last executing test programs: 18m37.792095947s ago: executing program 32 (id=472): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0xa0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@RTM_NEWMDB={0x58, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x2, 0x2, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x3, 0x2, {@ip4=@multicast2, 0x800}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x4008081) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20400, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 17m18.914965276s ago: executing program 33 (id=1833): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) eventfd(0x1) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)=0x4b2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x74, 0x2, 0x2, 0x2d7, 0xfff, 0x8000000000000000, 0x5, 0x0, 0x6, 0x401, 0x2, 0x5, 0x8d], 0xb000, 0x284e97}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xc0, 0x100) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f00000005c0)={r4, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c001680080001", @ANYRES64=r7], 0x38}}, 0x10) setreuid(0x0, 0x0) getgroups(0x1, &(0x7f0000002c00)=[0xee00]) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES8=r6, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="020005005b7d82e62acace0dcb6e5f3da10b8900f4839f2cd3c8dd179032ac37d2b4bb4ecc53e361aaedce2ac49edf6c639cda0525549a4e659c", @ANYRES32=0x0, @ANYBLOB="0200", @ANYRES32, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000600", @ANYRESDEC=r8, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="10000200000000002000010000000000"], 0x6c, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) unlink(&(0x7f0000000040)='./file0\x00') chdir(&(0x7f0000000100)='./file0\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) flock(r9, 0x1) 16m45.099638361s ago: executing program 34 (id=2229): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r0, &(0x7f0000000340)=""/82, 0x52) (async) getdents(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x6, 0x8, 0x28, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x7800, 0x20, 0x8, 0xd}}) sendmsg$inet6(r2, &(0x7f0000000600)={&(0x7f0000000000)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x39}, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="77c1c69c0965bdd8b3858b55697f50df87e2518cbd6b3d24a085aea278106c6ee3e8d574735c19fb8b7ae82c0be1c0b7eaf9fd4744fe1ccf171e4073b8da0e", 0x3f}, {&(0x7f00000003c0)="42d93036d42156856bfdb9bc91cd807f08ff2cad4f8abf91423cd2ac503aa9fbdccbb19c96e585e351213ce37f593aee6f3ab430fdd6bc998612b2ed968699343879f417901c917b173ad77d0bd9fbb4e49c1eb54325f9247ae72af4e4ddc44de576394f239340e3742d643beac33363b795cdaddd29cee2cf86f649363c30919c4b742b65a6499054064e6a9f50ad2f017dc93f8bf12521b5128f8292bbd89f0e928b875850b5c9557be635a19ad6fc90f32888063d727ee1fec80bce6d015979ebd99182c783f2c78aec7a17d87ca8a76630", 0xd3}], 0x2, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r3}}}], 0x28}, 0x0) 16m30.959908259s ago: executing program 35 (id=2372): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[r3, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000240)={r5}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000240)={r5}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) 14m19.881135828s ago: executing program 36 (id=4127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r3}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x80000, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x76, 0x2, 0x3, "4c4d75fffbbe7ba9f03bec81c6ea4d9838f497b6e85888fc5eae1105347c1358", 0x38414261}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003240)={0x24, 0x26, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x8, 0x3e, 0x0, 0x1, [@nested={0x4, 0x122}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0xc0884123, &(0x7f0000000080)) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x0, 0x0}) timer_create(0xfffffffffffffffd, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000340)={0x9000, 0x12000}) r8 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r8, &(0x7f0000000040), 0x4) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000380)={0x9000, 0x10000}) 13m51.196701663s ago: executing program 37 (id=4418): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x10000, @dev={0xfe, 0x80, '\x00', 0x39}, 0x7e}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@mpls_getroute={0x1c, 0x1e, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x2}}, 0x1c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="ad43f8fffffffbdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002540)={0x2020}, 0x2020) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg', 0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x10000, @dev={0xfe, 0x80, '\x00', 0x39}, 0x7e}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@mpls_getroute={0x1c, 0x1e, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x2}}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="ad43f8fffffffbdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async) read$FUSE(r6, &(0x7f0000002540)={0x2020}, 0x2020) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg', 0x3) (async) 13m35.730126888s ago: executing program 38 (id=4626): dup(0xffffffffffffffff) r0 = socket(0x2, 0x80805, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000100)={0x2c, 0x0, [{0x4d0, 0x0, 0x9}]}) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000380)=0xbf9f, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002800000018010000646c6c2500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b7030000feffffff850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 13m14.19015346s ago: executing program 39 (id=4849): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6(0xa, 0x802, 0x0) utimes(0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) syz_open_dev$dri(0x0, 0x34, 0x10000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r5) syz_usb_connect$printer(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6b, 0x60, 0x8, "", [{{0x9, 0x4, 0x0, 0x79, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x61, 0x9, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0x0, 0xb2}}]}}}]}}]}}, 0x0) 12m49.586314706s ago: executing program 40 (id=5098): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) dup(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4044015}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20000010}, 0x20044000) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 12m34.331794696s ago: executing program 41 (id=5287): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) close(0x3) shutdown(0xffffffffffffffff, 0x0) write$char_usb(r2, &(0x7f00000007c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 11m59.12974458s ago: executing program 42 (id=5669): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) ftruncate(r3, 0x796c) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000080)=0x3ba, 0x5, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote, 0x7}}}, 0x108) close_range(r4, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9f0700001800000000000000240000002400000100000000000000000000000805000000060000000000000802000000070000000000000b02000000665dce6ee48f144181a057ceb1005f2e2e5f5f00"], &(0x7f0000000080)=""/148, 0x43, 0x94, 0x1, 0x401}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRES32=0x0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp=0x25, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r11 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) syz_open_procfs(r11, &(0x7f0000000340)='net/connector\x00') openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x28000, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r8, r10, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000000001000001, 0x0, 0x1}}, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x10e, &(0x7f0000001080)=ANY=[], 0x0) 11m48.675505468s ago: executing program 43 (id=5783): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]}) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x1}, 0x2) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0xa, r0, 0x80000}) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000140)={0x1, 0x24, 0x4, 0xb, 0x0, 0x7, 0x0, 0x166}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x102, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000001c0)='netdevsim0\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000240)={r3, 0x0, 0xffffffffffffffff}) quotactl_fd$Q_SYNC(r4, 0xffffffff80000102, 0x0, 0x0) mprotect(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x100000e) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000004c0)={@pptp={0x18, 0x2, {0x0, @remote}}, {&(0x7f00000003c0)=""/152, 0x98}, &(0x7f0000000480), 0x20}, 0xa0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) sendmsg$AUDIT_LIST_RULES(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000680)=0xc) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r1) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xdc, r7, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x17}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0xb}}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000008c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000900)={r8, 0x80000}) ioctl$SG_GET_COMMAND_Q(r6, 0x2270, &(0x7f0000000940)) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000980)={0x0, 0x2710}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000009c0)={r8, 0x80000}) ioctl$SNDCTL_SEQ_RESETSAMPLES(r2, 0x40045109, &(0x7f0000000a00)=0x4) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000a40)) syz_open_dev$dri(&(0x7f0000000a80), 0x2, 0x0) 9m15.459449214s ago: executing program 44 (id=7427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x0, 0xce3, 0xa, 0x3, 0x5, 0xe07, 0x10000}, 0x1c) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x14, 0x3, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xc00c890}, 0x88) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz1\x00', {0x6, 0xf6aa, 0xffff, 0x3}, 0x33, [0x5, 0x2, 0x2, 0x0, 0x100, 0xfffffeff, 0xe, 0x2, 0x3, 0x200, 0x8, 0x200, 0xe9, 0x5, 0x1, 0x5, 0x7fffffff, 0x10000, 0xb, 0xfffffbff, 0x8, 0x3ff, 0xfffffffb, 0x3, 0x5a2, 0x9, 0x3, 0xff, 0xfffffff9, 0x8, 0x6, 0x9, 0x8, 0x7fffffff, 0x546, 0x3, 0x0, 0x4, 0x6a7b, 0x9, 0x6, 0x1, 0x6, 0x6, 0x8001, 0x9, 0xffffff80, 0xd, 0x7, 0x6ab9, 0x100, 0x6, 0x9, 0x9, 0x8, 0x6, 0x7, 0x1, 0xfffffff7, 0x1, 0x9, 0x7fffffff, 0x3, 0x1ff], [0x4, 0x9, 0x3, 0xa49, 0x1ff, 0x400, 0x5, 0x3, 0x9b49, 0x5, 0xabc, 0x800, 0x0, 0x5, 0x8, 0x8, 0xffffffc3, 0x9e, 0x5, 0x9, 0x8, 0x0, 0x9, 0x2, 0xfffffffc, 0x9, 0x9, 0x0, 0x3, 0x0, 0x1, 0xffffffe9, 0xf80, 0x3ff, 0x7, 0x8, 0x9, 0x2, 0x4, 0xfff, 0x81, 0xff, 0x5, 0x80, 0x7, 0xac, 0x4, 0xaf, 0xfffffffe, 0x1, 0x8, 0xc7d, 0x70, 0x5, 0xfffffff8, 0xaa61, 0x2, 0x94, 0x10001, 0x0, 0x10, 0x80, 0xf, 0x10], [0x5, 0x7, 0x7, 0x0, 0x7, 0x8, 0x7, 0x1, 0x4, 0x0, 0x6, 0xfffffff7, 0x200, 0x1, 0x6, 0x3, 0xfffffffb, 0x9, 0xf, 0x1, 0x6, 0x8, 0x9, 0x8, 0x8, 0x8, 0x3, 0x3, 0x5, 0x8, 0x101, 0x7fffffff, 0x2, 0xf5f, 0x7, 0x7, 0x0, 0x1, 0x40, 0x4, 0x0, 0x6, 0x6, 0x1, 0xfffffffa, 0x5, 0x3, 0x952, 0x3e4, 0x2, 0xd, 0x6, 0x6, 0x1ff000, 0x80, 0x3ff, 0x0, 0x8001, 0xcf, 0x908, 0x5, 0x8, 0x9, 0x7], [0x7cb, 0x7, 0x7, 0x2, 0xffff, 0x4, 0x3, 0x58, 0x1, 0x2, 0x634, 0xffff, 0x0, 0xfff, 0x9, 0x12, 0x6, 0xc1, 0x4381, 0x4, 0x5, 0x16, 0x400, 0x5, 0x0, 0x2, 0x0, 0x4, 0x7, 0x4, 0x7, 0x1, 0x7f, 0x101, 0x10, 0x7fff, 0xae9, 0x9, 0x25, 0x5, 0x7f, 0x2, 0x0, 0xa92, 0x2, 0x81, 0x4, 0x0, 0x9, 0x80000001, 0xa, 0xc, 0x10001, 0x8, 0xec9, 0x5, 0xc2d, 0x4, 0x0, 0x5, 0x41, 0x7f, 0x40, 0xfffffff7]}, 0x45c) 7m48.174131814s ago: executing program 45 (id=8053): arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000)) 5m42.188280141s ago: executing program 46 (id=8947): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000940)) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0285628, &(0x7f0000000240)={0x1, @raw_data="883275885389af5cb146915ae3fbc99be987ed78ea1f03043e33b3283a1eb653ff1ee26202a70812c4d38d5df43a74dc61296268983e5b9ef95d15ab210b3396e61ee0c5055e9ebde34657cbecf7428979ad2e32bc5acc615ac9f658af8a34f4d4f6b8aed25571ccb068ebb83acd8c3b833fe6a9fd7d5fca80433ac20d714f10d251cdd16b836a650729db7cd267171e5bb63e80081d630b93cccc5742956901c2146c73c32fd049aba7b1f0538f9819f441903d18edd0a1a8e21daeb63da3a8541131077000"}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000002300)={r2}) 4m37.276911209s ago: executing program 47 (id=9394): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x200, 0x20000) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x0, {0x653e, 0x5, 0x201d, 0x3, 0x7, 0x2, 0x2, 0x7}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) 4m15.121470796s ago: executing program 3 (id=9450): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf4e) (async, rerun: 64) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000380)="fb", 0x1}, {&(0x7f0000000300)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) (async, rerun: 64) ppoll(&(0x7f0000000140)=[{r0, 0x41c}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0xa5ed, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) (rerun: 32) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1], 0x10) (async, rerun: 64) write$9p(r2, &(0x7f0000000100)="d5", 0x1) (rerun: 64) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000100)={0x80, 0x0, 'client1\x00', 0xffffffff80000000, "000000ffffffe300", "71a19060009f0000000000000000001aa241d3c6895c4100", 0x800000, 0x3}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@getchain={0x24, 0x66, 0x903, 0x70bd2e, 0x25dfdc03, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xb}, {0xffff, 0xfff1}, {0x6, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x48}, 0x8000) (async) write$sndseq(r3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) (async) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="941dcd37fb"], 0x8) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0xa], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async, rerun: 32) connect$netlink(0xffffffffffffffff, &(0x7f0000000540)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sendfile(r5, r5, &(0x7f0000000180)=0x401, 0x10001) (async) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000100)) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000003c0)={r6}) (async, rerun: 64) r7 = socket(0x2, 0x80805, 0x0) (rerun: 64) sendmmsg$inet(r7, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000240)={r8, 0xa}, 0x8) 4m15.034459073s ago: executing program 3 (id=9451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x114, 0x17, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0xdc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'dvmrp1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x114}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000240)={0xd, 0x0, 0x2, {0x4000046, 0x7, 0xfffb, 0xf7168003}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a300000000064000000090a010461000000000000000700000008000a40000000000900020073797a32000000000900010073797a30000000001800054000000021280011800b0001006f626a72656600001800028008000340000000160900040073797a3200000000140000001000010000000000000000000500000a"], 0xac}}, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x16, 0x100, 0x7f}, 0x50) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000280)='\x00', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000200)={0x0, 0x0, 0x0, r4}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000000000000308000540fffffffd080007006e61740008000a4000000000080007006e61740008000b400000000220000000120a01010000000000000000020000060900010073797a3000000000140000001100010000000000000000000100000a00"/132], 0x84}, 0x1, 0x0, 0x0, 0x4841}, 0x20000002) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0xf4e) r6 = fanotify_init(0x60, 0x400) write$P9_RSYMLINK(r6, &(0x7f0000000340)={0x14, 0x11, 0x0, {0x0, 0x4}}, 0x76) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_DISEQC_SEND_MASTER_CMD(r7, 0x40076f3f, &(0x7f0000000040)={"cc2bd1030395", 0x6}) writev(r5, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000001000000000000000000851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000940300000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000740)='./file0/file0\x00', 0x88880) setsockopt$netlink_NETLINK_CAP_ACK(r8, 0x10e, 0xa, &(0x7f0000000100)=0xff4d, 0x4) 4m14.073626428s ago: executing program 3 (id=9467): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_open_dev$sndpcmc(&(0x7f00000016c0), 0x0, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x4) ftruncate(r0, 0x6000000) socket$inet(0x2, 0x1, 0x0) lseek(r0, 0x8000000000000001, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x100, 0x9, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) syz_open_dev$sndpcmc(&(0x7f00000016c0), 0x0, 0x0) (async) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x4) (async) ftruncate(r0, 0x6000000) (async) socket$inet(0x2, 0x1, 0x0) (async) lseek(r0, 0x8000000000000001, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x100, 0x9, 0x0) (async) 4m13.942743352s ago: executing program 0 (id=9469): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0xf, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000015ff0f0000004000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000039000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) read$FUSE(r1, &(0x7f00000047c0)={0x2020}, 0x2020) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x12, r3, 0x80000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09efee0ca2939e5b56bba250c4bb2e7900000018", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000020000eaff8cbbf491a78174c316b50100000000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r4, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="041d"], 0x8) read$FUSE(r5, &(0x7f0000006b40)={0x2020}, 0x2020) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x5}, 0x8) 4m13.94158926s ago: executing program 3 (id=9470): mknod(0x0, 0x8001420, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000940)='./file1\x00') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x20402, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r6 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x10000, 0x1aa) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r8) lseek(r6, 0x10000, 0x2) getdents(r6, 0x0, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40441, 0xc) r10 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r10, &(0x7f0000000600)={'#! ', './file7', [{0x20, '/\x05&+\\\'Qr\xa3eD\x1e\xa3\xe02%\x0fQGQ\xa1+FW\xc7]\xae\x82\xfbl\xb9Q\x1e\x94\x9f\xda\xea\xb9%\xfbW\x88T\x8b2\xdb\x00\xa1n\xc7\x8e\xfd\x8d\f\xaa\x87\xc9\x918\xd9=\xcbIE|\xd8\xaf\x91\xc0\x803\xf0\xc6\xc0c\xa9\xb8,\xa0\xf7\xce\xb5\xbe\x8b!UV\xd6O#\xc9\xf2\xd5\xba\x15j_BPR\xf1\x1c\x1d$\xdd\xc9\xfasHg\xfd\x91_Ur\x99\x1b\xc0\xdc\b\xa9[\ni\xd9\x034\xe3\x0e\xbd\x8c\xf3|T\xdcJw-\xc8TY<\xbd\xe6\x06>\xf5\xca\x13\xe5u\xc2\xc5\xfd\x18\xf2$\xf7\xe1 \xaa\xb81\xbf4\x0eT\v\xb8d@\x12L\x83\xc7\n\xe0\xfe\x04cQ\xa7\x93(\xac\xfasU\xa3,g\xf2\xeb\\'}, {0x20, '\x99'}, {0x20, '.(\xbf1\xa7\x81\x7f\xbaU&,/\\\x00\b\x00\x00\x00'}, {0x20, 'T\xfd\xbf:\xa1;\x1d\x18\xbe6P\x82\xee\x17\'\x05\x1b\xe5\xce\xb4\x91\t\x95\x18\x03:\f\xf4\x8b\xe4U\x19\tGs\x9a\xd2A7\x83Z\xe0\x12\x98\x89\xd2Uq!B\xb5\xf17\x10\xc6'}, {}, {0x20, '\x97\a'}, {0x20, '.'