][ T1144] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.680722][T15804] netlink: 'syz.4.15253': attribute type 7 has an invalid length. [ 815.691056][ T1144] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.694229][ T1144] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.710108][T15813] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.15255'. [ 815.745170][T15815] devpts: Bad value for 'max' [ 815.805138][T15824] netlink: 'syz.5.15260': attribute type 13 has an invalid length. [ 815.808126][T15824] netlink: 'syz.5.15260': attribute type 5 has an invalid length. [ 815.878742][T15830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.925164][T15836] EXT4-fs error: 39 callbacks suppressed [ 815.925177][T15836] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 815.949252][T15837] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 816.370767][T15850] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 816.638247][T15860] netlink: 'syz.4.15275': attribute type 6 has an invalid length. [ 816.640864][T15860] netlink: 'syz.4.15275': attribute type 5 has an invalid length. [ 816.643591][T15860] netlink: 'syz.4.15275': attribute type 4 has an invalid length. [ 816.906654][T15884] netlink: 'syz.2.15284': attribute type 10 has an invalid length. [ 816.910466][ T5944] Bluetooth: hci2: command tx timeout [ 816.915271][T15884] syz_tun: left allmulticast mode [ 816.916980][T15884] syz_tun: left promiscuous mode [ 816.918753][T15884] bridge0: port 3(syz_tun) entered disabled state [ 816.926746][T15884] bridge_slave_0: left allmulticast mode [ 816.928580][T15884] bridge_slave_0: left promiscuous mode [ 816.930610][T15884] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.937933][T15884] bridge_slave_1: left allmulticast mode [ 816.939817][T15884] bridge_slave_1: left promiscuous mode [ 816.941787][T15884] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.949533][T15884] bond0: (slave bond_slave_0): Releasing backup interface [ 816.953987][T15884] bond0: (slave bond_slave_1): Releasing backup interface [ 816.958886][T15884] team0: Port device team_slave_0 removed [ 816.964538][T15884] team0: Port device team_slave_1 removed [ 816.966965][T15884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.970127][T15884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.974301][T15884] net_ratelimit: 7 callbacks suppressed [ 816.974311][T15884] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 816.985300][T15893] netlink: ct family unspecified [ 817.052145][T15900] nfs4: Unknown parameter ''' [ 817.063358][T15898] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 817.111142][T15914] vxcan1: entered allmulticast mode [ 817.137930][T15916] random: crng reseeded on system resumption [ 817.150812][T15916] PM: hibernation: Image mismatch: memory size [ 817.167170][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 817.174495][T15923] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 817.196801][T15930] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 817.218080][T15931] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 817.245111][T15938] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 817.257777][T15940] fuse: Bad value for 'group_id' [ 817.259494][T15940] fuse: Bad value for 'group_id' [ 817.270244][T15941] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 817.291791][T15947] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 817.299723][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 817.299735][ T40] audit: type=1401 audit(808.752:1562): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 817.371368][T15965] netlink: 'syz.6.15313': attribute type 21 has an invalid length. [ 817.603340][T16014] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=16014 comm=syz.6.15334 [ 817.610002][T16014] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=16014 comm=syz.6.15334 [ 817.614487][T16014] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16014 comm=syz.6.15334 [ 817.656511][T16014] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=56 sclass=netlink_tcpdiag_socket pid=16014 comm=syz.6.15334 [ 817.883351][T16057] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 817.883464][T16056] IPVS: stopping backup sync thread 16057 ... [ 817.905337][T10214] IPVS: starting estimator thread 0... [ 818.012229][T16059] IPVS: using max 46 ests per chain, 110400 per kthread [ 818.280036][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 818.324528][T16110] "syz.5.15361" (16110) uses obsolete ecb(arc4) skcipher [ 818.333624][ T5944] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 818.355422][T16105] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 818.361860][T16105] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 818.370519][T16105] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 818.374192][T16105] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 818.382005][T16105] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 818.385066][T16105] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 818.446897][T16116] IPv6: addrconf: prefix option has invalid lifetime [ 818.994798][ T40] audit: type=1326 audit(810.331:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16091 comm="syz.2.15357" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8619b9bf79 code=0x7fc00000 [ 819.011982][T16146] netlink: 'syz.4.15374': attribute type 11 has an invalid length. [ 819.392250][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 819.486457][ T40] audit: type=1326 audit(810.789:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16184 comm="syz.4.15390" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa00af9bf79 code=0x0 [ 819.817891][T16197] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.826523][T16197] bridge_slave_0 (unregistering): left allmulticast mode [ 819.828751][T16197] bridge_slave_0 (unregistering): left promiscuous mode [ 819.832398][T16197] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.920705][T16206] fuse: Bad value for 'fd' [ 820.015778][T16214] __nla_validate_parse: 22 callbacks suppressed [ 820.015790][T16214] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.15403'. [ 820.094063][T16218] bond1: (slave geneve3): making interface the new active one [ 820.096883][T16218] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 820.100810][ T1198] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 820.103831][ T1198] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 820.106763][ T1198] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 820.110568][ T1198] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 820.237394][T16230] /dev/nullb0: Can't lookup blockdev [ 820.238848][T16228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15408'. [ 820.248279][T16228] netlink: 96 bytes leftover after parsing attributes in process `syz.5.15408'. [ 820.252667][T16228] validate_nla: 2 callbacks suppressed [ 820.252678][T16228] netlink: 'syz.5.15408': attribute type 20 has an invalid length. [ 820.406898][T16250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15417'. [ 820.411162][T16251] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15417'. [ 820.414286][T16250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15417'. [ 820.418293][T16250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15417'. [ 820.424048][T16250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15417'. [ 820.429407][T16250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15417'. [ 820.434414][T16250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15417'. [ 820.504826][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 820.604584][T16264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=16264 comm=syz.5.15422 [ 820.611550][T16264] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16264 comm=syz.5.15422 [ 820.617675][T16264] dummy0: entered allmulticast mode [ 820.620724][T16264] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=16264 comm=syz.5.15422 [ 820.627581][T16263] dummy0: left allmulticast mode [ 821.186823][ T40] audit: type=1400 audit(812.379:1565): avc: denied { setopt } for pid=16305 comm="syz.5.15440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 821.401895][T16315] bond4: Unable to set up delay as MII monitoring is disabled [ 821.406291][T16315] bond4 (unregistering): Released all slaves [ 821.569893][T16322] netlink: 'syz.6.15447': attribute type 10 has an invalid length. [ 821.572720][T16322] bridge_slave_1: left allmulticast mode [ 821.574695][T16322] bridge_slave_1: left promiscuous mode [ 821.576692][T16322] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.617281][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 821.939335][T16361] Invalid logical block size (100663296) [ 822.006165][T16369] EXT4-fs