}, {}], 0xa, "67151f3b4aa464f8f17f85ce57e27b19d3bd700d6beedca5e458c8d152fd96777c342ece776c81b0e8c165608fda96c9f90e81d145db795cf3702a9539b781d5ff65b76728c5921e1df4d10b6e21800fca956cd4ea6a9eeb2656029efc3e4a6efe29b6505ce9ad9cf8ec11b1da10240337ca069db407555cd8247131044f8ffeb2cc03e6036f65f6f9eea0f8c044354b7c2b"}, 0x1b4) fcntl$notify(r9, 0x402, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 4m13.786937863s ago: executing program 3 (id=9472): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x8a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xffffffff}]}}}]}, 0x38}, 0x1, 0x2000000000000000, 0x0, 0x200040c4}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r3, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 4m13.783105487s ago: executing program 0 (id=9474): bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000001e000000611000000000000062000b000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5}, 0x94) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80, 0x1800) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000005000000a30c038a"]) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000a14c72e2dbd7000fedbdf250800010001"], 0x18}, 0x1, 0x0, 0x0, 0x20000024}, 0x80) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r7, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r8, &(0x7f0000000280)=[{&(0x7f00000010c0)=""/221, 0xdd}, {&(0x7f0000000800)=""/110, 0x6e}], 0x2, 0x3, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x41, &(0x7f0000000600)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xa6, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x17, 0x1, &(0x7f00000003c0)=@raw=[@call={0x85, 0x0, 0x0, 0x84}], &(0x7f0000000400)='GPL\x00', 0x4, 0x95, &(0x7f0000000440)=""/149, 0x41100, 0x42, '\x00', 0x0, @fallback, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x0, 0x7, 0x5435, 0x1}, 0x10, r9, r0, 0xa, 0x0, &(0x7f0000000840)=[{0x2, 0x2, 0xf, 0x4}, {0x0, 0x3, 0x5, 0x9}, {0x1, 0x4, 0x2, 0xb}, {0x1, 0x2, 0x5, 0x8}, {0x2, 0x5, 0xb, 0x6}, {0x0, 0x5, 0x1, 0x9}, {0x5, 0x1, 0xf, 0xb}, {0x5, 0x1, 0xd, 0x5}, {0x5, 0x4, 0x3, 0x1}, {0x4, 0x5, 0xe, 0x9}], 0x10, 0x7}, 0x94) 4m13.550795726s ago: executing program 0 (id=9476): fallocate(0xffffffffffffffff, 0x60, 0xffffffffffffffce, 0x9) r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffff9c, 0x40106614, &(0x7f0000000040)) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x10882, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0) (async) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f00000000c0)={0x0, {0x0, 0x0, @vsb}}) (async) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000100)={{r0}, "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"}) (async) fanotify_mark(r2, 0x200, 0x29, r2, &(0x7f0000001100)='./file0\x00') (async) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000001140)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001300)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "7366db1faabadf"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002300)={r3, 0x0, "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", "64a2b8741dc96ea49da837c62c2cb5f29552aef5fc55c74ee2bf720f03632eaa2669308f3a61c5fb537c10d07edbf10f21a7d2dbb5a947a43efa3e91c41cee82de0a1cdd22f82ac6915234af033ea612b0d3c7b32da764104aee5f20bf65ba38d8d8a515a5cb6b8c35b630343f1ca1b02bbf9608ca1f98cc99f6124412f5ea24f536bfcaf00dc1560ae1f1694f478139ee4d137adaedcf864c0644b8c230b11746e48960d196c8edaabfcd24224c466b683ddcdec2559504018049373cfcc59c34a70304d5211fee76ce8863c15562d910420534da8122046c1190d71ae2f01ba3c71d88c6148f51c36a8fc0f67ad337d6e66b64c1ba065e3385a0688ffa12be5c55f0071ba85f57e4cdbfda598744f5ab002a3fe65cf7ed9b96e3c39b6c9e30950507a7bb14ed8a621855a5b374464e59e5f0cd52705ffb83bf20362a0e12ef7465b9f0a6e48ce9652f6da56de4c7a96117c51ce8e661469300132077f055f59d00980c471f69bc7654a3ee1a7a051c5be1dd86c3a2856ca1161d9983b3ad20069419e16da75716adab81ee3d1544e2566104f958020853ea87831c7112c9bc27480f900c9f9a76a057037e4765bae4d7c05b38ee47ee670b7204aa5f254462216bea64b423ab5fb8d3a4e605b66eebc10c4994ce0da408c6b7a239ae748754b7e1876a35ed987939f9697c31994111ccc8c2f8dee59b18730a83d6f18594ded6a90ef7b9f793be59b6f9e1bd5f861140485cd8b64da97f91d443fba1ab41add0e24bfd4f4565d173d49eef21b6ebd7cf83c66733acd1677e0424d7e3cce5d99ca01ef6c61c9d78857744e18641ea3d1e38ac62c9caecc3d331d9c59d67082c4c1a8be3e6578affeecac7404d2de2ea484bf695610f6d4c7ce863a65148242c858c7117e8899ed9e8b2e69b7574c2cec8d86fce8ab54b9510ec3d450b2c9723ed723e27f282c89aa51e36865a17247a90effb3d3870afe4640078c2e4029e92bd7cd6000359d4231e3ba743c700d66f22b774b5834cef4556ca17b6dcefdb642281d739a28f64afe9b821f1812fad75a2ca5b61570474e4807db22bace3b087f65528948ea7d245d7412ea62237f0fc1cb288d14d4efb953ea3ee35de83fcbbb8444c31f9d63b204d19380550048452efd617257f724ad1e204abb8d111d18f9eed0c8d7bc3fe94d10dc41a51b603bbc00705dfb0cc7ad0fe26dfd4dc98ff46920e3fc80a2821d191920c324de25cb42c7659723fdd452696d28d62adec5d77ef50f3b1a94e99d064d28d171a98967e11765ac3884884219808e910a98764363481c815b3179eb1c57d91aa29d3d6f93ab28f270e54c95b9ab93fad77af0dc27a29fb435ca22d253907ee923de91ffa749a039aa389c575393bd42af67421dd033b99e25cda629df1d7b855cb20d231c5267a2f3caae24f366dd492034becd5bdb15b6800f17a143c83fcfa9167c88748518d16db7c0eddb8dbec8ecc679a116706163cf4f9aeb368e28af3eb4c6fbdc701d81b3f9ede01d8ef53e679d8583c3377404c1318ec83ca4b81dd5213239d5761e5ea7217db729e55e4b59fe595d964ceffbed6448bd487f7089d3362aa408eefe6f615b4a7b2a5d58eaddd8e8f2d967774a9b7a4afb9fa34c2af1899c32cfbb6b7275d7bb617d488a971e40071321f306c20df25c10a99ddea6f5293c5826fe0e391e09fdb72e39e422f1232ff2213c695757e9854b82561f98cda599a560e71be5d52caeeaa0d9dad40db6115a486e5b2ec234163ae2820d64a9fb943e9b5730a2497a87072892e1dc4826243bfa4034e6db20444886d6df42eaa28c57dc4b9ef93d8b0d6df14b546e0fd2ff985041e51916faf9f2c19601fb38fa2d7bdc9dcbc9988e43f047d809966e3c7b0913f9f3b7aaba44dc7b9f9e1d516274dfb068fd9975087fc6c017d772ec0029a19f37ff57392455cb3b3cdfc07ed90e1b18beda04c0dd2d9c978752ce6202f1e6284db20e0cc50d5f5ccdedadfb262e07f03ad9df31c027691bea6ed93c1ea286219074433ea5c0f882598a3fb27e7bb313a24101ded5af6bf3079b1c60851da5791aea8eeba01716c05f0d090116fe62b996d38d553c4bfea8bb3c3a67838d189a6022268abeb9b537c9bb4c8d872e0271ae1a93a35a763fbb6113180d104f0776b7e89bd3b365936f01ad94797585c7e72342a5cc17c5fdf41ad1b6bdeb8eb40a6bffc4c3606d50fe6034783c91c2a6e1f08b8f41b3525d868ee8a1628b07fdaf962be1874eb8130dc36d66487b5f876b8b9cf77258df384358e8be42003fc0bad61f7da89cb9c39effe770995888ae26a8196d1efa122148f9f5cc86e88a249b7a2299446bb8641ac026818338fede5645df7607eaa52ade520c553b70a9e14f744f9b10b088641dd3f833fa6e4877fc4fef2b64ac6ceaede094e42e0bcc1200039e3e761782f7eb63916e529b291694678a5bea361b31741939eae1ea19c7ca30d17f07a037eb91e4d63dc3f3c64cc405e2980e362036fdb260d98c849a5ff578701895ff6b2fdd8a180831496865f584f10695d16a83dd53349eb79967b6f4408aaa9f5153585403a39f5c5780ffab1641d4f1724b0e3ad944323e5dfc0b054d1f5db367ee34df93e382acf6b9a354e038756c0e55e0b5ffafa58c7ca759d790626827c6a1561f129bd360de680c0c59cf5cf8a60abb1ee36de74398f0d8f01bc1305818ece3c74af53eb6b45456b26743cb27885c004c245684cdfe4202c85a0d7a204cc720ca6c6f5db7a0506a4a3d1dc4a39087487be556d444241fe7bfeba7284fca67a827cda103cd3c26d4d0ea086f0b93a42a7f3e21f3614471516446758710e785680f51b735011ff21a02a400133f2f0943c5f0ce124c6679f7ed3849114ddf2ea29087e213480847bdf2367a4efe456b6e2768a6889d4eeee180e013dca6ace83ad2da5c35b5b60c214dd7dddfd6eb4ffc03903e0b22e9602b5fcd4ccc93bb2772c7f625d1c96c506db92fd0c2a839a799a5f2abf092ebfe305b4d7c1c28c1a1c4e26394192b12349e7d2a362e8fedb49560e0c949beef9272680c2e82bd6607091b536b9a89063fd2d97b9b12e3ba667362affc57b9beb203ecee58cb19dfab69c3a98aaef01d85ad9e65417fd30f750a89a32ab15de7711b3069aab6516d5426486365e02cdcc2469fd948b61251fbb0a22d8a37fc4750c25ef3735ccac3f7cefaa5cfa52c6022d79733cc7d71c61253ba0ba6f2a5baf1318e424f20c3c7931727be34b88094de6637dc53bdbdbaba1c93356c102f042a57b18074e056813d46c1c8c6f913b66573590b3bfe12c1ee5c441cc54e2fcf8dc6522f56e5800ec6e1e0e9ce020ee936242142655af2b3e2153528cfa25663bc55e6293876c213597523be0aed3a0b51f3b54c5401fd93558f1817025bb282c938ef07c4d58fd3361899148025913fdf3d88b9d11ff5086431d26f95a9e88511452ff8d95e8ad1ef46075622a94e736216e42553b4d97fb06169635f072ba7775d3df0dd69367455942d15768b8fc5f38d64ffb6a36c5c187309a65aa9792da5c2525109a0cf0f35b30b975c30ec40ae132992ce9ad526d433f3412a8d937e72fb3194bdecca48f6dcc029595ea306154b6e9c06f2b15b101f0c7e9288ec907c9e51eef4a3782552d1ea3449295c45e8fb31c9ef80840abbbc74f3bc384d9517d9c9ce925cd59839edbe0b41c65e11e9807a5232860489528cd2aefc0a6878e1136c7a53a32a2166829d274c17baae11ae9c506836bc2d7180edda36982c28ecd2e3c9290aaee5ce2869745cb801bea41710bcd7abb0cfdf49b8d71fa30ef15b3f0ad58664cb1c8b2c37f8315f0648f2ca64f0bb7198327b8548b346b5854ca3bd6460418c868b3492c4fd8c7a295035f477742f5d56fb09c674e65f257b12386b8983827409636533c66540e3bfa9008f4dfd63fd5b3572a85307ef15ffae548af1826dd86a809097ed7df02aab291c0150731480fc3f43707feadab746241145b51952685005715872626ecf55bee70c67aaa506f563e5f4ff747c3570ad1847feb516ba448bd9a65244a8e898707caf1d864c0422e7fbf3e9550de7814f5367d2c973065d97a08a4b17677caf46df28ffc038115de44df9b809476b2bd505d33f0140ceb7f9643359a4d35a5e919c35de1fb73bcc9d3212352eb28c878f84f646679267ba77a1c02376d91e9c35258c8160307928bd31b054f7aa97b2b29ed8f3ad777d94f1b79f33439080c0e7405909b8623f2fdc0a4cb9d7593f0cf29914fc4c49af309d13a2daf50bf0655a5fc1156aa3877c6d9537935c0f3968c0fe2078174bfecf4a8b89fe75a13d8951b548b0553747481af1fa0b4c851bd212764a022dec5b0541c36095f6765a7d49a186456bccbec478788b0ecd0bd7ed0b71395d714b74063b16e19c5ba568861eb041dabd4ffbe128bfcce78cd24c571b6bae33cb73064d29c4cc1d42b3a0ed969ac203e9bc34616da6ad08dd90541d1bd53107e463b046b0c6283df13293b104d037ad1e81c4d973a5e93705ed10ef667b6604607c9cd4067ae02d76f500ae711fff5878fda6e10d04847f2f8141977d589206d5035aaa8f3fdee7910f6535d4513b396bd423ab0672957979ebcca9adba242232b31114edf473b1169f6aeda119a9d1d3e80a7f1fd6cc89fa981af1c0995a969bdf6ea3f799cd3fc4ab05725b9b53213398d4213acfc44d453b368a2d1f19a8f1d1cdc28cbdc6f787b6ae7c0806fdce218b43561f184856f52bf17ca5a53b19c7dfd61229ac4ef04fa0cb80ed8abf36c17ea6b988d379e97b61a506daa9b1c43895ba8c71b0ad3ae7b78d65631cbc11585c6f4590aa44a6e7fa09d50eec4fdb56520c39d2c6290f67acf602f4184cdbacfb69242cb5c5acaa26b340c94cdeecb3d8d640a31a083ddffe75915c1588fc4074af74dffa64452b6e765ff1d8f2b8db8f4b4e91974fabe6ac2088769648523ef6614ef888e7e82f0c2b4a4ba7903c7a2a9c2d1f49cc4a4cc43a6e45e39843d96e8fae570039a2739326ea72a75001643b927210d00a4363193450274d1abac714f82bd5b7fec4da5c6dc811349ef098b12dd5d8da0317ddc5fc1dca8618d20b20f199dcd9779e50c6b391052d033a07d0cbd069b1f33d62e5915bdc66ca95bd4f5c43b7613f9b0f89099c8f0df2d682c04de13512d1ff9ab8faf6cc235a170b8fedd57e7bcbe9bff389afdbbd1eea0da351b10901303b2d427743768521bb98051674b25dc4e61b4f99f1743d75ce272101944b0e42114202bcc2011b278c3cbfb9ff007ff185001c5590fcfa59447f56c1d9499c07a6f8dc5c1ceab3ecdc650fe0a8f53e902d4c3ab94c5da79e3cc5ef3d220520b6d91ac2bd301a7354a"}) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000003300), &(0x7f0000003340)=0x4) (async) close(r2) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) (async) fcntl$addseals(r2, 0x409, 0x8) (async) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000003380), &(0x7f00000033c0)=0x8) unlink(&(0x7f0000003400)='./file0\x00') ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000003440)=0x4) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000034c0), r2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000003580)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x24, r4, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008844}, 0x4000010) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000003a80)={'ip6_vti0\x00', &(0x7f0000003a00)={'syztnl0\x00', 0x0, 0x4, 0xf0, 0x40, 0x3, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7801, 0x7, 0xfffffc00, 0x7}}) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000004100)={@multicast2, @local, 0x0}, &(0x7f0000004140)=0xc) sendmmsg$inet6(r2, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000035c0)="73c2bbfbdaae93c9d71b8adb91ba1a0de9c62738e42ffa0f2a15af93a9f332", 0x1f}, {&(0x7f0000003600)="36f1e4df7da323dbd64aa734b382f0359d7cacd510fce03867ce9600887949fa719db3640d0acff1fb66298487d6feb22708d8c491f1dc43370fd2adb584a59be36c64125d5f52d1737f11b82e63f70b7f0339cce9bff79dde9b988e82570d96b7e14a890413e08b59d604281ba04ca9cefd7f30e2154a6270bfac06302b48460abc179af0709ce0e9f0fe1d47b5d47d90bdc596b50a3dd2c99b6d2c", 0x9c}, {&(0x7f00000036c0)="cca52b4112ddd26ef0dae3eb7d77cea632f340ad3c41a53ff74beba13831131215322dc8ecb1af88a8b93b3475c38e7a1eea1409c5d9d90635f857f09f7077abf1fad49a492767dfdd5bac5c9eae00fccbaa78ba76aecc63d5d75cca32944f29fa563b3c97032184617e01ae6274844f60c2133f469476423b1faea789a6c49c34e6819ec1f63bc9004919475acc83193a0171b60466d263dec1a0fa7179f4f3924be882485256b3abef75dc99feb48f34efcc6f39d509f318aced62de172235175d8b71ca791492f94513e6847272970ac73e", 0xd3}, {&(0x7f00000037c0)}, {&(0x7f0000003800)="261856902e80c8ae3e41d888a7262eca0890bc3cf7e2f541b15fafb4e53b7ab76c7e2ffb0064ad4938dab6c2daae2e5f678f7b1a78433b18528a64104d84cd0b70c568a4cf3c2da017fde89018fcec89a33ad813595610cd8997eca6448f24a6fb29129ac783c3b8f634244d26299059b21b4a5695df8f36018fd60df53a99603cb7711b2a4227a5ff01adf47c95c47e436f10d187a4e6378f6cbe920aef1453ec98f0481957f95070d7f588b4017ebafe56f21b56846d44b036fd76f067d43fbc76104a7a4046d536dc204acd3deeeeba535b157e62ba1bcb2f177d577c6c623f98690f811350c626d4acecdcf9", 0xee}, {&(0x7f0000003900)}, {&(0x7f0000003940)="610857d294096182c7594cfac8dc146efebc6d09a87a", 0x16}], 0x7, &(0x7f0000003ac0)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x17}, r5}}}], 0x28}}, {{&(0x7f0000003b00)={0xa, 0x4e23, 0x3, @private0, 0xf}, 0x1c, &(0x7f0000003ec0)=[{&(0x7f0000003b40)="cd8f200db4d69475e465799cce62bb367711eef66392017567194a7f24decf4530ec1815be4a760bf04df053ce163013c54a8485f064a85c115607c71a9fdbdeeb64eefbde94d07412d9661a40621f3404780adec8dafe3c3e5432cb57be905a95141037e0f118f76e7b5e7f09cedaae92ea4fc116d35ac07ed7395e57c02d3058dcb6753d2650d26ca51d4f47160850b9db995b4e8093", 0x97}, {&(0x7f0000003c00)="bf3c20b314cb9120e084906f0a90a131e90a1449701d364038041c040dca233d761fd5f1d42c67ed068b38ea34e34d7a395417189298db8cc6f547befee5382e2c7da58886c263e9703bc00b0b81fec0c652ef38ad6f9b3aabcb042517728c18ce3c56ea86452f4a41f80198f66743b051fe9cff663993f6a1bbd537994d6b188ac6c2f8f214e8935b458c43223776f7ef57755f783081e75d344001721c0af1fae4cf63dbae56345b560c944be0eb7d1499d109b32fca83", 0xb8}, {&(0x7f0000003cc0)="358d21e4e9ceeece42e1d9325b6b25344d4742ed75", 0x15}, {&(0x7f0000003d00)="bf92d0160c245ab12137ed2d4b9ba94c47bdc868e545643f788d768baeefb7b6d42d9070f145c6f7517716f840520a2c41fbd2b30dfdafbd56d766a3d71a41047a000f936d344e834ddd13381cd5e681e41bba7186dc176b4a37fd803a43e0995a5a3a06432c784cd5680d9164ec47684f2580cf59c324533f2d2b33a9d6cbff77d493bd62076dad46e5fe7b9bd52f761e48d4510f282f10200a140f234599e2b949e38e7f8c4a37a33411f1e3e32e167d6e75d08d3efb0b7137ed", 0xbb}, {&(0x7f0000003dc0)="631e25f44b0a09db2315f5ee5899b999a337d98bed74a91c461e11768d02b730e87f8bf0eb183bdc9d3ba64e654444d684db63a180beeb91090ca9aa71865d859d518a7858eb2151ceb836c2af5b37f477878b05c3bc2f21e2a5282d273a1d9e69bf7d5a8213ed6b36c9e8d49ecc9275095692b218f45eec245ac7c589f05e5b936d4b75004abdecc589bb9316bad6a271ff94d59523a4a515409b444b8f979bdeb55c92aea4c147f3eac60ab5d5ba999ba1c78bb316bcb86a9f9ca7d5b2afb3345e709fdf5c68b511a4e74efbe4f2e6f77e144365b39ee797ddb7d6873065a5e978e7", 0xe3}], 0x5, &(0x7f0000003f40)=[@dstopts_2292={{0x38, 0x29, 0x4, {0x4, 0x4, '\x00', [@pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x23, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x49dc}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @pad1, @ra, @jumbo={0xc2, 0x4, 0x80000000}, @pad1, @ra={0x5, 0x2, 0x4}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2e0}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x2b, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x5e}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0x7}]}}}], 0xe8}}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000004040)="d600bb86aa1a6361e41744371935016ecc9b2cb0b76e4378ca14c9c01ce12c46120ac17d9c49950159e8e8a973bf4d2ad54e25a85bb5e32012d1fd808b0d805e319265eba248fe5637778871972b40e8257224fb93ea25876b783c9663c4714f6fce58fba55c83afbb17", 0x6a}], 0x1, &(0x7f0000004180)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r6}}}, @tclass={{0x14, 0x29, 0x43, 0x3ff}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x58}}], 0x3, 0x404c080) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f00000042c0)={0x6, 0x0, [{0x6, 0x8, 0x4, 0x81, 0x6, 0x575e, 0xf}, {0x80000000, 0x6, 0x4, 0x80000001, 0xffffffff, 0x1000, 0x82f}, {0xa, 0x3, 0x2, 0x3, 0x0, 0x710, 0xa}, {0x7, 0xa7d, 0x1, 0x7, 0x0, 0xe, 0x7}, {0xc0000001, 0x9, 0x7, 0xbff0, 0xfff, 0xdc1, 0x8}, {0xc0000001, 0xa, 0x4, 0xc5, 0x6, 0x9, 0x48}]}) (async) r7 = syz_open_dev$mtd(&(0x7f00000043c0), 0x21, 0x101000) ioctl$XFS_IOC_FSGEOMETRY_V1(r7, 0x80705864, &(0x7f0000004400)) ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f0000004480)) 4m13.550242159s ago: executing program 0 (id=9477): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x202) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockname$tipc(r1, 0x0, &(0x7f0000000040)) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffe0, 0x7}, {}, {0xa, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xbf15}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x21001, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x2) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r3, @ANYRES8=r3, @ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x20006005}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) 4m13.337686974s ago: executing program 3 (id=9478): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x129242, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0xb, r1}) mmap$binder(&(0x7f0000d0a000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x800000, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0xfffffffffffffffe, 0x2, 0x7, 0xea7, 0x1]}) r2 = syz_open_dev$vim2m(&(0x7f0000000400), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x6, 0x1, 0x8c5d19f64a2f41a4, 0x0, 0x3}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16, @ANYBLOB="04"], 0x14}}, 0x28040000) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f00000003c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000001c0), 0x4}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) setuid(0xee00) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, r7, 0x0, 0x3, 0xfffffffffffffff9}) 4m13.264874742s ago: executing program 48 (id=9478): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x129242, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0xb, r1}) mmap$binder(&(0x7f0000d0a000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x800000, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0xfffffffffffffffe, 0x2, 0x7, 0xea7, 0x1]}) r2 = syz_open_dev$vim2m(&(0x7f0000000400), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x6, 0x1, 0x8c5d19f64a2f41a4, 0x0, 0x3}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16, @ANYBLOB="04"], 0x14}}, 0x28040000) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f00000003c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000001c0), 0x4}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) setuid(0xee00) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, r7, 0x0, 0x3, 0xfffffffffffffff9}) 4m10.784447938s ago: executing program 0 (id=9485): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1100000004000000040000000c"], 0x50) r1 = socket(0x15, 0x1, 0x5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setxattr$incfs_size(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000340)=0x2, 0x8, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x19, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x8, 0xee, 0x9, @vifc_lcl_addr=@multicast1, @loopback}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001680)={r0, 0x0, 0x1000, 0x61, &(0x7f00000004c0)="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", &(0x7f00000014c0)=""/97, 0x2, 0x0, 0x34, 0xf0, &(0x7f0000001540)="2c25cc8a665e70290127e00edfa41e598a8764d706228082042f59c8b5cc7f685ba4bb66952e15125f644e9a337c712dafbcc1a8", &(0x7f0000001580)="0b1b66def96df1aee75890f8a98024a6782c14e1048b745046924d1ad12570327162fdde32255e74c83d401d084223e255d81451952d12d9c44a858f46f6dbc7e9a9d781a8971995cd61a5f5c8999dfb424a9aec8751f00e21618ca618b94244efb0605e47057e39e9bbcfd5cfe3a906003c43524081adf2028022144b8fa8102a0dfd83ac046f90f55d0a269020c1af85afb19f7af8ba45a362e5c322f90d07e8317d23a6c6366210dd6ac2c6d0c3127b810a7869c2b0a8538660124f3aca07ecd43f5cfd4a4fa74ed710f77e87f32a99ae3c1f7bfee58f826f8b249b05d6eec24f8912f1f63ccbdb2869c5ec00fd30", 0x4, 0x0, 0x3}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a480000000e0a050000000000000000000a0000050900010073797a31000000001c0003800c00008008000340000000020c00008008000355cb40000000020900020073797a3100000000010000001100010000000000000000000500000a"], 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) 4m10.078988504s ago: executing program 0 (id=9494): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000080), 0x8, 0x20000) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x1, 0x9, 0x5, &(0x7f00000000c0)={0x21, "578822ac9b6ec01d036ca8b9d1fde61e061a58aaeaa89c715d9ac802635fdc7e33"}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001b80), 0x2, 0x0) write$vhost_msg(r2, &(0x7f0000001cc0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x3}}, 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x27c, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x1cc, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0x2}, {@in=@empty, @in=@private=0xa010100, @in6=@remote, @in6=@mcast2, 0x33, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in6=@mcast1, 0xff, 0x3, 0x0, 0x3503, 0x8, 0x2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev, 0x0, 0x1, 0x0, 0x3506, 0x2, 0xf}, {@in6=@mcast2, @in=@broadcast, @in6=@private2, @in6=@remote}]}, @policy_type={0xa}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd29, 0x70bd2d, 0x70bd27, 0x70bd28, 0x7f, [0x0, 0x7, 0x7, 0x5, 0x80, 0x0, 0x5, 0xfffffff7, 0x6]}}, @proto={0x5, 0x19, 0x6c}, @mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0x27c}}, 0x0) 4m10.016870718s ago: executing program 49 (id=9494): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000080), 0x8, 0x20000) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x1, 0x9, 0x5, &(0x7f00000000c0)={0x21, "578822ac9b6ec01d036ca8b9d1fde61e061a58aaeaa89c715d9ac802635fdc7e33"}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001b80), 0x2, 0x0) write$vhost_msg(r2, &(0x7f0000001cc0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x3}}, 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x27c, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x1cc, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0x2}, {@in=@empty, @in=@private=0xa010100, @in6=@remote, @in6=@mcast2, 0x33, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in6=@mcast1, 0xff, 0x3, 0x0, 0x3503, 0x8, 0x2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev, 0x0, 0x1, 0x0, 0x3506, 0x2, 0xf}, {@in6=@mcast2, @in=@broadcast, @in6=@private2, @in6=@remote}]}, @policy_type={0xa}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd29, 0x70bd2d, 0x70bd27, 0x70bd28, 0x7f, [0x0, 0x7, 0x7, 0x5, 0x80, 0x0, 0x5, 0xfffffff7, 0x6]}}, @proto={0x5, 0x19, 0x6c}, @mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0x27c}}, 0x0) 3m3.012367406s ago: executing program 7 (id=10223): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x880, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000600)={0x10, 0x0, 0x3}, 0x10) ioctl$CDROM_DEBUG(r0, 0x5326, 0x1) 3m2.872167071s ago: executing program 7 (id=10225): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x6802, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000000)={0x1, 0x4, 0x1, 'queue1\x00', 0x623}) 3m2.79688681s ago: executing program 7 (id=10228): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f0000000340)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x100, 0x10, 0xf1, 0xf, 0x10, 0x5, 0x0, 0x29, 0x0, 0xa, 0x0, 0xbd9], 0x4000, 0x43180}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x10000, 0x8, 0x0, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x5, 0x6, 0x6, 0x36, 0xd, 0x3f, 0x89}, {0x0, 0x0, 0x0, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x8, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xf}, {0xf000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x8000000, 0xc, 0xa0, 0xb1, 0x8, 0x3, 0x6, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x10000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xd000, 0x30}, {0xf000, 0x7}, 0xe0040010, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x20008]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0800000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000200000000000000000400000000000000d13dc4aa7a7daea96b858d50e0813f49082cd1df95c2d22d3cdedac6c4466cc0f25c925a35a44cf8fa5cab1040c9c94e75cd129782813136b6ddff4d91ec8259ada4ffa42e9aec2a66c019955a8678dafdeb514f1525561b1cf5775cedfbb6cda8318f84dc17dcf1b450a377b2f8634d97214c5a2a26e5e682d7b2c03e808f4fd3406792e85495add0933e269b00ad52590b7c5315dab31f46e08a4a47767b27b7f79ec1a90ec4794441ec1b3353d0979a179779207591a04cd9afa75a0e5b34", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) close(0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) unlink(&(0x7f0000000300)='.\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000ffdb3a254c0000000c00990008000000410000000c00580013000000000000000c0058003200000000000000ea68184202703e04c34492f3f6bb1c314d77a4a418676433f6ad3d82fad892c5f60158fe38c9498ce4066a76d763df9c903edddfe4c817d83bd8299956602cf5e753ee848d20056026a685154103a59dfcf3c09d2427d5b71555010ec991324f61f6580ea76fcddbe1b0dfc0f6ab1f5f987c4a0200000000000000eafd899d44ca3d0844b119d76ece315c00c2c105cf84e89ce3d1a43aaeb84801c0f8d421bd8afea2ce258271e0d5327e5478f9c755328208280998e8f22572a6e74c63b1ad168eb7cdce34de11db3b9631f9dbd6b9130738783f6ae4d9742207ddf5bd09e4283e0e1224d6818bfa7e5131a20a71e1de647fd0594924e7ae372b8b9414b1f197b68e79c708013449b45f7957800aafb6fdba84d62fdcc7497b9634369604231c72a0ebcb6f4542bcbe103b1ac525dfbaa09156513b442f370285aa46ce9d9afddd52e7be151bb009e812689fb3c21b002ef653812cbf685676835f6019c3f63f92a36ed2c73ebab821fc7a4bb3d671beaf9b2027756e752f9b91d084ba8cf05ed2b9f36e4a7219c00dd313910832964a65fddb857da1f52752061021ecf67e94f239cf0c5adb16eee1e918185ae4a870d1301c3a3b0c62d5e736780802070f719e155d425d71cdc266d19f92d41f6f6dc3a18dc438d90f39"], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x804) syz_emit_ethernet(0x2a, 0x0, 0x0) r8 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) 3m2.071771543s ago: executing program 7 (id=10232): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@loopback, @multicast1, 0x0, "2634784b05261d78b092012000", 0x0, 0xffffffff, 0x5, 0xf6}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@private, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500"}, 0x3c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x10000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000005c0)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000480)={&(0x7f0000001000)={[{&(0x7f00000002c0)="5baebc10d32c1a9cad14822e2af320a345ecc86b0416ece361c01985cddf292ecd8d99fb5e6e1617dfc11a636500e289a68d776445b5757dd0633d6732dfb383776fbe1c83db200134ed74dd7bc1d271330c311e8cfcd4f54aa39ed154b081d415522bf6d3c4e91bd644c77fbd4c7517aa57431fb26454210443012b695a6e2689b9853fa5e81dc779fcb1e8f3e9eee613c62f6b6cc0a25c37f98ff7c0f7de90acb1fe9c4dfc3dd3a49d6343085c0b8d3e3cd3d8375769b24a7f012743272ef3562cc9", 0xc3}]}, 0x1, 0x1, 0x2}, 0x1) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0xfffffffd, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffefffe, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) close(0x3) r4 = socket$pppoe(0x18, 0x1, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x1c) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x5040, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth0_to_team\x00'}}, 0x1e) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x0, "005c2beeb0801bd73c676461644cf36dfc15ea56886fff778a41757aa3ae714d"}, 0x3c) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) fcntl$getflags(r0, 0x1) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@dev, @multicast1, 0x0, "05888ee9654ce5db9229e6a1f0a3c9505e2ebbbc3d341ad6ad352965b867e20b"}, 0x3c) 3m1.930292954s ago: executing program 7 (id=10233): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xac}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)={0x0, 0x0, 0xf8f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb8}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'bridge_slave_1\x00'}) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000000c0)='syzkaller\x00', 0x0, r4) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x7b, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c20000000100"}) 3m1.277836043s ago: executing program 7 (id=10237): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x2, 0x7, 0xfe, 0x9}, {0x4, 0x7, 0x2, 0x7}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x8200, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x9f7e, r0}) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x1000, 0x200000b, 0x12, r2, 0x4000) 3m1.216672791s ago: executing program 50 (id=10237): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x2, 0x7, 0xfe, 0x9}, {0x4, 0x7, 0x2, 0x7}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x8200, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x9f7e, r0}) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x1000, 0x200000b, 0x12, r2, 0x4000) 2m12.497414842s ago: executing program 5 (id=10795): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) (async) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000000)={0xc, 0x103, 0x3, {0xf6, 0xec0b, 0x4c7, 0x1}}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r4, 0x7, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) r5 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[@code={0xa, 0x88, {"64450f11258700000066baf80cb8288c508cef66bafc0cb800500000efc421e5c6a6fa00000040b9a5020000b807000000ba000000000f304b0fc7a900380000400f01b803000000b96b0800000f32f1c744240093000000c744240200400000ff2c2466baf80cb80085fa8def66bafc0c66b8080066ef"}}], 0x88}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000bff000/0x400000)=nil) syz_kvm_add_vcpu$x86(r9, &(0x7f0000000040)={0x0, 0x0}) syz_kvm_add_vcpu$x86(r9, &(0x7f0000000240)={0x0, &(0x7f0000000180)=[@in_dx={0x69, 0x20, {0xab40, 0x6}}, @code={0xa, 0x55, {"66b822008ed80f239a0fc7bd40fdce34450feadb64f30fc777000f32b984010000b81c000000ba000000000f3066450f6f7e0366b8b4000f00d866ba4300b8d6930000ef"}}, @wr_drn={0x68, 0x20, {0x1, 0xab}}], 0x95}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m12.057337243s ago: executing program 5 (id=10801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x6, 0x1, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x10, 0x20, 0x4d47, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x2f, 0xfa, 0xf4, 0x70d, 0x4c, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x40, 0x6, 0xadd9}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000540)={@rand_addr, @dev, 0x0}, &(0x7f0000000580)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x6, 0x8, 0x50, @local, @local, 0x7, 0x40, 0x79, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x40, 0x7800, 0x2, 0x6, {{0x3f, 0x4, 0x1, 0x9, 0xfc, 0x64, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010102, {[@timestamp={0x44, 0x14, 0x9d, 0x0, 0x6, [0x99a, 0xffffffff, 0x2, 0xff]}, @noop, @cipso={0x86, 0x68, 0x3, [{0x2, 0xe, "3c4591764caeb7648ee9737a"}, {0x2, 0x9, "664d8ae345f4a0"}, {0x1, 0xb, "5cfe21932b6aac4cd7"}, {0x1, 0xb, "232de8a9b09bc89ee9"}, {0x1, 0x7, "10d1501ba0"}, {0x0, 0x5, "a0cf19"}, {0x1, 0x10, "d59ed29e1e4b8d71bf8f2f99b2ae"}, {0x2, 0x7, "c215168f77"}, {0x7, 0x12, "bafb2aabb916e37d8551b3b77bba8560"}]}, @rr={0x7, 0xb, 0xe1, [@multicast2, @local]}, @lsrr={0x83, 0x1b, 0xc2, [@multicast2, @empty, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x37}, @empty]}, @lsrr={0x83, 0x13, 0xbe, [@rand_addr=0x64010101, @broadcast, @private=0xa010102, @rand_addr=0x64010100]}, @ssrr={0x89, 0xf, 0xf0, [@remote, @remote, @empty]}, @lsrr={0x83, 0x1b, 0xd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0xb}]}, @ssrr={0x89, 0x7, 0x42, [@private=0xa010101]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x41, 0x2, 0x2, 0x4, @mcast2, @mcast1, 0x20, 0x10, 0x7, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x174, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r10 = accept4$unix(0xffffffffffffffff, &(0x7f0000000b00), &(0x7f0000000b80)=0x6e, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001040)={'\x00', 0x0, 0xa59, 0x0, 0x2, 0x5, 0xffffffffffffffff}) lstat(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001180)=0x0, &(0x7f00000011c0), &(0x7f0000001200)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001240)=0x0) lstat(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getpid() stat(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001480), &(0x7f00000014c0)=0x0, &(0x7f0000001500)) r20 = syz_open_dev$rtc(&(0x7f0000001e00), 0x1, 0x4000) r21 = getpid() lstat(&(0x7f0000001e40)='./file0\x00', &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001f00)={0x0, 0x0, 0x0}, &(0x7f0000001f40)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001f80)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002040)={0x7ff, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x7, 0x1}) r27 = getegid() sendmmsg$unix(r10, &(0x7f00000031c0)=[{{&(0x7f0000000bc0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000c40)="76b7141cb914d07a31a4dc4fb26d9884cb5a5a986ef114e30bf47a9b54dfc1cc994ff20edf96036fa73e35c4dff08e2f9ac85f80996d772a1cd66ac77a348ee577f2adf5c73bef78962278721469a581bd20330c4046454e6b8d74675116193a4419da1da88f", 0x66}, {&(0x7f0000000cc0)="4e88e3aebd572f85455c1f9472d21d55212f3a0856d4c559a476157c44c64f4f0064b25b3657ad519f162a18b4eaf883eef412b57d95d70ae7541d8eec7c624d5b7d0616bbf2073cbf800fc0758285a360a2814bbec5fab4ad756e9e7bdb03539896", 0x62}, {&(0x7f0000000d40)="1a72f28506d1a6514cd1c880781470dd9b46d314e8ecd12a4806a69c5be0b3c5af7419e1a288966c8944fb6b477fd592acb0047c150e969ed1d30ec919894c8b5c961130cdf7993f668331ad5e61b0f7412cdf2fdcfab463bf5c6e8be9c841b6e2a2e0f6a3c78c9bd6fb920b2dda0ec8389d3c7be0c8a7289737aa77d4b02e140392610ebd1bba8c161376f74a4889986c500a7507f40949", 0x98}, {&(0x7f0000000e00)="3630df5e540ed4a029d5eff49de4e6bf6370bb78d963b8dcf737c2eabbbbc3ce4fc3a558c3fe8fb94820a8a357c6327405f0f7da203fd0d52e458d5387240056d42406ca0a178f6b26a608057a9132adcdfb25bd53b69c0db8d88c1196bd8901dbff51df130c77d4fda73a35303bb5f840bc3e3a4627e61b984a6de16290a94f8e873e46b8fd0f2077523c2f8d1c3b1d5f28338dc6610a71b4d55edd61b3eac5e98b9b97846f0f", 0xa7}, {&(0x7f0000000ec0)="549e9bce3c81fad917da2093e390f9c219e86bf615ab2a7db150db97a674fce878d5c73a3c0c2f6a10a517b177b6f6cd802137e4936c8ea1ff0dd8daf29d338307a75beff1559e5ba511997a7949762a77308b0748b75247fdb5211d38aa650e75e61d2dc93f22d185be1f21a7249338b586f80c8c25f5284fac0708fe813b78d02f62e6d89938173ed9e7a87581663de8e492d05c55ec77046080a1fcf1093a86d399d68f8ecb3c751de4445ca945444f98b398f48035b0a9e315823be269d86cffe4b412aa311507a8b4d8661c4b12247ffb808ab55df218", 0xd9}], 0x5, &(0x7f0000001540)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}], 0x60, 0x8000}}, {{&(0x7f00000015c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001640)="35009ccdd0ac72f8fd44d092e37ec6bfaa9aca2bb9e5857e3539ed7c9a5858f0f1298247cd5f331a2cc228bba782626dd66ecaa64391ae3cf3b57b452ef490a654cd38b461c9a7ccbf16ea46cdb0e8bc4b6b46d36bfb2f9d7e9a5cbadd9c3692c12492a51dda56a27ed52c91e9e7324ab94aea65d55420648f87a70c2f97629156cae0d7dcae1eb303accbfbde8c4d1c6386a68cfa43e20d991746be59ec4001", 0xa0}, {&(0x7f0000001700)="375ffc7f2eb75cc5a09540c98a4fa5fb00c868c24807e0b575b5b0f8958602c7c450bf856c305730adabbb6372c704d38b9ec1f84fff358a13e186cbbe398f2aed1979f86a487cfb35f0602d3951dd10f2d64278fd69ac7be8b9ef2faa13fadecd55c481aeb6b2837c425c999b9dea22ba057b11816ee362fd5b22a0984469baecd2dd79be33bb32f909bf4e80409d308b464f9bacea5c240e9341bb79abaf56731bc5f8eb25d7484ca283e107abb54ddab153d3e25293afc1d65b7c2432684f8b30144073ec164df4ae5dd2e63ca43915e1ff442e0f7eb9e0a49319485162fec3cbf19f", 0xe4}, {&(0x7f0000001800)="822897e5f455aacc5bd45063e0e1", 0xe}, {&(0x7f0000001840)="250f76d0ee591f623695f0b977eec2c23628f087a640891fb1d529ee43c48bbcabf7e0a83462a8027a2385bd14bfd85a54978ac8892f36f75a49b95651d59b8c6c6b41dfa36056f0f6f6581fe109a25358f3baeddbdc10e4b5b971d177ce36277715ef143bb0e29799d245f5ba170f25aae6745e575243680e", 0x79}, {&(0x7f00000018c0)="ef736d4892b638714d9391e26fb66d0271444789dc98b04b8bab800a7ced70a5d48284192699a0111fb85882d5d0c1b1a0cce324be9fe3afa4befd8cd07e9f047ae39bd2ee92f724160848821d87244cd1262225933f9c1a26bffc930871b59376add993e74d064ec30fbfec0774151a71f1373960630600efb61c084255792e92e80354b11c278b4923e381bd9ef82fa0f8016c46d6f7321c59a0f3ce31c48e37114a7da0d35f8348cad32f3c8c2ccb6c18f11ca5932a2b627f4d0ed7ce44e94c9c67e48aecfa1c1f540f0ed309686d59fda1976bf9b95d432907", 0xdb}, {&(0x7f00000019c0)="d966b8f84f60ad4434bc887ac14743b239a089d394d6bdb7df7a63e0abe35f02958efc9bcd85da5bdf09e5591a07b8cedf6b0b46a31af44e19", 0x39}], 0x6, &(0x7f0000001a80)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}], 0x20, 0x8800}}, {{&(0x7f0000001ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001b40)="bb2c6617154b2b93c2002a02889898a6bab4882081b5df355f8f79e866e6eb73c732dfd39ca69c878e61404a335610c105cd1645cda11e7fac9f0c9024074d65536a3150f735fd2e36ff70be3211", 0x4e}, {&(0x7f0000001bc0)="34a8c242a1521c6484a92b23e272387a4d5f3f2bfea546bfed04e8113cd15bdbebd1d2c038ac727dc57e10dac86d77715b1f8f7c6fe150c6ebb0e45f36ea4a847f77c7a6e2caa7b7628c3d78dbf350547bbb85899eccdafc1299721d6da07c65149040ce9e6014dc0ce32607e4bfaa4ed5f6211c642368391c51755172243041a7d3", 0x82}, {&(0x7f0000001c80)="2dbd0c8f425c13d95190c6a4fa274e254f3e4c95ff8b2695c75da92478f6cff99b018a4694621d9f0c03d62a71f2b2520d25e00607", 0x35}, {&(0x7f0000001cc0)="70eec22975f9ce4dbd792654e39ab8f59b0aea023e64b832016ae0df9af5d6d78bbff64b4b056c3cb8bb3fe7e3151af407b08de8f1d5e4b051c33ea92bdc0ec30cc848ee3d1fe2ee5913367e818e45575d4200a55a3c01dfbc79db6118b19dd876e8e554e0468d324c69567eda0b5d2656424c12243235c7399c2999cdc16654f6006075b0d0aca3fa2a73aa6c6d8257668a4385ebbd9e9e14e60157555a6e3c692a619ff85b59e82115a5d042d6ff49390d95563136d3f9c9c394291abaf54bce0c46b5b9800e178043bc482a247ebae07e2ee23e3f0a3f9371e713722d96ec3f", 0xe1}], 0x4, &(0x7f0000002080)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r20, r0, r0, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r24, r25, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r26, 0xee00, r27}}}], 0x118, 0x4000000}}, {{&(0x7f00000021c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000002240)="8899eee1fcd4f16aa8d4a02788a770f7fb39ffc2e8e71a35ee7d0ef34cf5faa34a21562348438965ca94b9a6e4fac2adace401691e754401383da32517858f661238b6d57b0139a8b1a8965fbc09afab72aef6dc36328e1927490d1b6a96da835c2051b3c95a395907", 0x69}, {&(0x7f00000022c0)="678560ddb516796912f1261d995db9a91c95e056d4a0497a6323b41936f1d9ea1adbf29cdaafe0c2f448e9e963478336bbe8a129cdbf2773b49e347da1f577674d03ae2d287f43e8ec71f196f851c39cd158792580517ca631a3319815d4e432b5b7de38f4ef1a131e63706247810932e68d18f73c7f717d27828f46534c2eafef13fdf9c881d38a024a9a9abd1984c12617d68c40ce020843052efdbb16fa7d83571a272903", 0xa6}, {&(0x7f0000002380)="323b34d4f0bc991d5434e15bc7a1b15f9aa077deb599b17ad2ac476235dd089d58b88eba56c8d0c29d02f4e9d947b48c1b4bf9d0bcf0e239796104738446c89d70b03ffa1cb6177bd16a30b5998cf4f42dbc54f4192a223673ea2502f4", 0x5d}], 0x3, &(0x7f00000026c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}], 0xa8, 0x4064}}, {{&(0x7f0000002780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002980)=[{&(0x7f0000002800)="80f8a15b2ca92d637dfaa563d8230273784110efc4c3b03f55647d18629bb33f68a7efdf276c81ffbaa3124c6661056b61ca9e12d81fe3ce2908b9bd4d462969204b01d28f3c078ffd37614d2217fd046a272df9a08b565d8339bf2402b5baafc9ae9e3dacf0ca", 0x67}, {&(0x7f0000002880)="6fc23539e3823407a74cefb7999f9dd8150b1dbae79acd515cbb079d901f708f40ea42ffd69e3de8caa31546b12a3b46cd57b36dd6452a5c6ed0211c7a0dee3c9cc375d8c3af49d1336193f3cd242c0b66bb0e7c8641606bb48749c47979692461b4499a090440bf605e180e38c8a155a00dbd2203f349ac95cd42e72232628ac70f41b53d7282d96e16291ffca5ca95272b07018dc175a5471416beafade2ed92", 0xa1}, {&(0x7f0000002940)="f45c5c1609238c48d2177b015b6a852da212e129419f", 0x16}], 0x3, &(0x7f0000003080)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @cred={{0x1c}}], 0x128}}], 0x5, 0x40000) 2m11.973703308s ago: executing program 5 (id=10803): memfd_secret(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x8fd, 0x12) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() capget(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000040)={0xc, 0xd, 0x174, 0x0, 0x9, 0x6}) (async) r3 = socket(0x1, 0x803, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="cd350f18ae5a9fb491860667f2aefce2c97abf239943608ee18e5348ed411d372b7609d540b1c5b1452efcaf189a6aefb3947244a4283533b8ca21017068931630676f49c8087c1481c139527d01e3e92c25aa0724f4a44be059fa794f4a9bf11bcf"], 0x40}}, 0x0) 2m11.878416281s ago: executing program 5 (id=10806): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x145840, 0xc1, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@rq={'rq', 0x3d, 0x6}}]}}) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x4) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x883000, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x145840, 0xc1, 0x2}, 0x18) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@rq={'rq', 0x3d, 0x6}}]}}) (async) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) (async) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') (async) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x4) (async) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x883000, &(0x7f0000000c00)=ANY=[]) (async) chdir(&(0x7f0000000080)='./file0\x00') (async) unlink(&(0x7f00000002c0)='./file0\x00') (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x1) (async) 2m11.877774111s ago: executing program 5 (id=10807): fchmod(0xffffffffffffffff, 0x1a0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x2, 0xa, 0x0, 0x3, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x7800, 0xb, 0x6}}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@deltfilter={0x58, 0x2d, 0x310, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x8, 0xf}, {0x3, 0xffff}, {0xe, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffff00, 0x0, 0xff000000]}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x90}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4840) r2 = open(&(0x7f0000000200)='./file0\x00', 0xc6980, 0x26) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000240), &(0x7f0000000280)={'L+', 0x6}, 0x16, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0), 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', r1, 0x20, 0x10, 0x7, 0x3, {{0x25, 0x4, 0x0, 0x3, 0x94, 0x64, 0x0, 0x0, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x17, 0x5b, [@remote, @remote, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2a}, @loopback]}, @lsrr={0x83, 0x17, 0x44, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010102, @loopback, @local]}, @rr={0x7, 0xf, 0x7b, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @lsrr={0x83, 0x23, 0x68, [@private=0xa010100, @private=0xa010100, @rand_addr=0x64010102, @multicast2, @empty, @loopback, @local, @multicast1]}, @rr={0x7, 0x1f, 0xc3, [@private=0xa010100, @loopback, @remote, @rand_addr=0x64010101, @rand_addr=0x64010101, @multicast1, @remote]}]}}}}}) r4 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r4, &(0x7f0000000400)=""/33, 0x21, 0x0, &(0x7f0000000440)=@caif, 0x80) fcntl$setstatus(r4, 0x4, 0x46800) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) r6 = syz_open_dev$vim2m(&(0x7f0000000500), 0x1000, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000540)={0x5, "d512f74ba4e4d3ecfcf3558ad048627d8b5cd347055e2f89bcfddeb4b187a8cc", 0x4, 0x10, 0x7bd, 0xee7b, 0x11, 0x1, 0x7ff, 0xe}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r7, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "4dfe88cf5b95"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) readv(r6, &(0x7f0000001880)=[{&(0x7f0000000700)=""/108, 0x6c}, {&(0x7f0000000780)=""/237, 0xed}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3) timer_create(0x2, &(0x7f0000001a80)={0x0, 0x2, 0x2, @thr={&(0x7f00000018c0)="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", &(0x7f00000019c0)="ff75333b037d17c5b224d8234bb5258f61ff26f7912bb83daf93706c8390700e388a2f56663d9ebeb6c1dc33623628014a38e63ec5ac941a077909c2d0e29dcecaf7a75755e4fc0b0e1cc99ce7b50a53dd34564da28dd54739f0845d150f5345953d5115803b847c35068f9a084d498b699111feb0c5369699a723d89a3804c545f50a9ed0d9932e1e1f722035d58b4ead7f9445b9a050e9af33c53ef516a608eaddabdd0b25e0cbe4f38efab91d5d56bff5ded9c2f39ab34aa79a9e0c1f78"}}, &(0x7f0000001ac0)) sendmsg$nl_generic(r0, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x54, 0x1c, 0x800, 0x70bd2a, 0x25dfdbfd, {0xe}, [@generic="0fd71031b4e5a9834c9f99e67eddf5be3e6eb483ed4fa5c6c69ef8db5f006965c43bf334b89b6c35b00bbd2fa1169a38b3a320cdbcff3b0db34b513edf9e46"]}, 0x54}, 0x1, 0x0, 0x0, 0x24040800}, 0x800) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x4c, r8, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x2}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xa}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x6}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x4c3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xaed4}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x5}]}, 0x4c}}, 0x800) sendmsg$nl_crypto(r0, &(0x7f0000001f80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e00)=@get={0x118, 0x13, 0x800, 0x70bd28, 0x25dfdbfd, {{'ecb(blowfish)\x00'}, '\x00', '\x00', 0x400, 0x400}, [{0x8, 0x1, 0x71d8}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x6}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000040}, 0x8) sendto$inet(r0, &(0x7f0000001fc0)="2de6b1c9f7a040257a62460631a818cc185e811bbe0b07663eb45ee2820db592255f5e4a4df35f1e94ca66b4f772997f163923fdf3261037d6e5a5d779a3dd2e30b05937d2adec0375a4a80f1904c5e9b678c1e8b9b7b0b976c37978e8d13bcf11f198a34535313b8fdb9bf6a873f3ecbb9352a3f69cac82ea9acbae8ac143e5e242d656130ad70fc931fdee3daac8f2a2637f36823eb14c5dbc9a91c78a8aca939ed038951da2467c17baa08eda844e44d28337", 0xb4, 0x5, &(0x7f0000002080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendmsg$kcm(r0, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000020c0)="5942d2787f89e5204ee8e4a21008649af84eb6ae753c4683979d4ef871c6b83ca75ba66caaad76ee4cef34bf179e1e92aaecbd2c59db91b01252c461492f675012243c8bc806a24b68a933c1ec53d890ad6571889451f7981e69164b119f198c2130473937d6879c952271b0b9fd2dd5cfd62b4302bee87cb05996ba63e6bb3fc6616c908557dfce1630c83d58db779a62589f2ca1fa570cebcfca7bf513083f7cb6e24bd4c35dc96c1736d4f5e82ffd4be65b607628daa5f5b412988bf97a9a97d8d12c622f309953564c5a16ff2d2f546b618364f277e1ae2fe3b45e810740a447498e77114ecf301382eb", 