error: 26 callbacks suppressed [ 822.006183][T16369] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 822.013218][T16370] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 822.033903][T16374] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 822.044309][T16373] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 822.049706][T16379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pid=16379 comm=syz.4.15465 [ 822.082740][T16382] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.15469: iget: checksum invalid [ 822.085726][T16385] IPv6: NLM_F_CREATE should be specified when creating new route [ 822.091301][T16385] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 822.094690][T16382] netdevsim netdevsim2: loading /lib/firmware/updates/syzkaller/. failed with error -74 [ 822.100440][T16382] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.15469: iget: checksum invalid [ 822.105019][T16382] netdevsim netdevsim2: loading /lib/firmware/updates/. failed with error -74 [ 822.108238][T16382] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.15469: iget: checksum invalid [ 822.112180][T16382] netdevsim netdevsim2: loading /lib/firmware/syzkaller/. failed with error -74 [ 822.116081][T16382] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.15469: iget: checksum invalid [ 822.120355][T16382] netdevsim netdevsim2: loading /lib/firmware/. failed with error -74 [ 822.123068][T16382] netdevsim netdevsim2: Direct firmware load for . failed with error -74 [ 822.125719][T16382] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 822.134864][ T5337] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 822.140224][ T5337] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 822.200161][T16404] Cannot find add_set index 1 as target [ 822.287129][T16421] syz.4.15482: vmalloc error: size 4183572480, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 822.295427][T16421] CPU: 3 UID: 0 PID: 16421 Comm: syz.4.15482 Tainted: G L syzkaller #0 PREEMPT(full) [ 822.295461][T16421] Tainted: [L]=SOFTLOCKUP [ 822.295469][T16421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 822.295481][T16421] Call Trace: [ 822.295488][T16421] [ 822.295496][T16421] dump_stack_lvl+0x100/0x190 [ 822.295546][T16421] warn_alloc.cold+0x95/0x1c1 [ 822.295586][T16421] ? __pfx_warn_alloc+0x10/0x10 [ 822.295607][T16421] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 822.295643][T16421] ? lockdep_hardirqs_on+0x78/0x100 [ 822.295669][T16421] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 822.295702][T16421] ? kasan_save_stack+0x3f/0x50 [ 822.295722][T16421] ? kasan_save_stack+0x30/0x50 [ 822.295741][T16421] ? kasan_save_track+0x14/0x30 [ 822.295764][T16421] ? vb2_vmalloc_alloc+0x135/0x410 [ 822.295797][T16421] __vmalloc_node_range_noprof+0x1252/0x1530 [ 822.295826][T16421] ? do_syscall_64+0x106/0xf80 [ 822.295852][T16421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.295878][T16421] ? vb2_vmalloc_alloc+0x135/0x410 [ 822.295907][T16421] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 822.295947][T16421] ? vb2_vmalloc_alloc+0x135/0x410 [ 822.295968][T16421] vmalloc_user_noprof+0x9e/0xe0 [ 822.295996][T16421] ? vb2_vmalloc_alloc+0x135/0x410 [ 822.296017][T16421] vb2_vmalloc_alloc+0x135/0x410 [ 822.296036][T16421] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 822.296058][T16421] __vb2_queue_alloc+0x8d5/0x1160 [ 822.296090][T16421] vb2_core_create_bufs+0x5fa/0xa30 [ 822.296113][T16421] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 822.296132][T16421] ? lock_acquire+0x17c/0x330 [ 822.296161][T16421] ? __pfx___might_resched+0x10/0x10 [ 822.296192][T16421] ? rcu_is_watching+0x12/0xc0 [ 822.296214][T16421] vb2_create_bufs+0x40c/0x830 [ 822.296247][T16421] ? __pfx_vb2_create_bufs+0x10/0x10 [ 822.296277][T16421] ? v4l_sanitize_format+0x18d/0x430 [ 822.296304][T16421] vb2_ioctl_create_bufs+0x244/0x3e0 [ 822.296330][T16421] ? check_fmt+0x230/0x900 [ 822.296352][T16421] v4l_create_bufs+0x17d/0x270 [ 822.296378][T16421] __video_do_ioctl+0xaf8/0xdc0 [ 822.296405][T16421] ? __might_fault+0xc5/0x140 [ 822.296423][T16421] ? __pfx___video_do_ioctl+0x10/0x10 [ 822.296460][T16421] video_usercopy+0x476/0x1660 [ 822.296486][T16421] ? __pfx___video_do_ioctl+0x10/0x10 [ 822.296515][T16421] ? __pfx_video_usercopy+0x10/0x10 [ 822.296560][T16421] v4l2_ioctl+0x1bd/0x250 [ 822.296592][T16421] ? __pfx_v4l2_ioctl+0x10/0x10 [ 822.296624][T16421] __x64_sys_ioctl+0x18e/0x210 [ 822.296650][T16421] do_syscall_64+0x106/0xf80 [ 822.296676][T16421] ? clear_bhb_loop+0x40/0x90 [ 822.296702][T16421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.296723][T16421] RIP: 0033:0x7fa00af9bf79 [ 822.296742][T16421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.296760][T16421] RSP: 002b:00007fa00bea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 822.296779][T16421] RAX: ffffffffffffffda RBX: 00007fa00b215fa0 RCX: 00007fa00af9bf79 [ 822.296791][T16421] RDX: 0000200000000000 RSI: 00000000c100565c RDI: 000000000000000d [ 822.296803][T16421] RBP: 00007fa00b0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 822.296815][T16421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.296828][T16421] R13: 00007fa00b216038 R14: 00007fa00b215fa0 R15: 00007ffe8e9c3188 [ 822.296857][T16421] [ 822.296865][T16421] Mem-Info: [ 822.321567][ T40] audit: type=1400 audit(813.398:1566): avc: denied { setattr } for pid=16418 comm="syz.4.15482" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 822.328685][T16421] active_anon:10038 inactive_anon:11969 isolated_anon:0 [ 822.328685][T16421] active_file:2393 inactive_file:10840 isolated_file:0 [ 822.328685][T16421] unevictable:1768 dirty:246 writeback:0 [ 822.328685][T16421] slab_reclaimable:10495 slab_unreclaimable:248391 [ 822.328685][T16421] mapped:25551 shmem:16238 pagetables:9009 [ 822.328685][T16421] sec_pagetables:340 bounce:0 [ 822.328685][T16421] kernel_misc_reclaimable:0 [ 822.328685][T16421] free:252999 free_pcp:11351 free_cma:0 [ 822.451424][T16434] /dev/nullb0: Can't lookup blockdev [ 822.457003][T16421] Node 0 active_anon:49236kB inactive_anon:46960kB active_file:11764kB inactive_file:34956kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33912kB dirty:804kB writeback:0kB shmem:71584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18112kB pagetables:24880kB sec_pagetables:1352kB all_unreclaimable? no Balloon:0kB [ 822.468142][T16421] Node 1 active_anon:1084kB inactive_anon:916kB active_file:1032kB inactive_file:8404kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:78408kB dirty:180kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:320kB pagetables:11776kB sec_pagetables:8kB all_unreclaimable? no Balloon:0kB [ 822.476932][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 822.480056][T16421] Node 0 DMA free:8020kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 822.498401][T16421] lowmem_reserve[]: 0 1232 1232 1232 1232 [ 822.500755][T16421] Node 0 DMA32 free:236320kB boost:0kB min:27480kB low:34348kB high:41216kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53448kB inactive_anon:46960kB active_file:12444kB inactive_file:34956kB unevictable:3536kB writepending:804kB zspages:1976kB present:2080628kB managed:1262116kB mlocked:0kB bounce:0kB free_pcp:27072kB local_pcp:17968kB free_cma:0kB [ 822.511688][T16421] lowmem_reserve[]: 0 0 0 0 0 [ 822.513235][T16421] Node 1 Normal free:748900kB boost:0kB min:39756kB low:49692kB high:59628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1084kB inactive_anon:916kB active_file:1032kB inactive_file:8404kB unevictable:3536kB writepending:180kB zspages:15424kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:18000kB local_pcp:340kB free_cma:0kB [ 822.525134][T16421] lowmem_reserve[]: 0 0 0 0 0 [ 822.527960][T16421] Node 0 DMA: 7*4kB (UM) 11*8kB (UM) 12*16kB (UM) 13*32kB (UM) 14*64kB (UM) 8*128kB (UM) 7*256kB (UM) 1*512kB (U) 3*1024kB (UM) 0*2048kB 0*4096kB = 8020kB [ 822.532914][T16421] Node 0 DMA32: 1343*4kB (U) 3496*8kB (UE) 3447*16kB (UE) 208*32kB (UE) 190*64kB (UME) 174*128kB (UE) 227*256kB (U) 84*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 231724kB [ 822.538655][T16421] Node 1 Normal: 13*4kB (UME) 559*8kB (UME) 778*16kB (UE) 693*32kB (UE) 584*64kB (UME) 569*128kB (UM) 510*256kB (UM) 400*512kB (UM) 244*1024kB (UM) 5*2048kB (M) 1*4096kB (U) = 748908kB [ 822.544509][T16421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 822.547504][T16421] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 822.550969][T16421] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 822.553962][T16421] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 822.556889][T16421] 38221 total pagecache pages [ 822.558386][T16421] 2288 pages in swap cache [ 822.560500][T16421] Free swap = 112kB [ 822.561841][T16421] Total swap = 124996kB [ 822.563187][T16421] 1048443 pages RAM [ 822.564431][T16421] 0 pages HighMem/MovableOnly [ 822.565959][T16421] 283603 pages reserved [ 822.567311][T16421] 0 pages cma reserved [ 822.580231][T16439] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 822.584070][T16439] gretap1: entered promiscuous mode [ 822.585757][T16439] gretap1: entered allmulticast mode [ 822.729843][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 822.786169][T16468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 822.828161][T16472] Invalid logical block size (184549376) [ 823.275832][ T40] audit: type=1400 audit(814.342:1567): avc: denied { write } for pid=16499 comm="syz.6.15516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 823.727138][T16525] tipc: Started in network mode [ 823.728761][T16525] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 823.731558][T16525] tipc: Enabling of bearer rejected, failed to enable media [ 823.735692][T16526] tipc: Enabling of bearer rejected, failed to enable media [ 823.802908][T16535] FAT-fs (nullb0): bogus number of reserved sectors [ 823.805094][T16535] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 823.843060][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 823.865579][ T5944] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 823.871182][ T5944] Bluetooth: Wrong link type (-22) [ 823.877078][T16539] team0: Port device team_slave_0 removed [ 824.029218][T16542] openvswitch: netlink: Key 9 has unexpected len 10 expected 4 [ 824.122490][T16561] IPv6: sit2: Disabled Multicast RS [ 824.125667][T16561] sit2: entered allmulticast mode [ 824.169096][T16571] /dev/nullb0: Can't lookup blockdev [ 824.297099][T16599] /dev/nullb0: Can't lookup blockdev [ 824.370096][T16616] ip6t_rpfilter: unknown options [ 824.578209][T16648] bond2: option downdelay: invalid value (18446744073709551615) [ 824.581274][T16648] bond2: option downdelay: allowed values 0 - 2147483647 [ 824.585736][T16648] bond2 (unregistering): Released all slaves [ 824.748823][T16683] ip6erspan0: entered promiscuous mode [ 824.767456][T16688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16688 comm=syz.6.15589 [ 824.794378][T16687] uprobe: syz.6.15589:16687 failed to unregister, leaking uprobe [ 824.812277][T16697] FAT-fs (nullb0): bogus number of reserved sectors [ 824.814606][T16697] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 824.878046][T16708] /dev/nullb0: Can't lookup blockdev [ 824.955151][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 824.988813][T16721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.993354][T16721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.997105][ T2733] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 825.004570][ T2733] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 825.007783][ T2733] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 825.010801][ T2733] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 825.014746][ T2733] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 825.375516][T16718] chnl_net:caif_netlink_parms(): no params data found [ 825.492557][T16718] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.494836][T16718] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.497260][T16718] bridge_slave_0: entered allmulticast mode [ 825.504632][T16718] bridge_slave_0: entered promiscuous mode [ 825.508992][T16718] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.512370][T16718] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.514753][T16718] bridge_slave_1: entered allmulticast mode [ 825.517561][T16718] bridge_slave_1: entered promiscuous mode [ 825.537278][T16718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.542735][T16718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.559291][T16740] __nla_validate_parse: 75 callbacks suppressed [ 825.559306][T16740] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.15606'. [ 825.561845][T16718] team0: Port device team_slave_0 added [ 825.568581][T16718] team0: Port device team_slave_1 added [ 825.630594][T16718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.632820][T16718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.642122][T16718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.647152][T16718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.649400][T16718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.658114][T16718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.685978][T16718] hsr_slave_0: entered promiscuous mode [ 825.689336][T16718] hsr_slave_1: entered promiscuous mode [ 825.691649][T16718] debugfs: 'hsr0' already exists in 'hsr' [ 825.694073][T16718] Cannot create hsr debugfs directory [ 825.751273][T16752] Invalid ELF header type: 0 != 1 [ 825.757437][ T40] audit: type=1400 audit(2000000001.598:1568): avc: denied { module_load } for pid=16743 comm="syz.5.15608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 825.936361][T16764] Invalid logical block size (1056964608) [ 826.067698][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 826.386701][ T13] batman_adv: batadv0: Removing interface: gretap1 [ 826.413523][ T13] bond2 (unregistering): (slave geneve2): Releasing active interface [ 826.833624][T16848] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.15627'. [ 826.870716][T16850] /dev/nullb0: Can't lookup blockdev [ 826.873106][ T13] bond0 (unregistering): Released all slaves [ 826.881502][ T13] bond1 (unregistering): Released all slaves [ 826.892753][ T13] bond2 (unregistering): Released all slaves [ 826.902453][ T13] bond3 (unregistering): Released all slaves [ 826.911160][ T13] bond4 (unregistering): Released all slaves [ 826.970098][T16855] Invalid logical block size (1348567295) [ 827.083063][T16875] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.15637'. [ 827.180008][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 827.183766][ T2733] Bluetooth: hci4: command tx timeout [ 827.249384][T16897] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 827.384285][T16914] EXT4-fs error: 176 callbacks suppressed [ 827.384299][T16914] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 827.392801][T16916] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 827.397097][T16916] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 827.400940][T16916] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 827.404838][T16916] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 827.409074][T16916] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 827.412917][T16916] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 827.417749][T16916] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 827.421585][T16916] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 827.425485][T16916] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd-run-hook: iget: checksum invalid [ 827.573018][ T13] hsr_slave_0: left promiscuous mode [ 827.575542][ T13] hsr_slave_1: left promiscuous mode [ 827.786352][ T13] vxcan1 (unregistering): left allmulticast mode [ 827.834268][T16955] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.15665'. [ 827.997898][T16957] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15666'. [ 828.194874][T16718] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 828.216675][T16718] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 828.223942][T16718] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 828.231439][T16718] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 828.233196][ T13] IPVS: stop unused estimator thread 0... [ 828.274644][T16718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.284498][T16718] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.290388][ T1198] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.292541][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 828.292688][ T1198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.306676][ T1198] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.309230][ T1198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.381028][T16984] loop5: detected capacity change from 0 to 7 [ 828.384329][ T6013] buffer_io_error: 135 callbacks suppressed [ 828.384339][ T6013] Buffer I/O error on dev loop5, logical block 0, async page read [ 828.388884][ T6013] Buffer I/O error on dev loop5, logical block 0, async page read [ 828.391404][ T6013] Buffer I/O error on dev loop5, logical block 0, async page read [ 828.393909][ T6013] Buffer I/O error on dev loop5, logical block 0, async page read [ 828.396513][ T6013] Buffer I/O error on dev loop5, logical block 0, async page read [ 828.399036][ T6013] Buffer I/O error on dev loop5, logical block 0, async page read [ 828.401726][ T6013] Buffer I/O error on dev loop5, logical block 0, async page read [ 828.404230][ T6013] ldm_validate_partition_table(): Disk read