0xec}, {&(0x7f00000021c0)="507715", 0x3}, {&(0x7f0000002200)="7bbc6e3c6fe4d1eedf34d1edc5e3e69eedc5e6d6af85dcd2f18788f27c2bfb97418490cf50aa3f4c2e42f444ec7d5e4cfd1f0a65a56c0ac78e77b9a7b726713f32af3200168821d4f61b144d448ba1794c899658bde138d60959bbb4a4ab9b96de74ff4a6f71eae7483d4e352a25c824949cf64c305cff0d8f09067d0beda50a5f5cd8d97ada0f64e7e3de9fc7766b687d212f82e202af877c443c5a846c", 0x9e}, {&(0x7f00000022c0)="0c3db0993e7dd07e3bd6e4b04bfe4a36c4bdc1e34163fb0b4d2b3c6fdcf382aba803a1e5ba1303259988341e944863eccd83b40eb8d78241723c82518f81e6d9f3aa123c27872927f0c5d299a092bff4ce12d757a3d7a1191459e39ae4f61062ac1a7ebbd5c5d17e03d9a78a1f37f868acb95d791aadc39142b30870039532fca95f789d390fa7668f57c08799cd4114593f315d2a2f8e9100c52b897dba2763ad0e1945f21a56e065a2775517bfde3ec5b9077fb1ee87a327e03cfe2cc4b7ab068b9d", 0xc3}, {&(0x7f00000023c0)}, {&(0x7f0000002400)="b2fd861c2b247bffc3e82e1281f24ce2369debd89a056a1833939a29cdc5c6cbb06224789752814da8c70d3af2ae83798ecb5cf3cf47fa2d348146434bdfeecc5660970f357a990e74e7e35a2ad1a80fe83b5539e04f42cee227d82e530214986f5c84a813c90a473e251296741130fb685e606197064c687ddd4bc91cbd3d80389deee114d9c5a70adbda7a8063a0c1531e72c6428d1700b9e2a1d398eba958900fc6e5b9b96d2b1832b490cbae007b4fc002ea9660d30ea16e6f12a5a63d2bda8cd99d65c46395fdb5c5f7500fd495e3c2220bfec0b8f5076e141289b095d2a50d7518f5cc7632dd229b318edb5931ddb8d73db6", 0xf5}], 0x6, &(0x7f0000002580)=[{0xf8, 0x101, 0xe, "cbb17c91dc3b236db0f15aa1e72e2882b46da80cce13936e5fb0354027221b4a259824747dd900a5f05c3d8073688996b7ca02b34ebe4f2f0ee8c997c6d356fe6d1bd09185f1627f195438aa81fb0c32a614ee9859e459ce41720ff74412611e5d75eb381b1283d73ce20b1b167a4929b37326e221b8ff22fa5bf40f9b2fd4ccca14287ceb5fdffb50980279dbbc0a61d8d7e50358a319584afe9e77a5046a70117851d5c19d2404cea438d49500ecba68646270ccfeedc893f14789af6e554a4e822d56c2b0264794e61879ae2b1b5b833eb80da83add4c2077009a687d63b5caf28ecbcc"}, {0x38, 0x101, 0x1ff, "577891b199f861020cdf32d867d70e361fe7540b7b43991431116f7d84a9b418c75bdb0a79753314"}, {0x50, 0x111, 0x80, "2c3dc2fcf1b1fa6cb1a0d5728845338ec3cc1afcd1c1e0f7c87f4874f68fbbbbce703eb6b20faad3c5ff1bb619225c2e16cf62523249eba70718385621"}, {0x40, 0x110, 0x9, "ebfc23c88d1fcbb63c519d02adbc7d3af2e17c35c1cea92ff3f1d07ed583daf823a414c5425cfd32a22bda3f6559da72"}, {0x1010, 0x10f, 0x9, "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"}, {0xd8, 0x10c, 0xffffb0f4, "30fbe6f35e3436e6a97521e462dbb5385ad22a2d221e20517c557c26a94948f3354e15c6e878752aed63b7935a8371e99fcba5c9c88f289b40928017c646229315e7eb6f0ea052d05d5e3e6f5ebab91bb847f32c758588631ac56f5a66ce4f95de7bd13a70ec82f742b1b5f593b9f335f864f798d1e476bb1aa620bd38245ed201d6cc6802413ce93304ef907798931df41cc96e035bcdd8779b3bdede0eff180c99525e9b28785549261fa0bcd62d9e5ee54f90d18fc18898c5133a0d8352c9d3c918a833"}], 0x12a8}, 0x4000840) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000003880)='./file0\x00', &(0x7f00000038c0)={0x440000, 0x0, 0x1}, 0x18) clock_gettime(0x0, &(0x7f0000003940)={0x0, 0x0}) futimesat(r9, &(0x7f0000003900)='./file0\x00', &(0x7f0000003980)={{r10, r11/1000+10000}, {0x77359400}}) syz_genetlink_get_family_id$nl802154(&(0x7f00000039c0), 0xffffffffffffffff) 2m11.002050191s ago: executing program 5 (id=10818): r0 = open$dir(&(0x7f0000000100)='./bus/file0\x00', 0x210000, 0x41) mkdirat(r0, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) listxattr(&(0x7f0000000280)='./bus/file0\x00', &(0x7f00000005c0)=""/159, 0x9f) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) (async) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040850}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) lgetxattr(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0) (async, rerun: 64) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x3, 0x4, 0x6, 0x6f, 0x0, 0x3}, &(0x7f0000000a00)=0x9c) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) (async) r6 = syz_open_dev$video(&(0x7f00000001c0), 0x81, 0x361000) ioctl$VIDIOC_G_FBUF(r6, 0x8030560a, &(0x7f0000000500)={0x10, 0x0, &(0x7f0000000440)="4eea183cac36f5cc2f92ca42865b8121082ed42f194ae7c817fb5bea22f4d32d5ef17bca49440287e9e7ecef540ef42cc4284ac8a8a470831502aaefeeede85346cf954980e20e9c8a3d2ce9e0da2c08b36eabbff9b0528536f50ec28521deb88b78742b0ac115b429a89d58b823730d56fdc208d2c8d80b338dc2cb40784e944b2d37ef71b5c79d5c29e9a6ff05ce3dd20d43c510fcfb801b51e29eacb8344ec9cae3fea16d48d8d7ac2e579b56", {0x8, 0x200, 0x362e455c, 0x8, 0x5, 0x817, 0x9, 0x7}}) 2m10.874471744s ago: executing program 51 (id=10818): r0 = open$dir(&(0x7f0000000100)='./bus/file0\x00', 0x210000, 0x41) mkdirat(r0, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) listxattr(&(0x7f0000000280)='./bus/file0\x00', &(0x7f00000005c0)=""/159, 0x9f) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) (async) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040850}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) lgetxattr(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0) (async, rerun: 64) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x3, 0x4, 0x6, 0x6f, 0x0, 0x3}, &(0x7f0000000a00)=0x9c) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) (async) r6 = syz_open_dev$video(&(0x7f00000001c0), 0x81, 0x361000) ioctl$VIDIOC_G_FBUF(r6, 0x8030560a, &(0x7f0000000500)={0x10, 0x0, &(0x7f0000000440)="4eea183cac36f5cc2f92ca42865b8121082ed42f194ae7c817fb5bea22f4d32d5ef17bca49440287e9e7ecef540ef42cc4284ac8a8a470831502aaefeeede85346cf954980e20e9c8a3d2ce9e0da2c08b36eabbff9b0528536f50ec28521deb88b78742b0ac115b429a89d58b823730d56fdc208d2c8d80b338dc2cb40784e944b2d37ef71b5c79d5c29e9a6ff05ce3dd20d43c510fcfb801b51e29eacb8344ec9cae3fea16d48d8d7ac2e579b56", {0x8, 0x200, 0x362e455c, 0x8, 0x5, 0x817, 0x9, 0x7}}) 2m2.752908596s ago: executing program 8 (id=10902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44080}, 0x2) getsockopt$inet6_udp_int(r4, 0x11, 0x65, 0x0, &(0x7f0000000080)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000280)=0x4) syz_emit_ethernet(0x256, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6021000002000000fcff0200000000000000000000000000018600907800001900fdffffff00000000050aa78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18020001000000000000001991319c000518fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde27a5b85b9d930914625d8a049b4cf0d129806a610ad8467a6b2600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef5523e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"], 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x3, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1803000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="840100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="80040000000000000a000100aaaaaaaaaa150000080004"], 0x318}}, 0x20040800) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0xfff2, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x40000004, 0x6, 0x4025, 0x8}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb0f}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004890}, 0x20084084) 2m2.589876273s ago: executing program 8 (id=10903): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2m2.587390246s ago: executing program 8 (id=10904): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r0, @ANYBLOB="46060900000000001c00128009000100766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2m2.504633422s ago: executing program 8 (id=10905): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip_vti0\x00', 0x54) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4, 0x0, 0x3, r0}, 0x10) select(0x0, 0x0, &(0x7f0000000040)={0x4, 0x472, 0x1, 0x25, 0x101, 0x8000000000000001, 0x0, 0x3}, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3, 0x10, "3eccd8010000000000000010000000040100"}) socket$nl_generic(0x10, 0x3, 0x10) umount2(&(0x7f0000000340)='./file0\x00', 0x8) 2m1.288051949s ago: executing program 8 (id=10917): r0 = socket$kcm(0x29, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x5, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0x8ea1, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xffdffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x9, 0x7ff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x4, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0xfffffff8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0x101, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0xfffffffe, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) readv(r2, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x4, 0x5}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r3, 0x90000915, 0x200000000005) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x8273cddbb86186e5, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x80, 0x6, "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", 0x2, 0x6, 0xe, 0x8, 0x2, 0x1, 0x40, 0x1}, r4}}, 0x120) 2m0.699499726s ago: executing program 8 (id=10920): r0 = syz_usb_connect(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010000104000000000000000000000000ce895ddb5f402927b2455ff84d9acf8f7475740b54045a4010b9edd5dd17abf68906517ae9a0273aa4e6b909ef", @ANYRES32=0x0, @ANYBLOB="0201000000000000340012800b00010067656e65766500002400028004000600050009000100000014000700fc0100"/60], 0x54}, 0x1, 0x0, 0x0, 0x2000c830}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x80, 0x0, 0x23, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x40, 0x1, 0x1ff}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x178, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x4}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x4, 0xbaa, 0x8, 0xa, 0xb988, 0x0, 0x1, 0xe149, 0xa, 0x8, 0xa, 0x1c, 0xf, 0x0, 0x9, 0x32}}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x51}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000900)={0x14, &(0x7f0000000880)={0x20, 0x31, 0x3, {0x3, 0x23, "cc"}}, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x1c, &(0x7f0000000940)={0x40, 0xe, 0x6, "e64dded83028"}, &(0x7f0000000980)={0x0, 0xa, 0x1}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x7d}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x8, 0x10, 0x5, 0xc3c, {{0x38, 0x4, 0x1, 0x4, 0xe0, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast2, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x2, [{@local, 0x5}, {@multicast2, 0x1}, {@broadcast, 0x84}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@private=0xa010100, 0x800}]}, @generic={0x86, 0xe, "f1f1bc2a79c34eb42bf9509d"}, @cipso={0x86, 0x1a, 0x0, [{0x7, 0x2}, {0x2, 0x12, "10c6e0ea0dab3b7e9796c3bf29dd2b32"}]}, @noop, @rr={0x7, 0x27, 0xfd, [@multicast1, @broadcast, @broadcast, @remote, @broadcast, @multicast2, @multicast2, @multicast1, @multicast1]}, @noop, @timestamp={0x44, 0x8, 0x8, 0x0, 0x3, [0xb]}, @noop, @timestamp_prespec={0x44, 0x44, 0x3e, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x4, 0x0}, 0xfffffffa}, {@private=0xa010100, 0x3}, {@remote, 0xe551}, {@multicast2}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@loopback, 0x6a}, {@loopback, 0xfffffff7}]}]}}}}}) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r12, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r12, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x40014) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x178, r4, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0xffffffffffffff8c, 0x1, r5}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0xf, 0x2, 'xfrm0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r15}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x60040010}, 0x41) socket(0x840000000002, 0x3, 0x100) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) 2m0.667407162s ago: executing program 52 (id=10920): r0 = syz_usb_connect(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010000104000000000000000000000000ce895ddb5f402927b2455ff84d9acf8f7475740b54045a4010b9edd5dd17abf68906517ae9a0273aa4e6b909ef", @ANYRES32=0x0, @ANYBLOB="0201000000000000340012800b00010067656e65766500002400028004000600050009000100000014000700fc0100"/60], 0x54}, 0x1, 0x0, 0x0, 0x2000c830}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x80, 0x0, 0x23, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x40, 0x1, 0x1ff}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x178, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x4}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x4, 0xbaa, 0x8, 0xa, 0xb988, 0x0, 0x1, 0xe149, 0xa, 0x8, 0xa, 0x1c, 0xf, 0x0, 0x9, 0x32}}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x51}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000900)={0x14, &(0x7f0000000880)={0x20, 0x31, 0x3, {0x3, 0x23, "cc"}}, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x1c, &(0x7f0000000940)={0x40, 0xe, 0x6, "e64dded83028"}, &(0x7f0000000980)={0x0, 0xa, 0x1}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x7d}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x8, 0x10, 0x5, 0xc3c, {{0x38, 0x4, 0x1, 0x4, 0xe0, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast2, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0x2, [{@local, 0x5}, {@multicast2, 0x1}, {@broadcast, 0x84}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@private=0xa010100, 0x800}]}, @generic={0x86, 0xe, "f1f1bc2a79c34eb42bf9509d"}, @cipso={0x86, 0x1a, 0x0, [{0x7, 0x2}, {0x2, 0x12, "10c6e0ea0dab3b7e9796c3bf29dd2b32"}]}, @noop, @rr={0x7, 0x27, 0xfd, [@multicast1, @broadcast, @broadcast, @remote, @broadcast, @multicast2, @multicast2, @multicast1, @multicast1]}, @noop, @timestamp={0x44, 0x8, 0x8, 0x0, 0x3, [0xb]}, @noop, @timestamp_prespec={0x44, 0x44, 0x3e, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x4, 0x0}, 0xfffffffa}, {@private=0xa010100, 0x3}, {@remote, 0xe551}, {@multicast2}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@loopback, 0x6a}, {@loopback, 0xfffffff7}]}]}}}}}) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r12, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r12, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x40014) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x178, r4, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0xffffffffffffff8c, 0x1, r5}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0xf, 0x2, 'xfrm0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r15}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x60040010}, 0x41) socket(0x840000000002, 0x3, 0x100) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) 35.317350648s ago: executing program 4 (id=11782): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) (async) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x283) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb5, 0x1, 0x8, 0xfc000000, 0x0, 0x80000001, 0x4000}}, {0x4}}]}]}, 0x48}}, 0x4040000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010426bd7000fedbdf2503000000300001"], 0x44}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) r6 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) unlink(&(0x7f0000000140)='./file0\x00') mkdirat(r6, &(0x7f0000000340)='./file0\x00', 0xf3) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x3) (async) setxattr$incfs_id(&(0x7f0000000100)='./bus\x00', &(0x7f0000000240), &(0x7f0000000200)={'0000000000000000000000000000000', 0x31}, 0x20, 0x3) open(&(0x7f0000000180)='./file0\x00', 0x3000, 0x1f) 35.029570942s ago: executing program 4 (id=11787): mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='pipefs\x00', 0x24010, &(0x7f0000000100)='barrier') (async) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) splice(r0, &(0x7f0000000200)=0x126, r1, &(0x7f0000000240)=0x80, 0x80c6538, 0xa) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfb, 0x2}, 0xc) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x200000, 0x8000000}, 0xc) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbff, 0x11008000}, 0xb) (async) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bind$netlink(r4, &(0x7f0000000280)={0x10, 0x0, 0xfffffffc, 0x2}, 0xc) (async) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc) (async) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000300)={0x10, 0x0, 0xffffffff, 0x22ffffffff}, 0xc) (async) r8 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) pread64(r3, &(0x7f00000003c0)=""/190, 0xbe, 0x8001) (async) bind$netlink(r9, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000380)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f0f00ff", 0x58}], 0x1) 35.02806662s ago: executing program 4 (id=11790): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0xf, 0x0, &(0x7f0000000040)) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) (async, rerun: 64) umount2(&(0x7f0000000340)='./file0\x00', 0x1) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8992, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000480)=0xe8) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000280)={r6, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4000000000000004, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491c54e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd0000e7744b74eaa2317fdd9db2fea7e7d63f9a007866063c8c162b99d845fb", [0x61, 0x4]}}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c000000040a030092114227915f00000000000000000200000809000100739a7a3000000000000000020000003200000000a954155593e520fedfd0f7ed63c471b198e4f587fb4888da14fe191bbded05a73be2ba32a2723747550b1e87c480afdcc588451241cc3ad4449ec2bc1f0658330ac9dd460de11c0e49e17bcb48e1d5bd364ebe56f3eaac9307c6760fde2f4cc72d2bf0028a4b19957b65f939e71c656a98df77e90c34f5d5e21f762217"], 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x4) (async) mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_off}, {@redirect_dir_off}, {@xino_auto}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x30, 0x0, 0x66, 0x32, 0x33, 0x32, 0x64], 0x2d, [0x35, 0x63, 0xe, 0x37], 0x2d, [0x32, 0x66, 0x37, 0x62], 0x2d, [0x34, 0x57, 0x37, 0x39], 0x2d, [0x33, 0x63, 0x62, 0x63, 0x35, 0x37, 0x63]}}}, {@appraise_type}, {@uid_lt={'uid<', r5}}]}) 34.799884299s ago: executing program 4 (id=11792): syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffe}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff0000", 0x6}]) (async) io_submit(r1, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff0000", 0x6}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x5002011, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x5002011, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') chdir(&(0x7f0000000140)='./file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') mount$bind(&(0x7f0000002280)='.\x00', &(0x7f00000022c0)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) mount$bind(&(0x7f0000002280)='.\x00', &(0x7f00000022c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$sock_attach_bpf(r2, 0x1, 0x49, &(0x7f0000000040), 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x49, &(0x7f0000000040), 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) (async) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000bb10030028001280090001007665746800000000180002801400010000000000327950d071ba5729d41829c402c1dd957bbdce862098999d5f96154841729db94a7702450891eebce3c4b5dc4723e622fb063952ea59", @ANYRES32=0x0, @ANYBLOB="8200030022000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000081}, 0x24008000) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c54056368bcbf667363616368652c76657273696f6e3d3970323030302e75"]) rmdir(&(0x7f0000000040)='./file0/file2\x00') (async) rmdir(&(0x7f0000000040)='./file0/file2\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x52) 34.644848493s ago: executing program 4 (id=11795): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101d41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000004c0)={0x81, 0x0, 0x1}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x100, 0x10, 0xf1, 0xf, 0x10, 0x5, 0x0, 0x29, 0x0, 0xa, 0x0, 0xbd9], 0x4000, 0x43180}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r5}, [@IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipv4_newnexthop={0x70, 0x68, 0x4, 0x70bd29, 0x25dfdbfd, {0x2, 0x0, 0x1, 0x0, 0x2}, [@NHA_GROUP={0x44, 0x2, [{0x1, 0xae}, {0x1, 0x9}, {0x2}, {0x0, 0x9}, {0x2, 0x2}, {0x2, 0x8}, {0x0, 0x7}, {0x0, 0x9}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_TOS={0x5}}, @NHA_OIF={0x8, 0x5, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x10010}, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x10000, 0x8, 0x0, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0xff, 0x42, 0x5, 0x6, 0x6, 0x36, 0xd, 0x3f, 0x89}, {0x0, 0x0, 0x0, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xf}, {0xf000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xffff1000, 0xc, 0xa0, 0xb1, 0x8, 0x3, 0x6, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x10000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0xe0040010, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x20008]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 32.206699853s ago: executing program 4 (id=11814): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0xa4d2, 0x40, 0x1, 0x3bc}, &(0x7f0000000300)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8e40, 0x0, 0x0, 0x1f1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x847d, 0x1, 0x3, 0x55}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe47c, 0x20, 0x3, 0x13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd09, 0x2000, 0x2, 0x2ca}, 0xffffffffffffffff}], 0x4, &(0x7f0000001880)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, '\x00', {0x401, 0x5c4, 0x0, &(0x7f0000000880)=@buf_512="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"}}, &(0x7f0000001900)) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r1, 0x24, &(0x7f0000001940)={0x1, 0x0, '\x00', @zc_export}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, &(0x7f00000000c0)) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'veth1_vlan\x00', @link_local}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 32.16093289s ago: executing program 53 (id=11814): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0xa4d2, 0x40, 0x1, 0x3bc}, &(0x7f0000000300)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8e40, 0x0, 0x0, 0x1f1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x847d, 0x1, 0x3, 0x55}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe47c, 0x20, 0x3, 0x13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd09, 0x2000, 0x2, 0x2ca}, 0xffffffffffffffff}], 0x4, &(0x7f0000001880)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, '\x00', {0x401, 0x5c4, 0x0, &(0x7f0000000880)=@buf_512="33c8385dbe8d2a5568dc92a7e6a92b1b86c086f0141fa19e11d1eb4664d7fde6c50d08aa1b0e44c0e68013688ba7a7d75ec2d225c003790ce3dc9af98dbb512a9cbc0edb35ea24262d5f9a9ef25e77a4cc5c578cf85eb21f7a5378308ea181a93370b91b482ab4f4d61e2ba96342cb787f162620202a905e0082700c7a0a16baf535924491893abf96dc001516721b50ff552235c4d986559e4e3f29e0c1861f873d39dfe0142fbfae0afc08ece9870bbbb58028b60d05394b9120271c75b6cd8c53fee767620d4207d8c98a54315738e02111110530a7e1f1dbe1526581cdd8f62cb4fa79d769f127af36d6e7a875ca880bad6df37b63d875dfa5697b6809b3d3c90d1a28ff5f3853f1582d003611b572b3379715dc149bc0d9609acd12b466105682ca550642f3cdf243b8179c837501df887d20138a24667ff2d6526559996944a73dbaf9a7b83a971de33afd7089bdab91ebec676540779f25664afc7a3e37cb284119baf8d43a7ac6af844c9896370244695b456f63dfca73d8523db7f60e9a73622970eabd2475eb779dad928febb58d87d73e463b925c38d757dc21b7b9fa599c0110fc974824dd73b8b6a3261f47a72868f6d4bb0df595647aecb4d897015e193460d4c8c9cfbc5fcdda47da3149d1a14922d047368d8a4733c462f64c3936ee40abd30e20b365d157309379df626568e91f0621566decc810ad4235"}}, &(0x7f0000001900)) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r1, 0x24, &(0x7f0000001940)={0x1, 0x0, '\x00', @zc_export}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, &(0x7f00000000c0)) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'veth1_vlan\x00', @link_local}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.489867007s ago: executing program 6 (id=12229): openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfde8f000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f00000004c0)="92e97b38785b225a6515e5d8d1137df1daa2a5c39b2f45e9c1fe40179df59ba01ece3abe0df3a5c1c635923b1f518128aab4fa7fb1bcac1eaff49bd10687c827b52ba9fd9b9097506a164f33f44fceaf29"}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xee01) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0x9}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0xffffffffffffffc3, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8041}, 0x20048054) r8 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRDESCSIZE(r8, 0x80044801, &(0x7f0000000040)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r9, r11, 0x16, 0x0, @void}, 0x10) getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000240)={@dev, @broadcast}, &(0x7f0000000280)=0xc) 2.219962956s ago: executing program 6 (id=12231): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x9, 0x80201) write(r0, &(0x7f00000002c0)="19718f3d24000000a50c0000ed4a46b1ca9534b61f6aff497b583a578124db953db7a8c61275b693e0ed", 0x2a) syz_open_dev$sg(&(0x7f0000000040), 0x9, 0x80201) (async) write(r0, &(0x7f00000002c0)="19718f3d24000000a50c0000ed4a46b1ca9534b61f6aff497b583a578124db953db7a8c61275b693e0ed", 0x2a) (async) 2.217709564s ago: executing program 6 (id=12233): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)={0x24, r0, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) (async, rerun: 64) r3 = io_uring_setup(0x2f4f, &(0x7f0000000280)={0x0, 0x10, 0x1, 0x0, 0xfb}) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) (async) syz_open_dev$hidraw(&(0x7f0000000040), 0x10, 0x20000) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x110, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "0de04864fc0135712a411fc4559a46539f2288ff50da5e5f8a8d0ec6e0d001da399fe6861839e712684a38a6e58ff934ab095878e22867993beee64bb5a12e4d4dd6e5530398d27f2f932479ce0b8f5fb8a1e1b77ce2a5187c54e786c48116b26bbfc99db3d247cbe0f167bca1bc50647b1c669279a3d6d054cf405ca7c93b273db65fc561ceff6b08f5b41b9da7ecf34242c8b100443d6dac4518d709bce7d08b5be849d68f6f71e3cff903377b714ad4608ea414528ad7532ce0d802505a99a4a9cb4818"}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async, rerun: 64) close_range(r3, 0xffffffffffffffff, 0x0) 2.158785573s ago: executing program 6 (id=12234): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000002400128009000100626f6e6400000000140002808100d6842376d4df1de310731400000000000800"], 0x44}, 0x1, 0x0, 0x0, 0x22004002}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="020300030200df25"], 0x10}, 0x1, 0x7}, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000280), 0xb00000, &(0x7f0000000600)=ANY=[@ANYRES8, @ANYRES8]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e", 0xe}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418f", 0x30}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r8 = dup(r7) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r8}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r9 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffd) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0xfffffcb0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1.993481389s ago: executing program 6 (id=12235): r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x8, &(0x7f0000000000)="fdffffffffffffff"}) 1.826940321s ago: executing program 6 (id=12240): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x9}}, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0xc4}}, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ac4000/0x3000)=nil, 0x3000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000100)="66b92b03000066b8d235000066ba000000000f3066b87b0000000f23c80f21f866350000e0000f23f8610fbafe0266b97809000066b87433000066ba000000000f3066b8aa5f41170f23d00f21f86635200000010f23f866b90a0300000f320f238d26670f35f0095100", 0x6a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) syz_open_dev$loop(&(0x7f0000000140), 0x2, 0x100) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, 0x0}, 0x94) r8 = socket(0x10, 0x803, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000280)="cd6ac4db17a549a36f64410d33403c26d296263952a787b6c9df12aed4771b4a737828b6c7afd4b18f0e12fd9986536e04605a833db27ad1954e8ff3e573a013f5a69698402385f27d44c0e138c18a62e80ae0e81bad935b0dff50b8574e4a4b34ca0cb6a48ba54d832629be67b44574eefb9715b2b38cee2d96bbbe0808ee11c6a3734908e90d96929bfbdd5a7164490b52b59f64a96f857975d7c2ce328ed0acd4d4b497472e6eeaa26ed09444329cb35dd5615c888ed1", &(0x7f0000000340)="b48ed3b43c74639649404718b5702f4c58b19b47727beaff497ffa7f1cd0dddd7069a2f87fa92abbf450354121376e9b26e2a9"}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000040)) 1.702306331s ago: executing program 2 (id=12244): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0x144, {0x0}}, 0x10) (async) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0x850003d1) 1.419924452s ago: executing program 2 (id=12249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000002400)=[{&(0x7f0000000100)="39d4ce4a58eb6aae1519f65d313afd3f5221e403ed55d380032d1a008953584bfb3afd50dccb01bcf0ba7b9c5508142c9ff296e2f2899dbd00bd35f890b3b3", 0x3f}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="c2ed2efed49b182dbfb7cd06156cb06eeb2992d598f2f2c77c0d4e7767612fdfb38b42d7d75781031d59e5d18efc4c2fa8c930965a8858862f9576e10078f9a6c4e166da4f82656ed921878fd144e31180c5aca0bae0e15107a38646e442c54aa8da8418440a744c8215b8211282cef6b4ab61266e85437edf5f00e2aab8b5811e90d1ec810b9fdcb364a60afe1d7d2473424c5348c5c4f83d8cdaf0055b3b6aa87c84aaba13baa3de33ea437acff18fd0b1216b6f3c8088eee607d1ef374ab21f2b275499bba23719c72a417840e1ce807c657133c64f6de6ecce3d80ffc47444a4a41a76", 0xe5}], 0x3, 0x800, 0x3) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x2, 0x4, 0x0, 0x0, @msi={0x5, 0x7, 0x12, 0x8001}}]}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0xfcf7, &(0x7f0000001080)=0x9) r3 = socket$inet(0x2, 0x80000, 0x1) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000001c0)={'netdevsim0\x00', {0x2, 0x4e23, @rand_addr=0x64010101}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f00000003c0)) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @local}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r7) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newnexthop={0x110, 0x68, 0x200, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0x1, 0x0, 0xe}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0x20, 0x8, 0x0, 0x1, @SEG6_LOCAL_SRH={0x1c, 0x2, {0x2c, 0x2, 0x4, 0x1, 0x7, 0x0, 0x3, [@private2={0xfc, 0x2, '\x00', 0x1}]}}}, @NHA_GROUP_TYPE={0x6}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x6}}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xf}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xa}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xa6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6da}]}, @NHA_GROUP_TYPE={0x6}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x5}}, @NHA_RES_GROUP={0x34, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x2}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x7da}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xbf0}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4000}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8000}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x110}, 0x1, 0x0, 0x0, 0x40010}, 0x40) r9 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x4) r11 = openat$cgroup_ro(r10, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) readv(r11, &(0x7f00000012c0)=[{&(0x7f0000002c40)=""/4081, 0xff1}], 0x1) sendto$inet6(r11, 0x0, 0x0, 0x50, 0x0, 0x0) 971.678522ms ago: executing program 1 (id=12253): r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x103000, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x5, 0x0, 0x9}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = socket$inet6(0xa, 0x3, 0x10001) sendmsg$inet6(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="bf7f54a27ab7e9ed9d9266249d8c1ad283fbd77247f1baf7ec7c5c5f4f8ddb8bb02cb27da5cf9847a9fb5751c94ecaa5f4c219f0ea04972abbfde1abb0965f9290f47397e4c7f945955e0b268e5a22513f5cebeec579ac42c4f22a8970770d5a8bb2d2bed9b744bc377cb0282b376301c247fe26f57b0181dc1aeb5b7c9b484d3d17c030c1737e237d872cbe38d57ba54e5c734ed66681ed1b146f4aedb14fbc5bd9c82dc189becc63ece1ea2bf799585053900fd7f6cd234d0ca9480681b68533d25710c0", 0xc5}], 0x1, &(0x7f0000000180)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x0, 0xc, 0x2, 0xe9, 0x0, [@private0, @loopback, @private2, @ipv4={'\x00', '\xff\xff', @remote}, @private2, @local]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r3}}}], 0xa0}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x48000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x3}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) 971.386685ms ago: executing program 9 (id=12254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbde, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40006}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRESHEX=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x649cd5ca3bcf92ec) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(r4, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/202, 0xca}], 0x1}, 0x10000) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r2, 0x820, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x15}, 0x80) r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000380), 0x0) socket(0x9, 0x4, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250c00000008000300", @ANYRES32=r6, @ANYBLOB="08003706008802110000010000050008000500000080000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x1c, r9, 0x1, 0x0, 0x25dfdbff, {0x25}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40091}, 0x4004804) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r11, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 971.128005ms ago: executing program 2 (id=12255): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r2, 0x403, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'interleave', '=static'}}}]}) ioctl$UI_DEV_CREATE(r0, 0x5501) 897.950915ms ago: executing program 1 (id=12256): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) lseek(r2, 0x10e6, 0x3) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3056}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40400c4}, 0x4000100) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd0}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x21, &(0x7f0000000000)=0xff, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r5, 0x0, r6, 0x0, 0x38f9, 0xf) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYBLOB="883a893b"]) 821.831043ms ago: executing program 1 (id=12257): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x60}, 0x1, 0x7}, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000280)={0xc, r1}) (async) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 32) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b", 0x6b}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e14575562668985", 0x15}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae17618", 0x24}], 0x3, 0x0, 0x0, 0xc0}], 0x1, 0x48040) (async, rerun: 32) r4 = socket$alg(0x26, 0x5, 0x0) (async) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x1000) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) (async) mount(&(0x7f0000000300)=@sg0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000000)='usrquota') 689.630788ms ago: executing program 1 (id=12258): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xe4) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff7}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1000, 0x96066ccddc7e458b, 0x5}}}}]}, 0x40}}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x140, 0x128) r4 = fanotify_init(0x1, 0x101801) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/xfrm_stat\x00') close_range(r5, 0xffffffffffffffff, 0x0) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) mount$afs(&(0x7f0000000380), &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0x1080, &(0x7f0000000580)={[{@flock_local}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@subj_user}]}) mount(&(0x7f0000000180)=@nullb, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000200)='esdfs\x00', 0x492, &(0x7f0000000240)='\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x128) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private2}}, &(0x7f0000000140)=0xe8) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, r6, &(0x7f0000000280)={0x35, 0x7fffffff, 0x5, 0xff, 0xa0, 0x8000000000000000, 0x10001, 0xf4, 0x400}) 689.211771ms ago: executing program 2 (id=12259): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x40c, 0x318, 0x25, 0x148, 0x318, 0x60, 0x3d0, 0x2a8, 0x2a8, 0x3d0, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffffff, 'lo\x00', '\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0x2a0, 0x2c0, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x2, 0x0, [{0x6, 0x10, 0xff, 0x80000000}, {0x7, 0x4, 0x8, 0x8}, {0x5, 0x40, 0x6e, 0x8}, {0x1, 0x9, 0x8, 0x10001}, {0x5, 0x6, 0x92, 0x6}, {0xa, 0x96, 0xd3, 0x3}, {0x8, 0x7, 0x3, 0x2}, {0x5, 0xf, 0x40, 0x2}, {0xe, 0x69, 0x2, 0x1}, {0xf2, 0x25, 0xff, 0x10001}, {0x8, 0x7, 0xff, 0x1}, {0x4, 0x1c, 0x2, 0x18}, {0x9, 0x6, 0xa3, 0x9}, {0x8, 0x0, 0x9, 0x5}, {0x2, 0x1, 0xff, 0x7ff}, {0x6c1, 0x8, 0x1, 0x9}, {0x0, 0xd0, 0x6, 0xc5}, {0x1000, 0x8, 0x6, 0x1}, {0x9a6, 0xd, 0x0, 0x800}, {0x7, 0x10, 0x1, 0x1}, {0x8000, 0x96, 0x81, 0xa0000}, {0x9, 0x8, 0x9, 0xff}, {0xb, 0x6, 0x8, 0x9}, {0x862, 0x18, 0x4, 0x9}, {0xffd8, 0xf, 0xae, 0x7fffffff}, {0x8, 0x3, 0x40, 0x3}, {0x4, 0x3, 0x0, 0x2}, {0xffff, 0x3, 0x2, 0x4}, {0x100, 0x3, 0x7, 0x40}, {0x1, 0x58, 0x0, 0x6}, {0x8000, 0x80, 0x4, 0x3}, {0x7, 0x4, 0x5, 0x7f}, {0xc6e, 0x3, 0xc, 0x2}, {0xf, 0x60, 0x1, 0x2}, {0x3af3, 0x3, 0xff, 0x6}, {0xfffe, 0x7, 0x0, 0x2}, {0xc, 0xd1, 0x3}, {0x8, 0x5, 0x8, 0x80000000}, {0xb, 0x7f, 0x0, 0x4}, {0x9f7d, 0xb}, {0x5, 0x9, 0x0, 0x8}, {0x868, 0xc5, 0x12}, {0x7fff, 0xa8, 0x48, 0x10000}, {0x4, 0x0, 0x8, 0x6}, {0x2, 0x2, 0xd, 0xfffffffe}, {0xa3c6, 0x80, 0x60, 0x5}, {0x5c50, 0x6, 0x4, 0x1c000}, {0x99eb, 0x7, 0x80, 0x4}, {0x7f, 0x32, 0xd3, 0x5}, {0x0, 0x9, 0xfc, 0x1}, {0x4, 0x40, 0x7b, 0x5}, {0xd97f, 0x4, 0x8, 0xe}, {0xffc0, 0x4, 0x0, 0x7}, {0x6, 0xd, 0x33, 0x6}, {0x5, 0xf, 0xf9, 0x3}, {0xa, 0x6, 0x80, 0xffff}, {0x3, 0x2, 0x9, 0x2}, {0x50, 0x8, 0x78, 0x8}, {0x820, 0x0, 0xb9, 0x10}, {0xffff, 0x49, 0x1, 0x464}, {0x80, 0x40, 0x76, 0x2}, {0x885, 0x2, 0x9, 0x10000}, {0xe6, 0x0, 0x3, 0x3}, {0x7, 0xc2, 0x8, 0x2}], {0x6}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x10001, 0x10, 'netbios-ns\x00', {0x7}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x468) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f00000028c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x1, @f={0x3, 0x2, 0x1, 0x2, 0xd9, 0x4, 0xff, {0xe6, 0x2d, "7b308fe7daef9ab7d65a5330e82ff8a71a5ba4ca46daee02a0e7ea69fc4dc55b49c6bcd49eb03b0bc9bf5f75cc"}, 0x9, 0x7, 0x9d, 0x3, 0xcb, "8ff8ece57ec6e5e4ed7337658a274082614ff5f8bc75bfdedae28c9d733c6aab771afe99fa15e68aee4865266c40ab9a2416f2986a79cd9eb94db78c2aa220d0b2d6c0d8f21ee94825506c98747df3fd3a18c53a33f811b3f02911dc76df8e622e690a4dfd50d11b7c41eb101fed85bd31158493f3ebd85c0a89634bc36237cb93923c5391161312d2f112f18b604b47b852dd3bcc800e42ded66edfdc939e6ebfcdf51ac13ca98067be3eb072b749375c55cba80e76bd3cb3091719e8bdc096fdbd55d83f14045df02691"}}, 0x109) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 688.380129ms ago: executing program 1 (id=12260): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000070c0)=@delchain={0x1e8, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x19c, 0x2, [@TCA_BPF_ACT={0xc4, 0x1, [@m_sample={0xc0, 0x1d, 0x0, 0x0, {{0xb}, {0x4}, {0x92, 0x6, "98358ab2d87935bef94690a3fa3cf7197646189a66a0bc32048f7289356ad68e25e4956fc4a2efcf511c586842edefc49916d6fdff3c49b29d798be991a3bca173849144a8d21641f4327528cee0801c6e1737840a5b086fb3331bcab7aafee5eb4363269c19e221b24f19c4e6f50c4c44967d63ee8bd340ba43bf594074dab9e01dfa73f7bca64f285990bac227"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_ACT={0x64, 0x1, [@m_skbedit={0x30, 0x1c, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x30, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x44, 0x2, 0x1, 0x80000001}, {0x8, 0x5, 0x0, 0x8}, {0xfa, 0x5, 0x5, 0x1}, {0x3, 0x3, 0x40, 0x7}, {0x7, 0x7, 0x7, 0x370}, {0xa, 0x6a, 0x90, 0x3}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0xff, 0x5, 0x81, 0x5}, {0x4, 0xfc, 0x11, 0xff}]}}]}}, @TCA_RATE={0x6, 0x5, {0x8d, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}]}, 0x3c}}, 0x8000) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x75, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 597.137083ms ago: executing program 9 (id=12261): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) unshare(0x2a020480) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0xff07) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000240)=0xfffffffc}}) sched_rr_get_interval(0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 593.852202ms ago: executing program 9 (id=12262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = memfd_secret(0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x24000, 0x10) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r2, 0xe6d87000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4a930, 0x11800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x0) 425.332841ms ago: executing program 2 (id=12263): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000030000000000000003000000b7080000000000007b8af8ff00000000b7080000fdffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000e6d90000a50000009500000000000000a649d57d2b599864f0166dc125988d17324bfeaed8952efb891c157e3ee184d6b62b72e314ad3b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) 420.034482ms ago: executing program 2 (id=12264): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004586006c0064000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) 246.517186ms ago: executing program 9 (id=12265): mkdir(&(0x7f0000000040)='./file0\x00', 0x1dc) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) open(&(0x7f00000000c0)='./file0/file1\x00', 0x3, 0x40) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000000c0)={0x7, 'vlan1\x00', {0xe}, 0x5}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x690, 0x600, 0x40, 0x20, 0x10, 0x6, 0x14, 0x2, {0x100, 0x7, 0x1}, {0x0, 0x3, 0x1}, {0xfffff800, 0x6}, {0x9, 0xa373, 0x1}, 0x1, 0x1, 0x3, 0x8, 0x1, 0x7, 0x2, 0x81, 0x1, 0x0, 0x2, 0x40, 0x4, 0x4, 0x2, 0xc}) 246.254718ms ago: executing program 9 (id=12266): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r0}, &(0x7f0000000a40), 0x0}, 0x20) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x10, &(0x7f0000000040)=0xfffffffc, 0x4) 459.292µs ago: executing program 9 (id=12267): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], &(0x7f0000000240)=""/194, 0x34, 0xc2, 0xa}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x27) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f00000006c0), r3, 0x2}}, 0x18) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0x40, 0x1, 0x333}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14}) io_uring_enter(r4, 0x1, 0x7ee, 0x41, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], &(0x7f0000000240)=""/194, 0x34, 0xc2, 0xa}, 0x28) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x27) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f00000006c0), r3, 0x2}}, 0x18) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0x40, 0x1, 0x333}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000180)) (async) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14}) (async) io_uring_enter(r4, 0x1, 0x7ee, 0x41, 0x0, 0x0) (async) 0s ago: executing program 1 (id=12268): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000006000000850000000e0000009500000000000000034f1f500fa85c8fb40d4fde52ecfc40f95ee97dd370bd6bf193f84c4132f3498cf1911430ab49e32ed38ebb651ed7577f73e4e429732c2a649e0b99cc589fe51ead32b029b2c19c983b6266fd"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r5, 