failed. [ 828.406371][ T6013] Buffer I/O error on dev loop5, logical block 0, async page read [ 828.408849][ T6013] Buffer I/O error on dev loop5, logical block 0, async page read [ 828.411394][ T6013] Buffer I/O error on dev loop5, logical block 0, async page read [ 828.413795][ T6013] Dev loop5: unable to read RDB block 0 [ 828.415532][ T6013] loop5: unable to read partition table [ 828.417454][ T6013] loop5: partition table beyond EOD, truncated [ 828.428220][T16984] ldm_validate_partition_table(): Disk read failed. [ 828.430391][T16984] Dev loop5: unable to read RDB block 0 [ 828.442337][T16984] loop5: unable to read partition table [ 828.444318][T16984] loop5: partition table beyond EOD, truncated [ 828.446367][T16984] loop_reread_partitions: partition scan of loop5 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 828.456155][T16987] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.15673'. [ 828.502829][ T13] bond5 (unregistering): (slave gretap2): Releasing active interface [ 828.518565][ T13] bond6 (unregistering): (slave gretap3): Releasing active interface [ 828.620344][T17002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15680'. [ 828.897777][ T13] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 828.903278][ T13] bond1 (unregistering): Released all slaves [ 828.919214][ T13] smc: removing net device bond0 with user defined pnetid SYZ2 [ 828.922522][ T13] bond0 (unregistering): Released all slaves [ 828.930336][ T13] bond2 (unregistering): Released all slaves [ 828.943408][ T13] bond3 (unregistering): (slave bond4): Releasing backup interface [ 828.951827][ T13] bond4 (unregistering): left promiscuous mode [ 828.953928][ T13] bond4 (unregistering): left allmulticast mode [ 828.956944][ T13] bond3 (unregistering): Released all slaves [ 828.964328][ T13] bond4 (unregistering): Released all slaves [ 828.974408][ T13] bond5 (unregistering): Released all slaves [ 828.989967][ T13] bond6 (unregistering): Released all slaves [ 829.004285][ T13] bond7 (unregistering): Released all slaves [ 829.044306][T16718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 829.135669][T17019] ptrace attach of "/syz-executor exec"[13058] was attempted by "/syz-executor exec"[17019] [ 829.167071][T16718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.209923][ T61] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.213165][ T61] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 829.246817][T16718] veth0_vlan: entered promiscuous mode [ 829.267504][T16718] veth1_vlan: entered promiscuous mode [ 829.284783][T16718] veth0_macvtap: entered promiscuous mode [ 829.298447][T16718] veth1_macvtap: entered promiscuous mode [ 829.305866][T17033] netlink: 620 bytes leftover after parsing attributes in process `syz.6.15691'. [ 829.329993][T16718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.338402][T16718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.355767][ T1144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.358758][ T1144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.371687][ T1144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.375318][ T1144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.416015][ T2733] Bluetooth: hci4: command tx timeout [ 829.417594][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 829.429571][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.430755][T17040] fuse: Unknown parameter 'grou00000000000000000000' [ 829.432169][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.465728][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.468346][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.487573][ T40] audit: type=1400 audit(2000000005.094:1569): avc: denied { execheap } for pid=17044 comm="syz.6.15697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 829.607036][ T13] hsr_slave_0: left promiscuous mode [ 829.740434][T17063] netlink: 36 bytes leftover after parsing attributes in process `syz.6.15699'. [ 829.842898][T17073] netlink: 88 bytes leftover after parsing attributes in process `syz.5.15702'. [ 829.882849][T17076] fuse: Unknown parameter 'grou00000000000000000000' [ 830.069552][T17098] netlink: 'syz.6.15715': attribute type 39 has an invalid length. [ 830.137155][ T40] audit: type=1400 audit(2000000005.702:1570): avc: denied { accept } for pid=17097 comm="syz.6.15715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 830.346721][T10383] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 830.381898][T17117] Invalid logical block size (-33554433) [ 830.420408][T17119] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 830.444639][ T13] IPVS: stop unused estimator thread 0... [ 830.471573][T17125] xt_bpf: check failed: parse error [ 830.528351][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 830.550290][T10383] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 830.554445][T10383] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 830.558063][T10383] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 830.563558][T10383] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 830.568675][T10383] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 830.572401][T10383] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.577044][T10383] usb 7-1: config 0 descriptor?? [ 831.015977][T10383] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 831.020588][T10383] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 831.023112][T10383] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 831.025502][T10383] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 831.028416][T10383] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 831.030867][T10383] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 831.037104][T10383] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 831.039625][T17190] Invalid logical block size (-1048577) [ 831.043010][T10383] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 831.045498][T10383] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 831.047885][T10383] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 831.067456][T10383] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 831.082134][T17194] udevd[17194]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message [ 831.167580][T17203] /dev/nullb0: Can't lookup blockdev [ 831.233349][T17208] __nla_validate_parse: 7 callbacks suppressed [ 831.233362][T17208] netlink: 56 bytes leftover after parsing attributes in process `syz.6.15757'. [ 831.238827][T17208] netlink: 56 bytes leftover after parsing attributes in process `syz.6.15757'. [ 831.289468][T10383] usb 7-1: USB disconnect, device number 25 [ 831.427627][T17220] netlink: 608 bytes leftover after parsing attributes in process `syz.6.15762'. [ 831.486196][T17227] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.15764'. [ 831.627364][T17241] netlink: 608 bytes leftover after parsing attributes in process `syz.5.15771'. [ 831.640830][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 831.642448][ T2733] Bluetooth: hci4: command tx timeout [ 831.750816][T17255] netlink: 'syz.6.15778': attribute type 21 has an invalid length. [ 831.757308][ T40] audit: type=1400 audit(2000000007.207:1571): avc: denied { watch_with_perm } for pid=17248 comm="syz.5.15775" path="/318/bus" dev="tmpfs" ino=1677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 831.859984][T17271] netlink: 608 bytes leftover after parsing attributes in process `syz.2.15782'. [ 831.925603][T17279] overlayfs: missing 'lowerdir' [ 831.927075][T17282] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.15787'. [ 832.197189][T17294] netlink: 36 bytes leftover after parsing attributes in process `syz.6.15793'. [ 832.209082][T17308] FAT-fs (nullb0): bogus number of reserved sectors [ 832.215083][T17308] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 832.223969][T17308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15796'. [ 832.289087][T17322] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.15802'. [ 832.301450][T17324] fuse: Unknown parameter 'group_id00000000000000000000' [ 832.374702][ T40] audit: type=1400 audit(2000000007.786:1572): avc: denied { listen } for pid=17332 comm="syz.2.15807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 832.389643][ T40] audit: type=1400 audit(2000000007.786:1573): avc: denied { accept } for pid=17332 comm="syz.2.15807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 832.406231][T17336] /dev/nullb0: Can't lookup blockdev [ 832.480665][T17349] fuse: Unknown parameter 'group_id00000000000000000000' [ 832.578606][T17353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17353 comm=syz.4.15813 [ 832.753597][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 833.107864][ T40] audit: type=1804 audit(2000000008.469:1574): pid=17394 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.15831" name="file0" dev="tmpfs" ino=1714 res=1 errno=0 [ 833.292033][T17408] EXT4-fs error: 127 callbacks suppressed [ 833.292046][T17408] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 833.319601][T17411] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 833.352139][T17412] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 833.377913][T17413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 833.792465][T17444] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 833.815310][T17448] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 833.840505][T17451] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 833.865574][T17452] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 833.866842][ T2733] Bluetooth: hci4: command tx timeout [ 833.870723][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 833.899509][T17456] macvlan0: entered allmulticast mode [ 833.901502][T17456] veth1_vlan: entered allmulticast mode [ 833.907522][T17456] pim6reg: entered allmulticast mode [ 833.916723][T17456] veth1_vlan: left allmulticast mode [ 833.922223][T17456] macvlan0 (unregistering): left allmulticast mode [ 834.037067][T10271] libceph: connect (1)[c::]:6789 error -101 [ 834.039241][T10271] libceph: mon0 (1)[c::]:6789 connect error [ 834.044781][T17478] netlink: 'syz.5.15858': attribute type 5 has an invalid length. [ 834.101781][T17481] comedi comedi3: pcl711: I/O port conflict (0x8000,16) [ 834.113846][ T9492] libceph: connect (1)[c::]:6789 error -101 [ 834.115879][ T9492] libceph: mon0 (1)[c::]:6789 connect error [ 834.267212][T17513] bond4 (unregistering): Released all slaves [ 834.317578][T10271] libceph: connect (1)[c::]:6789 error -101 [ 834.319549][T10271] libceph: mon0 (1)[c::]:6789 connect error [ 834.390347][ T9492] libceph: connect (1)[c::]:6789 error -101 [ 834.393088][ T9492] libceph: mon0 (1)[c::]:6789 connect error [ 834.541680][T17547] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 834.623912][T17558] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 834.626864][T17560] Invalid option length (2990) for dns_resolver key [ 834.861141][T10271] libceph: connect (1)[c::]:6789 error -101 [ 834.863708][T10271] libceph: mon0 (1)[c::]:6789 connect error [ 834.871038][ T40] audit: type=1400 audit(2000000010.123:1575): avc: denied { connect } for pid=17582 comm="syz.5.15898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 834.886536][T17589] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 834.915398][T17472] ceph: No mds server is up or the cluster is laggy [ 834.915433][T17481] ceph: No mds server is up or the cluster is laggy [ 834.946851][ T9492] libceph: connect (1)[c::]:6789 error -101 [ 834.948882][ T9492] libceph: mon0 (1)[c::]:6789 connect error [ 834.968001][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 835.409857][T17698] hsr_slave_1 (unregistering): left promiscuous mode [ 835.780746][T17714] program syz.4.15924 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 835.784255][T17714] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 835.817599][T17716] netlink: 'syz.4.15925': attribute type 4 has an invalid length. [ 836.091036][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 836.104592][T17747] omfs: Invalid superblock (0) [ 836.104838][T17748] x_tables: duplicate underflow at hook 1 [ 836.256969][ T40] audit: type=1400 audit(2000000011.423:1576): avc: denied { watch watch_reads } for pid=17772 comm="syz.5.15945" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 836.559395][T17793] loop5: detected capacity change from 0 to 7 [ 836.563166][ T6013] Dev loop5: unable to read RDB block 7 [ 836.564992][ T6013] loop5: AHDI p1 p2 p3 [ 836.566440][ T6013] loop5: partition table partially beyond EOD, truncated [ 836.572174][ T6013] loop5: p1 start 1601398130 is beyond EOD, truncated [ 836.574459][ T6013] loop5: p2 start 1702059890 is beyond EOD, truncated [ 836.579420][T17793] Dev loop5: unable to read RDB block 7 [ 836.581837][T17793] loop5: AHDI p1 p2 p3 [ 836.583919][T17793] loop5: partition table partially beyond EOD, truncated [ 836.587516][T17793] loop5: p1 start 1601398130 is beyond EOD, truncated [ 836.590534][T17793] loop5: p2 start 1702059890 is beyond EOD, truncated [ 836.641339][T17797] __nla_validate_parse: 18 callbacks suppressed [ 836.641353][T17797] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.15953'. [ 836.788887][T17801] 9p: Unknown uid 00000000004294967295 [ 836.803375][T17814] x_tables: duplicate underflow at hook 2 [ 837.193149][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 837.488210][T17875] netlink: 'syz.4.15977': attribute type 178 has an invalid length. [ 837.739321][T17899] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=17899 comm=syz.4.15985 [ 837.847698][ T40] audit: type=1400 audit(2000000012.900:1577): avc: denied { mount } for pid=17908 comm="syz.6.15989" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 838.305404][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 838.683285][T17999] devpts: Bad value for 'max' [ 838.706328][T18003] EXT4-fs error: 21 callbacks suppressed [ 838.706344][T18003] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 838.869020][T18017] loop5: detected capacity change from 0 to 7 [ 838.871455][ T5337] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 838.875968][T18017] Dev loop5: unable to read RDB block 7 [ 838.876496][ T5337] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 838.877802][T18017] loop5: AHDI p1 p2 p3 [ 838.877823][T18017] loop5: partition table partially beyond EOD, [ 838.882188][ T5337] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 838.883454][T18017] truncated [ 838.883595][T18017] loop5: p1 start 1601398130 is beyond EOD, truncated [ 838.892682][T18017] loop5: p2 start 1702059890 is beyond EOD, truncated [ 838.939383][T18002] netlink: 32 bytes leftover after parsing attributes in process `syz.5.16025'. [ 838.954248][T18002] sit0: entered promiscuous mode [ 839.123971][T18039] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 839.144094][T18042] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 839.178226][T18046] netlink: 'syz.6.16041': attribute type 3 has an invalid length. [ 839.180738][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16041'. [ 839.380912][T18063] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 839.387965][T18065] netlink: 108 bytes leftover after parsing attributes in process `syz.4.16049'. [ 839.391650][T18065] IPVS: length: 120 != 24 [ 839.395049][ T40] audit: type=1400 audit(2000000014.349:1578): avc: denied { ioctl } for pid=18064 comm="syz.4.16049" path="socket:[250453]" dev="sockfs" ino=250453 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 839.401107][T18061] /dev/nullb0: Can't lookup blockdev [ 839.406419][T18061] /dev/nullb0: Can't lookup blockdev [ 839.412828][T18066] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 839.418815][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 839.434493][T18067] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 839.480157][T18073] delete_channel: no stack [ 839.987143][T18133] loop5: detected capacity change from 0 to 7 [ 839.990252][ T6013] Dev loop5: unable to read RDB block 7 [ 839.992068][ T6013] loop5: AHDI p1 p2 p3 [ 839.993467][ T6013] loop5: partition table partially beyond EOD, truncated [ 839.996239][ T6013] loop5: p1 start 1601398130 is beyond EOD, truncated [ 839.998367][ T6013] loop5: p2 start 1702059890 is beyond EOD, truncated [ 840.004114][T18133] Dev loop5: unable to read RDB block 7 [ 840.005976][T18133] loop5: AHDI p1 p2 p3 [ 840.008040][T18133] loop5: partition table partially beyond EOD, truncated [ 840.010573][T18133] loop5: p1 start 1601398130 is beyond EOD, truncated [ 840.012806][T18133] loop5: p2 start 1702059890 is beyond EOD, truncated [ 840.069329][T18136] : entered promiscuous mode [ 840.096843][T18140] netlink: 36 bytes leftover after parsing attributes in process `syz.5.16076'. [ 840.186122][T18144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 840.344684][T18148] overlayfs: missing 'workdir' [ 840.530474][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 840.804948][T18170] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 841.202122][T18184] FAULT_INJECTION: forcing a failure. [ 841.202122][T18184] name failslab, interval 1, probability 0, space 0, times 0 [ 841.207386][T18184] CPU: 3 UID: 0 PID: 18184 Comm: syz.2.16091 Tainted: G L syzkaller #0 PREEMPT(full) [ 841.207405][T18184] Tainted: [L]=SOFTLOCKUP [ 841.207410][T18184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 841.207417][T18184] Call Trace: [ 841.207421][T18184] [ 841.207426][T18184] dump_stack_lvl+0x100/0x190 [ 841.207458][T18184] should_fail_ex.cold+0x5/0xa [ 841.207473][T18184] should_failslab+0xc2/0x120 [ 841.207489][T18184] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 841.207503][T18184] ? __alloc_skb+0x140/0x710 [ 841.207524][T18184] ? rcu_is_watching+0x12/0xc0 [ 841.207538][T18184] __alloc_skb+0x140/0x710 [ 841.207551][T18184] ? __alloc_skb+0x5b7/0x710 [ 841.207564][T18184] ? __pfx___alloc_skb+0x10/0x10 [ 841.207579][T18184] ? ip6_dst_lookup_tail.constprop.0+0x8ef/0x2110 [ 841.207591][T18184] ? xfrm_lookup_with_ifid+0xa70/0x1ce0 [ 841.207606][T18184] alloc_skb_with_frags+0xe0/0x810 [ 841.207622][T18184] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 841.207636][T18184] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 841.207651][T18184] sock_alloc_send_pskb+0x801/0x980 [ 841.207664][T18184] ? snprintf+0xc7/0x100 [ 841.207681][T18184] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 841.207693][T18184] ? ip6_dst_lookup_flow+0x164/0x1d0 [ 841.207705][T18184] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 841.207715][T18184] ? find_held_lock+0x2b/0x80 [ 841.207728][T18184] ? rawv6_sendmsg+0xb3c/0x4750 [ 841.207744][T18184] ? rawv6_sendmsg+0xb3c/0x4750 [ 841.207762][T18184] rawv6_sendmsg+0x1a8f/0x4750 [ 841.207784][T18184] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 841.207803][T18184] ? avc_has_perm+0x135/0x1e0 [ 841.207828][T18184] ? __pfx_avc_has_perm+0x10/0x10 [ 841.207857][T18184] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 841.207874][T18184] ? inet_sendmsg+0x11c/0x140 [ 841.207885][T18184] inet_sendmsg+0x11c/0x140 [ 841.207897][T18184] ____sys_sendmsg+0x9ad/0xc30 [ 841.207916][T18184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 841.207941][T18184] ___sys_sendmsg+0x190/0x1e0 [ 841.207953][T18184] ? __pfx____sys_sendmsg+0x10/0x10 [ 841.207980][T18184] __sys_sendmsg+0x170/0x220 [ 841.208009][T18184] ? __pfx___sys_sendmsg+0x10/0x10 [ 841.208029][T18184] ? do_user_addr_fault+0x8d6/0x12f0 [ 841.208043][T18184] do_syscall_64+0x106/0xf80 [ 841.208062][T18184] ? clear_bhb_loop+0x40/0x90 [ 841.208075][T18184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.208087][T18184] RIP: 0033:0x7f346099bf79 [ 841.208098][T18184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.208109][T18184] RSP: 002b:00007f346177d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.208120][T18184] RAX: ffffffffffffffda RBX: 00007f3460c15fa0 RCX: 00007f346099bf79 [ 841.208128][T18184] RDX: 0000000020008b88 RSI: 0000200000001c00 RDI: 0000000000000003 [ 841.208135][T18184] RBP: 00007f346177d090 R08: 0000000000000000 R09: 0000000000000000 [ 841.208141][T18184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.208148][T18184] R13: 00007f3460c16038 R14: 00007f3460c15fa0 R15: 00007fff706c80b8 [ 841.208162][T18184] [ 841.353030][T18186] netlink: zone id is out of range [ 841.501836][T18192] loop5: detected capacity change from 0 to 7 [ 841.504914][T18192] Dev loop5: unable to read RDB block 7 [ 841.506868][T18192] loop5: AHDI p1 p2 p3 [ 841.508346][T18192] loop5: partition table partially beyond EOD, truncated [ 841.510977][T18192] loop5: p1 start 1601398130 is beyond EOD, truncated [ 841.513270][T18192] loop5: p2 start 1702059890 is beyond EOD, truncated [ 841.558618][ T40] audit: type=1400 audit(2000000016.368:1579): avc: denied { accept } for pid=18193 comm="syz.2.16095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 841.654317][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 841.763053][T18211] netlink: 'syz.4.16103': attribute type 4 has an invalid length. [ 841.765634][T18211] netlink: 'syz.4.16103': attribute type 4 has an invalid length. [ 841.768348][T18211] netlink: 'syz.4.16103': attribute type 2 has an invalid length. [ 841.771017][T18211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16103'. [ 841.837691][T18222] netlink: 328 bytes leftover after parsing attributes in process `syz.4.16106'. [ 841.910083][ T40] audit: type=1400 audit(2000000016.704:1580): avc: denied { map } for pid=18221 comm="syz.4.16106" path="socket:[249819]" dev="sockfs" ino=249819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 841.912873][T18228] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.16108'. [ 842.043145][T18239] netlink: 184 bytes leftover after parsing attributes in process `syz.5.16113'. [ 842.046433][T18239] xt_socket: unknown flags 0xd0 [ 842.123929][T18245] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 842.139527][T18245] netlink: 'syz.5.16116': attribute type 1 has an invalid length. [ 842.150400][T18249] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.16118'. [ 842.197316][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16116'. [ 842.201848][T18253] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16116'. [ 842.481614][T18279] netlink: 'syz.5.16131': attribute type 23 has an invalid length. [ 842.511349][T18281] vlan0: entered allmulticast mode [ 842.513258][T18281] veth0_vlan: entered allmulticast mode [ 842.670023][T18293] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 842.673447][T18293] overlayfs: overlapping lowerdir path [ 842.755543][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 842.967222][ T40] audit: type=1400 audit(2000000017.695:1581): avc: denied { node_bind } for pid=18308 comm="syz.6.16143" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 843.233398][ T40] audit: type=1326 audit(2000000017.938:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.6.16150" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdff9bf79 code=0x7ffc0000 [ 843.243262][ T40] audit: type=1326 audit(2000000017.938:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.6.16150" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdff9bf79 code=0x7ffc0000 [ 843.251311][ T40] audit: type=1326 audit(2000000017.948:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.6.16150" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1fdff5c84e code=0x7ffc0000 [ 843.260590][ T40] audit: type=1326 audit(2000000017.948:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.6.16150" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdff9bf79 code=0x7ffc0000 [ 843.269940][ T40] audit: type=1326 audit(2000000017.948:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.6.16150" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdff9bf79 code=0x7ffc0000 [ 843.279648][ T40] audit: type=1326 audit(2000000017.948:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.6.16150" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fdff9bf79 code=0x7ffc0000 [ 843.285486][T18332] atomic_op ffff888059179198 conn xmit_atomic 0000000000000000 [ 843.289365][ T40] audit: type=1326 audit(2000000017.948:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.6.16150" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdff9bf79 code=0x7ffc0000 [ 843.306111][T18332] vcan0: entered allmulticast mode [ 843.371745][T18339] XFS (nullb0): Invalid superblock magic number [ 843.452801][T18351] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.16156'. [ 843.666537][T18387] xt_HMARK: spi-set and port-set can't be combined [ 843.868075][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 843.953958][T18414] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.16179'. [ 844.066484][T18425] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16184'. [ 844.506268][T18443] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.16191'. [ 844.540188][T18445] ksmbd: Unknown IPC event: 1, ignore. [ 844.607351][T18450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16194'. [ 844.981103][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 845.130361][T18472] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.16202'. [ 845.133525][T18472] netlink: Unknown conntrack attr (type=2304, max=9) [ 845.136515][T18472] netlink: 'syz.4.16202': attribute type 6 has an invalid length. [ 845.137330][T18475] overlayfs: failed to clone upperpath [ 845.139098][T18472] netlink: 'syz.4.16202': attribute type 5 has an invalid length. [ 845.171250][T18477] gfs2: gfs2 mount does not exist [ 845.379987][T18494] EXT4-fs error: 9 callbacks suppressed [ 845.380000][T18494] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 845.404689][T18495] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 845.526334][T18518] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 845.577586][T18524] netlink: 'syz.5.16222': attribute type 1 has an invalid length. [ 845.580864][T18524] netlink: 'syz.5.16222': attribute type 2 has an invalid length. [ 845.675365][T18540] netlink: 'syz.2.16228': attribute type 4 has an invalid length. [ 845.689433][ T5337] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 845.693463][ T5337] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 845.697117][ T5337] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 845.745857][T18548] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 846.093190][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 846.235834][T18593] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18593 comm=syz.5.16251 [ 846.379600][T18605] hugetlbfs: Unknown parameter 'noswap' [ 846.401109][T18607] IPv6: syztnl0: Disabled Multicast RS [ 846.421480][T18608] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 846.448752][T18611] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 846.546714][T18625] loop5: detected capacity change from 0 to 7 [ 846.550493][ T6013] Dev loop5: unable to read RDB block 7 [ 846.552723][ T6013] loop5: AHDI p1 p2 p3 [ 846.555994][ T6013] loop5: partition table partially beyond EOD, truncated [ 846.559201][ T6013] loop5: p1 start 1601398130 is beyond EOD, truncated [ 846.562136][ T6013] loop5: p2 start 1702059890 is beyond EOD, truncated [ 846.568645][T18625] Dev loop5: unable to read RDB block 7 [ 846.570859][T18625] loop5: AHDI p1 p2 p3 [ 846.572576][T18625] loop5: partition table partially beyond EOD, truncated [ 846.575887][T18625] loop5: p1 start 1601398130 is beyond EOD, truncated [ 846.578520][T18625] loop5: p2 start 1702059890 is beyond EOD, truncated [ 846.628092][T10214] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 846.787402][T18634] fuse: Bad value for 'user_id' [ 846.790156][T18634] fuse: Bad value for 'user_id' [ 846.839098][T10214] usb 9-1: unable to get BOS descriptor or descriptor too short [ 846.852770][T10214] usb 9-1: no configurations [ 846.854371][T10214] usb 9-1: can't read configurations, error -22 [ 847.206089][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 847.439989][T18673] xt_hashlimit: size too large, truncated to 1048576 [ 847.466809][T18674] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 847.508516][T18677] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 847.563587][T18673] __nla_validate_parse: 12 callbacks suppressed [ 847.563600][T18673] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16282'. [ 847.579665][T18684] fuse: Unknown parameter 'fd0x0000000000000003' [ 847.842506][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 847.846541][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 847.850260][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 847.853253][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 847.855964][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 847.965567][T18727] /dev/nullb0: Can't lookup blockdev [ 848.040422][T10214] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 848.060751][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16306'. [ 848.148818][T18714] chnl_net:caif_netlink_parms(): no params data found [ 848.204057][T18714] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.206972][T18714] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.210157][T18714] bridge_slave_0: entered allmulticast mode [ 848.214788][T18714] bridge_slave_0: entered promiscuous mode [ 848.215923][T18757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16312'. [ 848.219738][T18714] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.224079][T18714] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.227346][T18714] bridge_slave_1: entered allmulticast mode [ 848.231696][T18714] bridge_slave_1: entered promiscuous mode [ 848.243143][T10214] usb 9-1: unable to get BOS descriptor or descriptor too short [ 848.246689][T10214] usb 9-1: no configurations [ 848.248510][T10214] usb 9-1: can't read configurations, error -22 [ 848.260179][T18714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.266979][T18714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.293761][T18714] team0: Port device team_slave_0 added [ 848.298385][T18714] team0: Port device team_slave_1 added [ 848.311029][T18763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16314'. [ 848.314361][T18714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.316498][T18714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.324037][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 848.326257][T18714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.330663][T18714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.332673][T18714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.340251][T18714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.362589][T18767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16315'. [ 848.363944][T18714] hsr_slave_0: entered promiscuous mode [ 848.367794][T18714] hsr_slave_1: entered promiscuous mode [ 848.369776][T18714] debugfs: 'hsr0' already exists in 'hsr' [ 848.371474][T18714] Cannot create hsr debugfs directory [ 848.381037][T18767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16315'. [ 848.816770][T18714] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 848.821733][T18714] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 848.826042][T18714] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 848.830323][T18714] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 848.860372][T18714] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.862763][T18714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.865404][T18714] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.867742][T18714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.905744][T18784] program syz.4.16320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 848.908024][T18714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.925048][T18714] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.929562][ T100] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.932472][ T100] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.948468][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.951057][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.954503][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.956909][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.080092][T18714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.165790][T18801] /dev/nullb0: Can't lookup blockdev [ 849.243178][T18714] veth0_vlan: entered promiscuous mode [ 849.248840][T18714] veth1_vlan: entered promiscuous mode [ 849.262979][T18714] veth0_macvtap: entered promiscuous mode [ 849.268546][T18714] veth1_macvtap: entered promiscuous mode [ 849.280756][T18714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.287704][T18714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.294529][T17681] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.305802][ T100] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.309518][ T100] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.312735][ T100] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.354405][T17626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.357452][T17626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.379759][T18817] netlink: 112 bytes leftover after parsing attributes in process `syz.4.16330'. [ 849.390334][T17680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.394234][T17680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.430762][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 849.636311][ T6001] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 849.641609][T18832] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16333'. [ 849.817218][ T6001] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 849.819742][ T6001] usb 9-1: config 1 has no interface number 0 [ 849.821741][ T6001] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 849.825475][ T6001] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 849.828673][ T6001] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.834088][ T6001] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 849.836990][ T6001] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.839925][ T6001] usb 9-1: Product: syz [ 849.841261][ T6001] usb 9-1: Manufacturer: syz [ 849.842731][ T6001] usb 9-1: SerialNumber: syz [ 849.855333][T18817] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 849.976481][T18846] fuse: Invalid rootmode [ 850.041986][ T5944] Bluetooth: hci1: command tx timeout [ 850.077212][T18817] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 850.112575][T18857] bond0: entered promiscuous mode [ 850.114232][T18857] bond_slave_0: entered promiscuous mode [ 850.116675][T18857] bond_slave_1: entered promiscuous mode [ 850.122272][T18857] batadv0: entered promiscuous mode [ 850.125222][T18857] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 850.129040][T18857] bond0: left promiscuous mode [ 850.130589][T18857] bond_slave_0: left promiscuous mode [ 850.132417][T18857] bond_slave_1: left promiscuous mode [ 850.134864][T18857] batadv0: left promiscuous mode [ 850.310073][ T6001] sierra_net 9-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 850.512084][ T6001] sierra_net 9-1:1.7 wwan0: Submit SYNC failed -71 [ 850.515660][ T6001] sierra_net 9-1:1.7 wwan0: Send SYNC failed, status -71 [ 850.518393][ T6001] sierra_net 9-1:1.7 wwan0: Submit SYNC failed -71 [ 850.520610][ T6001] sierra_net 9-1:1.7 wwan0: Send SYNC failed, status -71 [ 850.526679][ T6001] usb 9-1: USB disconnect, device number 15 [ 850.530000][ T6001] sierra_net 9-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 850.543374][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 850.608611][ T6001] sierra_net 9-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 850.664223][ T40] kauditd_printk_skb: 112 callbacks suppressed [ 850.664237][ T40] audit: type=1326 audit(2000000024.893:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18896 comm="syz.5.16360" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0a519bf79 code=0x0 [ 850.680603][T18899] binder: 18898:18899 ioctl c0306201 200000000640 returned -22 [ 850.683588][T18899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16361'. [ 850.869254][T18909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16365'. [ 851.321657][T18931] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 851.655894][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 851.751308][T18958] fuse: Unknown parameter 'use00000000000000000000' [ 851.893095][ T40] audit: type=1400 audit(2000000026.043:1702): avc: denied { create } for pid=18973 comm="syz.5.16393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 851.915305][T18977] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 852.144418][ T5337] EXT4-fs error: 24 callbacks suppressed [ 852.144430][ T5337] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 852.151985][ T5337] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 852.155647][ T5337] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 852.257368][ T5944] Bluetooth: hci1: command tx timeout [ 852.337896][T19009] binder: 19008:19009 ioctl c0306201 2000000003c0 returned -14 [ 852.493632][T19031] tmpfs: Cannot enable quota on remount [ 852.499237][T19031] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 852.617350][T19046] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 852.768506][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 852.924956][T19062] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 852.927199][T19064] bridge5: entered promiscuous mode [ 852.945394][T19064] bridge5: entered allmulticast mode [ 852.976044][ T12] ------------[ cut here ]------------ [ 852.978810][ T12] time_after(jiffies, timeout) [ 852.978820][ T12] WARNING: io_uring/io_uring.c:2341 at io_ring_exit_work+0x42d/0xcdb, CPU#3: kworker/u32:0/12 [ 852.983964][ T12] Modules linked in: [ 852.986985][ T12] CPU: 3 UID: 0 PID: 12 Comm: kworker/u32:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 852.990585][ T12] Tainted: [L]=SOFTLOCKUP [ 852.992051][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 852.995452][ T12] Workqueue: iou_exit io_ring_exit_work [ 852.997334][ T12] RIP: 0010:io_ring_exit_work+0x42d/0xcdb [ 852.999199][ T12] Code: 8e e8 67 7c 3d 01 48 8b 05 a0 d4 0b 0d 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 6e d0 d1 00 4d 85 ed 79 12 e8 84 d5 d1 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 72 d5 d1 00 48 8b 74 24 38 [ 853.005418][ T12] RSP: 0018:ffffc900000f7ab0 EFLAGS: 00010293 [ 853.007409][ T12] RAX: 0000000000000000 RBX: ffff88803b40a778 RCX: ffffffff81353df2 [ 853.009984][ T12] RDX: ffff88801e2c4900 RSI: ffffffff81353dfc RDI: ffff88801e2c4900 [ 853.012575][ T12] RBP: ffffc900000f7c40 R08: 0000000000000007 R09: 0000000000000000 [ 853.015385][ T12] R10: fffffffffffffffb R11: 0000000000000000 R12: ffff88803b40a000 [ 853.016613][ T40] audit: type=1400 audit(2000000027.090:1703): avc: denied { write } for pid=5892 comm="syz-executor" path="pipe:[5987]" dev="pipefs" ino=5987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 853.017913][ T12] R13: fffffffffffffffb R14: dffffc0000000000 R15: 0000000000000000 [ 853.017953][ T12] FS: 0000000000000000(0000) GS:ffff8880d668b000(0000) knlGS:0000000000000000 [ 853.030911][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 853.033025][ T12] CR2: 000000110c33d786 CR3: 000000003b8a9000 CR4: 0000000000352ef0 [ 853.035639][ T12] Call Trace: [ 853.036834][ T12] [ 853.037815][ T12] ? __pfx_io_ring_exit_work+0x10/0x10 [ 853.039477][ T12] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 853.041415][ T12] ? debug_object_deactivate+0x2e4/0x3b0 [ 853.043258][T19076] netlink: 'syz.5.16438': attribute type 10 has an invalid length. [ 853.043258][ T12] ? process_one_work+0x80b/0x1840 [ 853.047679][ T12] ? rcu_is_watching+0x12/0xc0 [ 853.051962][ T12] process_one_work+0x9c2/0x1840 [ 853.053830][ T12] ? __pfx_process_one_work+0x10/0x10 [ 853.055586][ T12] ? __pfx_io_ring_exit_work+0x10/0x10 [ 853.057630][ T12] worker_thread+0x5da/0xe40 [ 853.059167][ T12] ? kthread+0x13a/0x450 [ 853.060566][ T12] ? __pfx_worker_thread+0x10/0x10 [ 853.062227][ T12] kthread+0x370/0x450 [ 853.063617][ T12] ? __pfx_kthread+0x10/0x10 [ 853.065255][ T12] ret_from_fork+0x754/0xd80 [ 853.066785][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 853.068578][ T12] ? __switch_to+0x7b4/0x10c0 [ 853.070123][ T12] ? __pfx_kthread+0x10/0x10 [ 853.071758][ T12] ret_from_fork_asm+0x1a/0x30 [ 853.073325][ T12] [ 853.074350][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 853.076695][ T12] CPU: 3 UID: 0 PID: 12 Comm: kworker/u32:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 853.080306][ T12] Tainted: [L]=SOFTLOCKUP [ 853.081709][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 853.084938][ T12] Workqueue: iou_exit io_ring_exit_work [ 853.086807][ T12] Call Trace: [ 853.087864][ T12] [ 853.088841][ T12] dump_stack_lvl+0x100/0x190 [ 853.090397][ T12] vpanic+0x552/0x970 [ 853.091719][ T12] ? __pfx_vpanic+0x10/0x10 [ 853.093184][ T12] panic+0xd1/0xe0 [ 853.094395][ T12] ? __pfx_panic+0x10/0x10 [ 853.095884][ T12] ? check_panic_on_warn+0x1f/0x90 [ 853.097542][ T12] check_panic_on_warn.cold+0x19/0x34 [ 853.099308][ T12] ? io_ring_exit_work+0x42d/0xcdb [ 853.100955][ T12] __warn.cold+0x191/0x2f8 [ 853.102407][ T12] __report_bug+0x296/0x3d0 [ 853.103906][ T12] ? io_ring_exit_work+0x42d/0xcdb [ 853.105556][ T12] ? __pfx___report_bug+0x10/0x10 [ 853.107214][ T12] ? rcu_is_watching+0x12/0xc0 [ 853.108912][ T12] ? trace_contention_end+0xd6/0x110 [ 853.110765][ T12] ? __mutex_lock+0x26a/0x1b90 [ 853.112319][ T12] ? find_held_lock+0x2b/0x80 [ 853.113830][ T12] ? io_req_caches_free+0x49/0x60 [ 853.115523][ T12] ? io_req_caches_free+0x49/0x60 [ 853.117124][ T12] ? io_ring_exit_work+0x42d/0xcdb [ 853.118812][ T12] report_bug+0xb2/0x220 [ 853.120205][ T12] ? io_ring_exit_work+0x42d/0xcdb [ 853.121947][ T12] handle_bug+0x166/0x2a0 [ 853.123385][ T12] exc_invalid_op+0x17/0x50 [ 853.124864][ T12] asm_exc_invalid_op+0x1a/0x20 [ 853.126475][ T12] RIP: 0010:io_ring_exit_work+0x42d/0xcdb [ 853.128322][ T12] Code: 8e e8 67 7c 3d 01 48 8b 05 a0 d4 0b 0d 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 6e d0 d1 00 4d 85 ed 79 12 e8 84 d5 d1 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 72 d5 d1 00 48 8b 74 24 38 [ 853.134275][ T12] RSP: 0018:ffffc900000f7ab0 EFLAGS: 00010293 [ 853.136333][ T12] RAX: 0000000000000000 RBX: ffff88803b40a778 RCX: ffffffff81353df2 [ 853.138860][ T12] RDX: ffff88801e2c4900 RSI: ffffffff81353dfc RDI: ffff88801e2c4900 [ 853.141395][ T12] RBP: ffffc900000f7c40 R08: 0000000000000007 R09: 0000000000000000 [ 853.144007][ T12] R10: fffffffffffffffb R11: 0000000000000000 R12: ffff88803b40a000 [ 853.146585][ T12] R13: fffffffffffffffb R14: dffffc0000000000 R15: 0000000000000000 [ 853.149129][ T12] ? io_ring_exit_work+0x422/0xcdb [ 853.150817][ T12] ? io_ring_exit_work+0x42c/0xcdb [ 853.152504][ T12] ? __pfx_io_ring_exit_work+0x10/0x10 [ 853.154392][ T12] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 853.156470][ T12] ? debug_object_deactivate+0x2e4/0x3b0 [ 853.158525][ T12] ? process_one_work+0x80b/0x1840 [ 853.160317][ T12] ? rcu_is_watching+0x12/0xc0 [ 853.161988][ T12] process_one_work+0x9c2/0x1840 [ 853.163679][ T12] ? __pfx_process_one_work+0x10/0x10 [ 853.165428][ T12] ? __pfx_io_ring_exit_work+0x10/0x10 [ 853.167246][ T12] worker_thread+0x5da/0xe40 [ 853.168786][ T12] ? kthread+0x13a/0x450 [ 853.170161][ T12] ? __pfx_worker_thread+0x10/0x10 [ 853.171827][ T12] kthread+0x370/0x450 [ 853.173162][ T12] ? __pfx_kthread+0x10/0x10 [ 853.174661][ T12] ret_from_fork+0x754/0xd80 [ 853.176244][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 853.177903][ T12] ? __switch_to+0x7b4/0x10c0 [ 853.179553][ T12] ? __pfx_kthread+0x10/0x10 [ 853.181051][ T12] ret_from_fork_asm+0x1a/0x30 [ 853.182575][ T12] [ 853.184444][ T12] Kernel Offset: disabled [ 853.185883][ T12] Rebooting in 86400 seconds..