0x0, r7, 0x0, 0x4, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r6, 0x0, r8, 0x0, 0x6, 0xc) ioctl$FIONREAD(r7, 0x541b, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000200)='./file1/file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88c42, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) pidfd_getfd(r11, r9, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r9, 0xc0585604, &(0x7f0000000580)={0x1, 0x0, {0x3, 0x9, 0x200e, 0x1, 0xa, 0x8, 0x3, 0x7}}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40000009078001c0a0300050200000000000000000002d58827068b22e40000"], 0x4e) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x7, &(0x7f0000000080)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@exit, @call={0x85, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f00000003c0)='GPL\x00', 0x4, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) 0s ago: executing program 9 (id=12269): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) r3 = accept$alg(r2, 0x0, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000400)={0x38, &(0x7f0000000500)=[{0x2c, '\x00', @data=0x3, 0x7fffffff}]}) dup3(r3, r2, 0x80000) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r8 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r8, 0xc0884123, &(0x7f0000000240)={0x1, "fe4bc2070c8230d64a620097e2e100001a424ec9a919621a41f878718cb22a406b87762a90ae10a800", {0xff, 0x9}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000000c0)={0x60, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}]}}) kernel console output (not intermixed with test programs): etap1): Enslaving as an active interface with an up link [ 1158.344206][T14359] usb 11-1: new high-speed USB device number 56 using dummy_hcd [ 1158.424386][ T5143] EXT4-fs error: 12 callbacks suppressed [ 1158.424471][ T5143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1158.432951][ T5143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1158.437747][ T5143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1158.464952][T15777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11559'. [ 1158.469207][T15777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11559'. [ 1158.505662][T14359] usb 11-1: Using ep0 maxpacket: 8 [ 1158.508890][T14359] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1158.512436][T14359] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1158.515686][T14359] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1158.519227][T14359] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1158.523947][T14359] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1158.527604][T14359] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.562381][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1158.567154][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1158.574565][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1158.664770][ T5821] usb 6-1: new low-speed USB device number 59 using dummy_hcd [ 1158.754202][T14359] usb 11-1: GET_CAPABILITIES returned 0 [ 1158.756611][T14359] usbtmc 11-1:16.0: can't read capabilities [ 1158.827495][ T5821] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1158.831866][ T5821] usb 6-1: config 8 has an invalid interface number: 198 but max is 0 [ 1158.835066][ T5821] usb 6-1: config 8 has no interface number 0 [ 1158.839700][ T5821] usb 6-1: config 8 interface 198 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 1158.846550][ T5821] usb 6-1: string descriptor 0 read error: -22 [ 1158.849143][ T5821] usb 6-1: New USB device found, idVendor=1430, idProduct=6cdc, bcdDevice=85.cc [ 1158.852663][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.859034][T15776] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1158.886599][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1158.891540][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1158.896252][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1159.038151][ C2] usbtmc 11-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1159.112297][ T5821] usb 6-1: USB disconnect, device number 59 [ 1159.161405][T15787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1159.520732][T21402] usb 11-1: USB disconnect, device number 56 [ 1159.572960][T15807] SELinux: Context system_u:object_r:default_t:s0 is not valid (left unmapped). [ 1159.692129][T15809] syzkaller1: entered promiscuous mode [ 1159.696439][T15809] syzkaller1: entered allmulticast mode [ 1159.714607][T15810] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:3: iget: checksum invalid [ 1159.755934][T15812] netlink: 'syz.1.11571': attribute type 27 has an invalid length. [ 1159.826326][T15812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.829388][T15812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.879276][T15815] nfs4: Bad value for 'source' [ 1159.967158][T15812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.984995][T15812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1160.036291][T15812] vlan0: left promiscuous mode [ 1160.141499][T15812] ipvlan1: left promiscuous mode [ 1160.143699][T15812] ipvlan1: left allmulticast mode [ 1160.145760][T15812] veth0_vlan: left allmulticast mode [ 1160.254373][T15830] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 1160.289420][T15830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15830 comm=syz.6.11573 [ 1160.294663][T15830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2571 sclass=netlink_tcpdiag_socket pid=15830 comm=syz.6.11573 [ 1160.299281][T15830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2578 sclass=netlink_tcpdiag_socket pid=15830 comm=syz.6.11573 [ 1160.304192][T15830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=15830 comm=syz.6.11573 [ 1160.317115][T15830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2580 sclass=netlink_tcpdiag_socket pid=15830 comm=syz.6.11573 [ 1160.321888][T15830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2574 sclass=netlink_tcpdiag_socket pid=15830 comm=syz.6.11573 [ 1160.450018][T15812] bond1: left allmulticast mode [ 1160.462249][T15812] bond0: left allmulticast mode [ 1160.493772][T15819] syzkaller0: entered promiscuous mode [ 1160.495597][T15819] syzkaller0: entered allmulticast mode [ 1160.498653][T20663] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.504568][T20663] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.514592][T20663] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.630089][T20663] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.643518][ T42] kauditd_printk_skb: 197 callbacks suppressed [ 1161.643536][ T42] audit: type=1400 audit(1864.675:45093): avc: denied { mount } for pid=15861 comm="syz.2.11584" name="/" dev="9p" ino=80478419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1161.669057][ T42] audit: type=1400 audit(1864.712:45094): avc: denied { unmount } for pid=11144 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1161.692933][T15865] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1161.697431][ T42] audit: type=1400 audit(1864.731:45095): avc: denied { read write } for pid=15863 comm="syz.4.11581" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1161.709650][ T42] audit: type=1400 audit(1864.731:45096): avc: denied { open } for pid=15863 comm="syz.4.11581" path="/dev/raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1161.721364][ T42] audit: type=1400 audit(1864.731:45097): avc: denied { ioctl } for pid=15863 comm="syz.4.11581" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1161.882288][ T42] audit: type=1400 audit(1864.909:45098): avc: denied { create } for pid=15867 comm="syz.2.11585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1161.888680][ T42] audit: type=1400 audit(1864.909:45099): avc: denied { ioctl } for pid=15867 comm="syz.2.11585" path="socket:[291119]" dev="sockfs" ino=291119 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1161.924749][ T42] audit: type=1400 audit(1864.946:45100): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=51864 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1161.939554][ T42] audit: type=1400 audit(1864.956:45101): avc: denied { read } for pid=15871 comm="syz.2.11587" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1161.949363][ T42] audit: type=1400 audit(1864.956:45102): avc: denied { open } for pid=15871 comm="syz.2.11587" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1161.964612][T15870] __nla_validate_parse: 4 callbacks suppressed [ 1161.964623][T15870] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11586'. [ 1162.110145][T15877] syzkaller0: entered promiscuous mode [ 1162.112512][T15877] syzkaller0: entered allmulticast mode [ 1162.171992][T15877] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11590'. [ 1162.193071][T15875] netlink: 'syz.6.11589': attribute type 29 has an invalid length. [ 1163.111612][T15890] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11594'. [ 1163.209803][T15894] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11596'. [ 1163.916515][T15916] Unsupported ieee802154 address type: 0 [ 1164.083526][T15923] macvtap1: entered promiscuous mode [ 1164.127678][T15927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11607'. [ 1164.283984][T15937] EXT4-fs error: 12 callbacks suppressed [ 1164.284027][T15937] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:31: iget: checksum invalid [ 1164.298280][T15939] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:31: iget: checksum invalid [ 1164.303622][T15940] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:31: iget: checksum invalid [ 1164.817757][T15948] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11614'. [ 1164.861421][T15950] overlay: filesystem on ./bus not supported [ 1164.897137][ T5143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1164.901853][ T5143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1164.907662][ T5143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1165.277274][ T5748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1165.294956][ T5748] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1165.312549][ T5748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1165.320460][ T5748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1165.332471][ T5748] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1165.353755][T15968] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:9: iget: checksum invalid [ 1165.368803][T15969] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:9: iget: checksum invalid [ 1165.374300][T15970] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:9: iget: checksum invalid [ 1165.379793][T15971] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:9: iget: checksum invalid [ 1165.418647][T15966] lo speed is unknown, defaulting to 1000 [ 1165.598899][T15966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.602238][T15966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.605652][T15966] bridge_slave_0: entered allmulticast mode [ 1165.609744][T15966] bridge_slave_0: entered promiscuous mode [ 1165.616369][T15966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.619467][T15966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.623861][T15966] bridge_slave_1: entered allmulticast mode [ 1165.627953][T15966] bridge_slave_1: entered promiscuous mode [ 1165.679625][T15988] netlink: 1327 bytes leftover after parsing attributes in process `syz.2.11622'. [ 1165.683531][T15987] netlink: 1327 bytes leftover after parsing attributes in process `syz.2.11622'. [ 1165.684866][T15966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1165.694716][T15966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1165.760973][T15966] team0: Port device team_slave_0 added [ 1165.765702][T15966] team0: Port device team_slave_1 added [ 1165.783485][T15966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.785830][T15966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.794271][T15966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.799111][T15966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.801344][T15966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.809744][T15966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.881589][T15966] hsr_slave_0: entered promiscuous mode [ 1165.884432][T15966] hsr_slave_1: entered promiscuous mode [ 1165.886787][T15966] debugfs: 'hsr0' already exists in 'hsr' [ 1165.888822][T15966] Cannot create hsr debugfs directory [ 1166.143121][T15994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11624'. [ 1166.147208][T15994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11624'. [ 1166.187503][T15966] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1166.191184][T15966] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.446877][T15966] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1166.450482][T15966] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.596086][T15966] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1166.608117][T15966] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.769901][T15966] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1166.773507][T15966] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.776402][T16014] Bluetooth: MGMT ver 1.23 [ 1166.846631][T16019] ALSA: seq fatal error: cannot create timer (-22) [ 1166.953630][ T8403] dvmrp8: left allmulticast mode [ 1166.960197][ T8403] batman_adv: batadv0: Interface deactivated: geneve2 [ 1167.081597][T16029] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 1167.146594][ T42] kauditd_printk_skb: 177 callbacks suppressed [ 1167.146632][ T42] audit: type=1400 audit(1869.831:45280): avc: denied { read } for pid=16028 comm="syz.1.11635" name="v4l-subdev0" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1167.155853][ T42] audit: type=1400 audit(1869.831:45281): avc: denied { open } for pid=16028 comm="syz.1.11635" path="/dev/v4l-subdev0" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1167.164127][ T42] audit: type=1400 audit(1869.831:45282): avc: denied { ioctl } for pid=16028 comm="syz.1.11635" path="/dev/v4l-subdev0" dev="devtmpfs" ino=966 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1167.172159][ T42] audit: type=1400 audit(1869.831:45283): avc: denied { mounton } for pid=16028 comm="syz.1.11635" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1167.243628][T16034] udevd[16034]: failed to execute '/lib/udev/cdrom_id' 'cdrom_id --lock-media /dev/sr0': Bad message [ 1167.271417][T16035] udevd[16035]: failed to execute '/lib/udev/ata_id' 'ata_id --export /dev/sr0': Bad message [ 1167.282238][T16024] kvm_intel: kvm [16023]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x5bed [ 1167.297533][T16036] udevd[16036]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sr0': Bad message [ 1167.300316][T16024] kvm: kvm [16023]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x6b0e [ 1167.305841][T16024] kvm: kvm [16023]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xc7a7 [ 1167.314807][ T8403] bond9 (unregistering): (slave erspan1): Releasing active interface [ 1167.322765][T16024] kvm: kvm [16023]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x872d [ 1167.322927][ T8403] erspan1 (unregistering): left promiscuous mode [ 1167.443299][ T8403] bond8 (unregistering): (slave gretap3): Removing an active aggregator [ 1167.446041][ T8403] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1167.455863][ T8403] bond8 (unregistering): (slave gretap3): Releasing backup interface [ 1167.458447][ T8403] bond8 (unregistering): (slave gretap3): the permanent HWaddr of slave - a2:54:4d:b3:fc:cc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1167.545365][ T5747] Bluetooth: hci4: command tx timeout [ 1167.558050][ T42] audit: type=1400 audit(1870.215:45284): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=51864 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1167.569393][T16038] __nla_validate_parse: 1 callbacks suppressed [ 1167.569407][T16038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11636'. [ 1167.572164][ T8403] batman_adv: batadv0: Removing interface: geneve2 [ 1167.642306][ T8403] bond0 (unregistering): Released all slaves [ 1167.648575][ T8403] bond1 (unregistering): Released all slaves [ 1167.667558][ T8403] bond2 (unregistering): Released all slaves [ 1167.678038][ T8403] bond3 (unregistering): Released all slaves [ 1167.685916][ T8403] bond4 (unregistering): Released all slaves [ 1167.695506][ T8403] bond5 (unregistering): Released all slaves [ 1167.705020][ T8403] bond6 (unregistering): Released all slaves [ 1167.713921][ T8403] bond7 (unregistering): Released all slaves [ 1167.724836][ T8403] bond8 (unregistering): (slave dummy0): Removing an active aggregator [ 1167.730326][ T8403] bond8 (unregistering): (slave dummy0): Releasing backup interface [ 1167.862078][ T8403] bond8 (unregistering): Released all slaves [ 1167.894721][ T8403] bond9 (unregistering): Released all slaves [ 1167.978631][ T42] audit: type=1400 audit(1870.608:45285): avc: denied { read } for pid=16040 comm="syz.2.11637" name="binder0" dev="binder" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1168.006835][ T42] audit: type=1400 audit(1870.608:45286): avc: denied { open } for pid=16040 comm="syz.2.11637" path="/dev/binderfs/binder0" dev="binder" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1168.060794][ T42] audit: type=1400 audit(1870.692:45287): avc: denied { setopt } for pid=16040 comm="syz.2.11637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1168.203828][ T42] audit: type=1400 audit(1870.814:45288): avc: denied { mounton } for pid=16046 comm="syz.1.11639" path="/206/bus" dev="tmpfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1168.228393][ T42] audit: type=1400 audit(1870.832:45289): avc: denied { unlink } for pid=16046 comm="syz.1.11639" name="#18d" dev="tmpfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1168.558747][T15966] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1168.566449][T15966] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1168.570413][T15966] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1168.577443][T15966] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1168.580397][T15966] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1168.584529][T15966] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1168.588064][T15966] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1168.593893][T15966] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1168.677726][T15966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.729456][T15966] 8021q: adding VLAN 0 to HW filter on device team0 [ 1168.745790][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.748139][ T6527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.762136][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.765001][ T6527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.045049][T16072] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 1169.231047][T15966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.384510][T16110] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11653'. [ 1169.426665][T15966] veth0_vlan: entered promiscuous mode [ 1169.473544][T15966] veth1_vlan: entered promiscuous mode [ 1169.497651][ T8403] hsr_slave_0: left promiscuous mode [ 1169.504030][ T8403] hsr_slave_1: left promiscuous mode [ 1169.525660][ T8403] virt_wifi0: left allmulticast mode [ 1169.528138][ T8403] virt_wifi0: left promiscuous mode [ 1169.530983][ T8403] veth1_macvtap: left promiscuous mode [ 1169.533573][ T8403] veth0_macvtap: left promiscuous mode [ 1169.536062][ T8403] veth1_vlan: left promiscuous mode [ 1169.538313][ T8403] veth0_vlan: left promiscuous mode [ 1169.703790][ T29] usb 11-1: new high-speed USB device number 57 using dummy_hcd [ 1169.767626][ T5747] Bluetooth: hci4: command tx timeout [ 1169.842528][ T29] usb 11-1: device descriptor read/64, error -71 [ 1170.031082][T16129] EXT4-fs error: 39 callbacks suppressed [ 1170.031168][T16129] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:39: iget: checksum invalid [ 1170.109806][ T29] usb 11-1: new high-speed USB device number 58 using dummy_hcd [ 1170.188267][T15966] veth0_macvtap: entered promiscuous mode [ 1170.202440][T15966] veth1_macvtap: entered promiscuous mode [ 1170.235501][T15966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1170.248691][ T29] usb 11-1: device descriptor read/64, error -71 [ 1170.255133][T15966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1170.267431][T20663] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.270700][T20663] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.274137][T20663] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.277137][T20663] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.367129][ T29] usb usb11-port1: attempt power cycle [ 1170.476211][ T6527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.488221][ T6527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.548420][ T4936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.553733][ T4936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.752074][ T8403] IPVS: stop unused estimator thread 0... [ 1170.761838][ T29] usb 11-1: new high-speed USB device number 59 using dummy_hcd [ 1170.791779][T16145] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 1170.798697][ T29] usb 11-1: device descriptor read/8, error -71 [ 1170.810239][T16148] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:39: iget: checksum invalid [ 1170.819947][T16149] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:39: iget: checksum invalid [ 1171.051027][ T29] usb 11-1: new high-speed USB device number 60 using dummy_hcd [ 1171.075944][ T29] usb 11-1: device descriptor read/8, error -71 [ 1171.195804][ T29] usb usb11-port1: unable to enumerate USB device [ 1171.563867][ T5143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1171.574782][ T5143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1171.578464][ T5143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1171.686807][T16183] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:31: iget: checksum invalid [ 1171.692713][T16184] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:9: iget: checksum invalid [ 1171.895094][T16188] random: crng reseeded on system resumption [ 1171.936484][T16188] binder: 16187:16188 ioctl c0306201 0 returned -14 [ 1172.019649][ T5748] Bluetooth: hci4: command tx timeout [ 1172.777984][ T42] kauditd_printk_skb: 156 callbacks suppressed [ 1172.778054][ T42] audit: type=1326 audit(1875.100:45446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16198 comm="syz.6.11677" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faab1d9de59 code=0x7ffe0000 [ 1173.255308][ T42] audit: type=1400 audit(1875.549:45447): avc: denied { shutdown } for pid=16200 comm="syz.4.11678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1173.257678][T16201] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 1173.267577][ T42] audit: type=1400 audit(1875.549:45448): avc: denied { getopt } for pid=16200 comm="syz.4.11678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1173.306704][T16205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=16205 comm=syz.4.11679 [ 1173.311018][T16205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=16205 comm=syz.4.11679 [ 1173.313294][ T42] audit: type=1400 audit(1875.549:45449): avc: denied { connect } for pid=16200 comm="syz.4.11678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1173.327021][ T42] audit: type=1400 audit(1875.549:45450): avc: denied { name_connect } for pid=16200 comm="syz.4.11678" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1173.341305][ T42] audit: type=1400 audit(1875.549:45451): avc: denied { write } for pid=16200 comm="syz.4.11678" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1173.363643][ T42] audit: type=1400 audit(1875.549:45452): avc: denied { open } for pid=16200 comm="syz.4.11678" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1173.391242][ T42] audit: type=1400 audit(1875.558:45453): avc: denied { setopt } for pid=16200 comm="syz.4.11678" lport=52153 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1173.409115][ T42] audit: type=1400 audit(1875.642:45454): avc: denied { set_context_mgr } for pid=16207 comm="syz.4.11680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1173.420234][T16208] ref_ctr increment failed for inode: 0x3f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802c661980 [ 1173.425209][ T42] audit: type=1400 audit(1875.689:45455): avc: denied { create } for pid=16211 comm="syz.1.11681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1173.488904][T16214] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1173.536061][T16216] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11682'. [ 1173.718532][T16220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11686'. [ 1173.738756][T16220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11686'. [ 1173.738801][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1173.745125][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1173.747982][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1173.750872][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1173.917082][T16224] netlink: 'syz.6.11683': attribute type 49 has an invalid length. [ 1173.979141][T16228] ip6erspan1: entered promiscuous mode [ 1173.998881][T16233] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20002 [ 1174.146873][T16242] netlink: 176 bytes leftover after parsing attributes in process `syz.1.11692'. [ 1174.215725][ T5748] Bluetooth: hci4: command 0x0419 tx timeout [ 1174.239884][T16248] sctp: [Deprecated]: syz.4.11694 (pid 16248) Use of int in max_burst socket option deprecated. [ 1174.239884][T16248] Use struct sctp_assoc_value instead [ 1174.256129][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1174.261641][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1174.285116][T16253] overlay: Unknown parameter 'ǪdüࣸS$­.˜¹I¦MD./file0' [ 1174.328104][T16257] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11698'. [ 1175.277413][T16275] fuse: Bad value for 'fd' [ 1175.354457][T16290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11708'. [ 1175.594193][ T5747] Bluetooth: hci2: unexpected event for opcode 0x5083 [ 1175.994773][T16314] EXT4-fs error: 6 callbacks suppressed [ 1175.994790][T16314] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:3: iget: checksum invalid [ 1176.003756][T16315] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:3: iget: checksum invalid [ 1176.010015][T16313] could not allocate digest TFM handle sha512_mb [ 1176.190539][T16327] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:52: iget: checksum invalid [ 1176.437401][ T5747] Bluetooth: hci4: command 0x0419 tx timeout [ 1176.620776][T16345] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:3: iget: checksum invalid [ 1176.627367][T16346] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:3: iget: checksum invalid [ 1176.645210][T16347] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:3: iget: checksum invalid [ 1176.652816][T16348] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:3: iget: checksum invalid [ 1176.889753][T16354] ubi1: attaching mtd0 [ 1176.891157][T16354] ubi1 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66) [ 1176.915918][ T5747] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 1176.956080][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1176.974330][T16356] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1176.979387][T16356] udevd[16356]: failed to execute '/lib/udev/cdrom_id' 'cdrom_id --lock-media /dev/sr0': Bad message [ 1176.993672][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1177.003360][T16357] udevd[16357]: failed to execute '/lib/udev/ata_id' 'ata_id --export /dev/sr0': Bad message [ 1177.055728][T16360] udevd[16360]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sr0': Bad message [ 1177.202784][T16359] netlink: 'syz.4.11728': attribute type 10 has an invalid length. [ 1177.213073][T16359] syz_tun: entered promiscuous mode [ 1177.222514][T16359] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1177.430939][T16370] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11732'. [ 1177.518110][T16377] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1177.735721][T16392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11738'. [ 1177.867941][T16396] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1177.872104][T16396] bond2 (unregistering): Released all slaves [ 1177.913405][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11740'. [ 1177.917159][T16398] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11740'. [ 1177.935476][T16396] dummy0: entered allmulticast mode [ 1177.939367][T16395] dummy0: left allmulticast mode [ 1178.021722][T16402] netlink: 'syz.4.11742': attribute type 21 has an invalid length. [ 1178.024295][T16402] IPv6: NLM_F_CREATE should be specified when creating new route [ 1178.026864][T16402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1178.029229][T16402] IPv6: NLM_F_CREATE should be set when creating new route [ 1178.031562][T16402] IPv6: NLM_F_CREATE should be set when creating new route [ 1178.033819][T16402] IPv6: NLM_F_CREATE should be set when creating new route [ 1178.136537][ T42] kauditd_printk_skb: 200 callbacks suppressed [ 1178.136549][ T42] audit: type=1400 audit(1112.113:45656): avc: denied { create } for pid=16417 comm="syz.6.11747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1178.195353][ T42] audit: type=1400 audit(1112.160:45657): avc: denied { module_request } for pid=16424 comm="syz.6.11749" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1178.203603][ T42] audit: type=1400 audit(1112.160:45658): avc: denied { sys_module } for pid=16424 comm="syz.6.11749" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1178.210185][ T42] audit: type=1400 audit(1112.169:45659): avc: denied { create } for pid=16424 comm="syz.6.11749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1178.216461][ T42] audit: type=1400 audit(1112.169:45660): avc: denied { ioctl } for pid=16424 comm="syz.6.11749" path="socket:[295222]" dev="sockfs" ino=295222 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1178.226898][ T42] audit: type=1400 audit(1112.169:45661): avc: denied { write } for pid=16424 comm="syz.6.11749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1178.241579][ T42] audit: type=1400 audit(1112.206:45662): avc: denied { create } for pid=16428 comm="syz.6.11750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1178.254456][ T42] audit: type=1400 audit(1112.225:45663): avc: denied { setopt } for pid=16428 comm="syz.6.11750" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1178.262684][ T42] audit: type=1400 audit(1112.225:45664): avc: denied { write } for pid=16428 comm="syz.6.11750" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1178.268992][T16432] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 1178.273046][ T42] audit: type=1400 audit(1112.225:45665): avc: denied { getopt } for pid=16428 comm="syz.6.11750" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1178.373978][T16438] overlay: filesystem on ./file0 not supported as upperdir [ 1178.475634][T16445] openvswitch: netlink: EtherType 0 is less than min 600 [ 1178.515571][T16447] netlink: 'syz.4.11754': attribute type 2 has an invalid length. [ 1178.825637][T16447] bond1: (slave bond_slave_1): Device is not our slave [ 1178.828443][T16447] bond1: option active_slave: invalid value (bond_slave_1) [ 1178.838936][T16447] bond1 (unregistering): Released all slaves [ 1179.441219][T16465] __nla_validate_parse: 1 callbacks suppressed [ 1179.441235][T16465] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11758'. [ 1179.737674][T16486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11764'. [ 1179.740645][T16479] kvm: pic: non byte write [ 1179.741790][T16486] netlink: 'syz.2.11764': attribute type 30 has an invalid length. [ 1179.746050][T16486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11764'. [ 1179.758069][T16486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11764'. [ 1179.769277][T16486] netlink: 'syz.2.11764': attribute type 30 has an invalid length. [ 1179.780399][T16486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11764'. [ 1179.790659][T16486] loop5: detected capacity change from 0 to 7 [ 1179.795643][T16486] Dev loop5: unable to read RDB block 7 [ 1179.797436][T16486] loop5: unable to read partition table [ 1179.799378][T16486] loop5: partition table beyond EOD, truncated [ 1179.801351][T16486] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1179.955692][T16498] lo speed is unknown, defaulting to 1000 [ 1180.271964][ T6621] usb 11-1: new high-speed USB device number 61 using dummy_hcd [ 1180.432264][ T6621] usb 11-1: Using ep0 maxpacket: 16 [ 1180.435903][ T6621] usb 11-1: config 0 has no interfaces? [ 1180.439874][ T6621] usb 11-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 1180.443652][ T6621] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.446381][ T6621] usb 11-1: Product: syz [ 1180.447806][ T6621] usb 11-1: Manufacturer: syz [ 1180.449306][ T6621] usb 11-1: SerialNumber: syz [ 1180.454771][ T6621] usb 11-1: config 0 descriptor?? [ 1180.675688][ T6621] usb 11-1: USB disconnect, device number 61 [ 1180.876813][T16525] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11777'. [ 1180.957121][T16534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16534 comm=syz.4.11776 [ 1180.961854][T16534] binder: 16526:16534 ioctl 40043d04 1 returned -22 [ 1180.990934][T16537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11780'. [ 1181.002319][T16537] IPv6: NLM_F_CREATE should be specified when creating new route [ 1181.048571][T16544] netlink: 'syz.1.11783': attribute type 2 has an invalid length. [ 1181.055813][T16541] Context (ID=0x0) not attached to queue pair (handle=0x4db:0x0) [ 1181.056501][T16544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11783'. [ 1181.179859][T16549] netlink: 168 bytes leftover after parsing attributes in process `syz.2.11784'. [ 1181.226112][ T5747] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1181.232821][ T5747] Bluetooth: hci4: Injecting HCI hardware error event [ 1181.241993][ T5747] Bluetooth: hci4: hardware error 0x00 [ 1181.295939][T16553] binder_alloc: 16552: binder_alloc_buf, no vma [ 1181.435927][T16570] cgroup: Unknown subsys name 'cpuset' [ 1181.459444][T16570] fuse: Unknown parameter 'f' [ 1181.636811][T16584] binder: BC_ACQUIRE_RESULT not supported [ 1181.640559][T16584] binder: 16576:16584 ioctl c0306201 2000000003c0 returned -22 [ 1181.982403][T16594] binder: 16593:16594 ioctl c0306201 2000000001c0 returned -14 [ 1181.986829][T16594] binder: 16593:16594 ioctl ae80 0 returned -22 [ 1182.120690][ T5748] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1182.159177][T16598] netlink: 'syz.1.11801': attribute type 1 has an invalid length. [ 1182.179279][T16598] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1182.186406][T16598] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11801'. [ 1182.189436][T16598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=16598 comm=syz.1.11801 [ 1182.241268][T16602] bond5: entered promiscuous mode [ 1182.243886][T16602] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1182.655233][ T5821] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1182.832801][ T5821] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1182.837291][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1182.840037][ T5821] usb 6-1: Product: syz [ 1182.841341][ T5821] usb 6-1: Manufacturer: syz [ 1182.842787][ T5821] usb 6-1: SerialNumber: syz [ 1182.846271][ T5821] usb 6-1: config 0 descriptor?? [ 1182.854076][ T5821] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1182.857250][ T5821] dvb-usb: bulk message failed: -22 (2/0) [ 1182.868048][ T5821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1182.872403][ T5821] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1182.874944][ T5821] usb 6-1: media controller created [ 1182.882212][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1182.975670][T21217] usb 11-1: new high-speed USB device number 62 using dummy_hcd [ 1183.073868][T16606] cxusb: i2c wr: len=80 is too big! [ 1183.073868][T16606] [ 1183.079684][ T5821] cxusb: set interface failed [ 1183.081723][ T5821] dvb-usb: bulk message failed: -22 (1/0) [ 1183.087057][T16609] EXT4-fs error: 20 callbacks suppressed [ 1183.087103][T16609] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:52: iget: checksum invalid [ 1183.095273][ T5821] DVB: Unable to find symbol mt352_attach() [ 1183.098000][ T5821] dvb-usb: bulk message failed: -22 (5/0) [ 1183.100442][ T5821] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1183.103100][ T5821] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1183.108708][T16610] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:52: iget: checksum invalid [ 1183.114050][ T5821] rc_core: Couldn't load IR keymap rc-dvico-mce [ 1183.116114][ T5821] Registered IR keymap rc-empty [ 1183.118994][ T5821] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 1183.123329][ T5821] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input134 [ 1183.131631][ T5821] dvb-usb: schedule remote query interval to 100 msecs. [ 1183.134657][ T5821] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1183.143820][ T5821] usb 6-1: USB disconnect, device number 60 [ 1183.153098][T21217] usb 11-1: config 0 has no interfaces? [ 1183.157975][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1183.160217][T21217] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1183.170700][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1183.180194][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1183.180787][T21217] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.184912][T13580] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1183.192631][T13580] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1183.195032][T21217] usb 11-1: Product: syz [ 1183.197422][T13580] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1183.197795][T21217] usb 11-1: Manufacturer: syz [ 1183.202958][T21217] usb 11-1: SerialNumber: syz [ 1183.212345][T21217] usb 11-1: config 0 descriptor?? [ 1183.262962][ T5821] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1183.436789][T16608] 9pnet_virtio: no channels available for device ./file0 [ 1183.441001][ T29] usb 11-1: USB disconnect, device number 62 [ 1183.688943][T16628] netlink: 'syz.1.11810': attribute type 23 has an invalid length. [ 1183.727826][ T42] kauditd_printk_skb: 200 callbacks suppressed [ 1183.727873][ T42] audit: type=1400 audit(1117.344:45866): avc: denied { read } for pid=16629 comm="syz.2.11811" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1183.741542][T16634] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:3: iget: checksum invalid [ 1183.746538][ T42] audit: type=1400 audit(1117.344:45867): avc: denied { open } for pid=16629 comm="syz.2.11811" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1183.757537][ T42] audit: type=1400 audit(1117.344:45868): avc: denied { ioctl } for pid=16629 comm="syz.2.11811" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1183.768235][ T42] audit: type=1400 audit(1117.344:45869): avc: denied { module_request } for pid=16629 comm="syz.2.11811" kmod="nfnetlink-subsys-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1183.778335][ T42] audit: type=1400 audit(1117.372:45870): avc: denied { ioctl } for pid=16635 comm="syz.1.11812" path="socket:[289531]" dev="sockfs" ino=289531 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1183.787935][ T5747] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1183.788827][ T42] audit: type=1400 audit(1117.381:45871): avc: denied { read write } for pid=11144 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1183.801327][ T42] audit: type=1400 audit(1117.381:45872): avc: denied { open } for pid=11144 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1183.802219][T16636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=16636 comm=syz.1.11812 [ 1183.806376][T16637] lo speed is unknown, defaulting to 1000 [ 1183.811610][ T42] audit: type=1400 audit(1117.381:45873): avc: denied { ioctl } for pid=11144 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1183.823142][ T42] audit: type=1400 audit(1117.410:45874): avc: denied { read write } for pid=16639 comm="syz.2.11813" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1183.830260][ T42] audit: type=1400 audit(1117.410:45875): avc: denied { open } for pid=16639 comm="syz.2.11813" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1183.880819][T15966] bond0: (slave syz_tun): Releasing backup interface [ 1184.162619][ T8335] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1184.166326][ T8335] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.347955][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1184.356336][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1184.360839][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1184.363980][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1184.372531][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1184.410823][T16662] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:31: iget: checksum invalid [ 1184.473560][ T8335] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1184.477143][ T8335] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.531159][T16666] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 1184.535066][T16652] lo speed is unknown, defaulting to 1000 [ 1184.674105][ T8335] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1184.680283][ T8335] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.854410][T16694] Bluetooth: MGMT ver 1.23 [ 1184.957747][ T8335] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1184.962175][ T8335] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.994372][T16686] lo speed is unknown, defaulting to 1000 [ 1185.105419][T16708] bridge0: left promiscuous mode [ 1185.109659][T16708] 8021q: adding VLAN 0 to HW filter on device team0 [ 1185.117495][T16708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1185.150206][T16708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1185.156381][T16708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1185.165111][T16708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1185.169933][T16708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1185.183017][T16708] veth1_vlan: left promiscuous mode [ 1185.186415][T16708] veth0_vlan: left promiscuous mode [ 1185.190742][T16708] veth0_vlan: entered promiscuous mode [ 1185.195394][T16708] veth1_vlan: entered promiscuous mode [ 1185.202626][T16708] veth1_macvtap: left promiscuous mode [ 1185.206254][T16708] veth0_macvtap: left promiscuous mode [ 1185.209217][T16708] veth0_macvtap: entered promiscuous mode [ 1185.212585][T16708] veth1_macvtap: entered promiscuous mode [ 1185.238092][T16708] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1185.243728][T16708] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1185.247921][T16708] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1185.251271][T16708] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1185.254884][T16708] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1185.259532][T16708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1185.265090][T16708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1185.271731][T16708] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1185.292800][ T9] bridge0: entered promiscuous mode [ 1185.298676][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.301783][ T6527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1185.307467][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.310515][ T6527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.355082][ T3193] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.357996][ T3193] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.364586][T16716] netlink: 'syz.1.11834': attribute type 1 has an invalid length. [ 1185.422313][T16652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.425195][T16652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.428098][T16652] bridge_slave_0: entered allmulticast mode [ 1185.431338][T16652] bridge_slave_0: entered promiscuous mode [ 1185.436787][ T3193] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.439308][ T3193] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.466150][T16652] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.475911][T16652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.478921][T16652] bridge_slave_1: entered allmulticast mode [ 1185.486527][T16652] bridge_slave_1: entered promiscuous mode [ 1185.679539][T16652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1185.688693][T16652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1185.763633][T16652] team0: Port device team_slave_0 added [ 1185.769640][T16652] team0: Port device team_slave_1 added [ 1185.799962][T16652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1185.802821][T16652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.812884][T16652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1185.819462][T16652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1185.822425][T16652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.833573][T16652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1185.855847][ T8335] bridge_slave_1: left allmulticast mode [ 1185.857654][ T8335] bridge_slave_1: left promiscuous mode [ 1185.859829][ T8335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.872983][ T8335] bridge_slave_0: left allmulticast mode [ 1185.874763][ T8335] bridge_slave_0: left promiscuous mode [ 1185.876896][ T8335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.028062][ T8335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1186.056040][ T8335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1186.119042][ T8335] bond0 (unregistering): Released all slaves [ 1186.133638][T16734] team0: No ports can be present during mode change [ 1186.265030][T16652] hsr_slave_0: entered promiscuous mode [ 1186.272279][T16745] fuse: Unknown parameter '' [ 1186.277994][T16652] hsr_slave_1: entered promiscuous mode [ 1186.285604][T16652] debugfs: 'hsr0' already exists in 'hsr' [ 1186.291378][T16652] Cannot create hsr debugfs directory [ 1186.320845][ T8335] IPVS: stopping backup sync thread 16432 ... [ 1186.362324][T16745] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1186.398783][T16745] __nla_validate_parse: 2 callbacks suppressed [ 1186.398797][T16745] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11841'. [ 1186.467137][T16756] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11842'. [ 1186.474428][T16756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11842'. [ 1186.505554][T16756] binder: 16746:16756 ioctl c018620c 200000000040 returned -22 [ 1186.509050][T16756] binder: 16746:16756 ioctl 8010aebb 200000000040 returned -22 [ 1186.520374][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1186.522801][T16758] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1186.526758][T16758] overlayfs: missing 'lowerdir' [ 1186.620265][ T5747] Bluetooth: hci0: command tx timeout [ 1186.672355][T16763] macsec0: entered promiscuous mode [ 1186.678155][T16763] macsec0: entered allmulticast mode [ 1186.682249][T16763] veth1_macvtap: entered allmulticast mode [ 1186.861737][ T5445] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1186.868708][T24495] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 1186.869525][T16781] binder_alloc: 16780: pid 16780 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1186.907548][ T5445] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1186.988907][T16652] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.027204][T24495] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1187.031905][T24495] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 112, setting to 64 [ 1187.035475][T24495] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1187.041365][T24495] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1187.044962][T24495] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1187.050422][T24495] usb 6-1: Product: syz [ 1187.052041][T24495] usb 6-1: Manufacturer: syz [ 1187.053557][T24495] usb 6-1: SerialNumber: syz [ 1187.108407][T24495] usb 6-1: config 0 descriptor?? [ 1187.117138][T24495] usb 6-1: selecting invalid altsetting 0 [ 1187.119472][ T8335] hsr_slave_0: left promiscuous mode [ 1187.124854][ T8335] hsr_slave_1: left promiscuous mode [ 1187.146317][ T8335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1187.148871][ T8335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1187.156212][ T8335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1187.161832][ T8335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1187.190392][ T8335] veth1_macvtap: left promiscuous mode [ 1187.192439][ T8335] veth0_macvtap: left promiscuous mode [ 1187.196324][ T8335] veth1_vlan: left promiscuous mode [ 1187.204812][ T8335] veth0_vlan: left promiscuous mode [ 1187.329783][T16762] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1187.333067][T16762] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1187.336647][T16762] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1187.339789][T16762] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1187.342821][T16762] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1187.345803][T16762] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1187.350188][T16762] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1187.352652][T16762] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1187.355093][T16762] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1187.357792][T16762] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1187.363212][T16762] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1187.366732][T16762] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1187.369530][T16762] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1187.372020][T16762] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1187.374740][T16762] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1187.377121][T16762] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1187.380014][T16762] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1187.382405][T16762] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1187.384788][T16762] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1187.387624][T16762] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1187.394605][T24495] usb 6-1: USB disconnect, device number 61 [ 1187.447743][ T8335] team0 (unregistering): Port device team_slave_1 removed [ 1187.457358][ T8335] team0 (unregistering): Port device team_slave_0 removed [ 1187.573497][T16652] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.674475][ T5445] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1187.790099][T16652] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.033563][T16822] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11860'. [ 1188.034132][T16820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11859'. [ 1188.331563][ T8725] usb 11-1: new low-speed USB device number 63 using dummy_hcd [ 1188.468282][ T8725] usb 11-1: device descriptor read/64, error -71 [ 1188.481862][T16652] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1188.488284][T16652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1188.491660][T16652] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1188.496375][T16652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1188.500048][T16652] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1188.506144][T16652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1188.509970][T16652] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1188.524746][T16652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1188.567118][T16836] EXT4-fs error: 36 callbacks suppressed [ 1188.567130][T16836] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:9: iget: checksum invalid [ 1188.584397][T16837] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:9: iget: checksum invalid [ 1188.632957][T16652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1188.644265][T16652] 8021q: adding VLAN 0 to HW filter on device team0 [ 1188.649579][ T4920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.652039][ T4920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1188.658745][ T4920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.661169][ T4920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1188.699849][ T5445] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd: iget: checksum invalid [ 1188.713405][ T5445] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd: iget: checksum invalid [ 1188.718911][T16841] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:9: iget: checksum invalid [ 1188.726638][T16843] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:9: iget: checksum invalid [ 1188.732423][T16844] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:9: iget: checksum invalid [ 1188.739298][T16845] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:9: iget: checksum invalid [ 1188.747052][ T8725] usb 11-1: new low-speed USB device number 64 using dummy_hcd [ 1188.754780][T16846] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:9: iget: checksum invalid [ 1188.761508][T16847] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:9: iget: checksum invalid [ 1188.779135][T16652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.831671][ T5747] Bluetooth: hci0: command tx timeout [ 1188.839816][T16652] veth0_vlan: entered promiscuous mode [ 1188.848623][T16652] veth1_vlan: entered promiscuous mode [ 1188.872828][T16652] veth0_macvtap: entered promiscuous mode [ 1188.878067][T16652] veth1_macvtap: entered promiscuous mode [ 1188.888651][T16652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1188.896406][ T8725] usb 11-1: device descriptor read/64, error -71 [ 1188.898640][T16652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1188.905526][ T3193] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.909329][ T3193] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.913590][ T3193] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.918552][ T3193] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.043921][ T4918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.047342][ T4918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.054043][ T8725] usb usb11-port1: attempt power cycle [ 1189.065934][T16864] input: syz1 as /devices/virtual/input/input135 [ 1189.092036][ T42] kauditd_printk_skb: 238 callbacks suppressed [ 1189.092048][ T42] audit: type=1400 audit(1122.360:46114): avc: denied { read } for pid=5128 comm="acpid" name="event4" dev="devtmpfs" ino=6028 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1189.111533][ T4918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.114407][ T4918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.127050][ T42] audit: type=1400 audit(1122.360:46115): avc: denied { open } for pid=5128 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=6028 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1189.143157][ T42] audit: type=1400 audit(1122.360:46116): avc: denied { ioctl } for pid=5128 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=6028 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1189.164354][ T42] audit: type=1400 audit(1122.397:46117): avc: denied { mounton } for pid=16652 comm="syz-executor" path="/syzkaller.Mu9HLC/syz-tmp" dev="sda1" ino=2068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 1189.183612][ T42] audit: type=1400 audit(1122.397:46118): avc: denied { mount } for pid=16652 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1189.193069][ T42] audit: type=1400 audit(1122.397:46119): avc: denied { mounton } for pid=16652 comm="syz-executor" path="/syzkaller.Mu9HLC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1189.203208][ T42] audit: type=1400 audit(1122.397:46120): avc: denied { mount } for pid=16652 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1189.210165][ T42] audit: type=1400 audit(1122.407:46121): avc: denied { mounton } for pid=16652 comm="syz-executor" path="/syzkaller.Mu9HLC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1189.218669][ T42] audit: type=1400 audit(1122.407:46122): avc: denied { mounton } for pid=16652 comm="syz-executor" path="/syzkaller.Mu9HLC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=299190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1189.226616][ T42] audit: type=1400 audit(1122.407:46123): avc: denied { unmount } for pid=16652 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1189.257309][T16872] 9pnet_virtio: no channels available for device syz [ 1189.419460][ T8725] usb 11-1: new low-speed USB device number 65 using dummy_hcd [ 1189.441724][ T8725] usb 11-1: device descriptor read/8, error -71 [ 1189.718554][ T8725] usb 11-1: new low-speed USB device number 66 using dummy_hcd [ 1189.741303][ T8725] usb 11-1: device descriptor read/8, error -71 [ 1189.879113][ T8725] usb usb11-port1: unable to enumerate USB device [ 1190.283800][T16900] netlink: 56 bytes leftover after parsing attributes in process `syz.9.11875'. [ 1190.423968][ T5843] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1190.605511][ T5843] usb 6-1: Using ep0 maxpacket: 32 [ 1190.613308][ T5843] usb 6-1: config 2 has an invalid interface number: 194 but max is 0 [ 1190.618117][ T5843] usb 6-1: config 2 has no interface number 0 [ 1190.620875][ T5843] usb 6-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 833 [ 1190.628039][ T5843] usb 6-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 1190.632513][ T5843] usb 6-1: config 2 interface 194 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1190.636367][ T5843] usb 6-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 1190.640836][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.647209][T16893] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1190.651253][T16893] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1190.824756][T16914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11879'. [ 1190.882026][T16893] bridge1: entered allmulticast mode [ 1190.890032][ T5843] usb 6-1: string descriptor 0 read error: -71 [ 1190.902785][ T5843] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1190.983690][ T5843] usb 6-1: USB disconnect, device number 62 [ 1191.065848][ T5747] Bluetooth: hci0: command tx timeout [ 1191.299457][ T6527] Bluetooth: hci4: Frame reassembly failed (-84) [ 1191.395639][T16927] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1191.526880][T16944] binder: Bad value for 'max' [ 1191.562133][T16946] overlayfs: failed to resolve './bus': -2 [ 1191.576018][T16948] binder_alloc: 16947: binder_alloc_buf size 1024 failed, no address space [ 1191.579648][T16948] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 1191.640681][T16953] overlayfs: failed to resolve './cgroup': -2 [ 1191.671628][T16953] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1191.678878][T16953] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1191.786977][T16968] team0: Device xfrm0 is of different type [ 1191.878362][T16975] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11898'. [ 1191.881922][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11898'. [ 1191.885271][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11898'. [ 1192.155285][ T10] usb 14-1: new high-speed USB device number 24 using dummy_hcd [ 1192.317458][ T10] usb 14-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1192.324187][ T10] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1192.328469][ T10] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1192.331473][ T10] usb 14-1: Product: syz [ 1192.333113][ T10] usb 14-1: Manufacturer: syz [ 1192.334901][ T10] usb 14-1: SerialNumber: syz [ 1192.566585][ T10] usblp 14-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1192.681462][T17003] sch_fq: defrate 4294967290 ignored. [ 1192.800367][T17011] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1192.803889][T17011] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1192.808396][T17011] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1192.811805][T17011] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1192.815204][T17011] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1192.819711][T17011] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1192.823103][T17011] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1192.826365][T17011] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1192.833073][T17011] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1192.835751][T17011] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1192.839110][T17011] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1192.842469][T17011] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1192.845836][T17011] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1192.848561][T17011] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1192.851740][T17011] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1192.854623][T17011] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1192.903769][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11908'. [ 1193.017033][T17018] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11900'. [ 1193.225525][T17026] xt_hashlimit: size too large, truncated to 1048576 [ 1193.277062][ T5748] Bluetooth: hci0: command tx timeout [ 1193.379577][T17032] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11912'. [ 1193.453398][ T5748] Bluetooth: hci4: command 0x1003 tx timeout [ 1193.455615][ T5747] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1193.703095][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11918'. [ 1193.734662][T17055] netlink: 96 bytes leftover after parsing attributes in process `syz.6.11919'. [ 1193.798730][T17062] netlink: 'syz.6.11921': attribute type 10 has an invalid length. [ 1193.809326][T17062] team0: Port device dummy0 added [ 1193.882790][T17071] netlink: 'syz.1.11923': attribute type 12 has an invalid length. [ 1193.911338][T17074] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11924'. [ 1193.922754][T17078] binder: 17077:17078 ioctl 40046205 0 returned -22 [ 1194.126703][T17084] vlan0: entered promiscuous mode [ 1194.138374][T17084] team0: Port device vlan0 added [ 1194.198561][T17106] block nbd6: NBD_DISCONNECT [ 1194.205800][T17107] IPv6: sit2: Disabled Multicast RS [ 1194.211860][T17107] sit2: entered allmulticast mode [ 1194.226301][ T5143] EXT4-fs error: 40 callbacks suppressed [ 1194.226338][ T5143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1194.234218][ T5143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1194.244861][ T5143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1194.443681][ T42] kauditd_printk_skb: 290 callbacks suppressed [ 1194.443722][ T42] audit: type=1400 audit(1127.376:46414): avc: denied { mount } for pid=17129 comm="syz.6.11939" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1194.457014][ T42] audit: type=1400 audit(1127.376:46415): avc: denied { write } for pid=17134 comm="syz.1.11938" path="socket:[299591]" dev="sockfs" ino=299591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1194.486476][T17138] netlink: 'syz.1.11940': attribute type 21 has an invalid length. [ 1194.536431][ T42] audit: type=1400 audit(1127.451:46416): avc: denied { map_create } for pid=17140 comm="syz.6.11941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1194.552920][ T42] audit: type=1400 audit(1127.451:46417): avc: denied { map_read map_write } for pid=17140 comm="syz.6.11941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1194.572437][ T42] audit: type=1400 audit(1127.469:46418): avc: denied { create } for pid=17143 comm="syz.1.11943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1194.572803][ C0] usblp0: nonzero write bulk status received: -71 [ 1194.580811][ T42] audit: type=1400 audit(1127.469:46419): avc: denied { execmem } for pid=17143 comm="syz.1.11943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1194.583547][ T9] usb 14-1: USB disconnect, device number 24 [ 1194.586721][ T42] audit: type=1400 audit(1127.469:46420): avc: denied { create } for pid=17143 comm="syz.1.11943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1194.596213][ T9] usblp0: removed [ 1194.599226][ T42] audit: type=1400 audit(1127.469:46421): avc: denied { bind } for pid=17143 comm="syz.1.11943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1194.615327][ T42] audit: type=1400 audit(1127.469:46422): avc: denied { setopt } for pid=17143 comm="syz.1.11943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1194.630154][ T42] audit: type=1400 audit(1127.469:46423): avc: denied { read } for pid=17143 comm="syz.1.11943" dev="nsfs" ino=4026536452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1194.641598][T17153] netlink: 'syz.6.11945': attribute type 1 has an invalid length. [ 1194.665154][T17155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1194.678705][T17155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.725252][T17157] fuse: Bad value for 'user_id' [ 1194.727376][T17157] fuse: Bad value for 'user_id' [ 1194.734486][T17157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11946'. [ 1194.797342][T17153] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 1194.800600][T17153] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1194.816814][T17153] bond2: (slave vti0): making interface the new active one [ 1194.988386][T17177] Cannot find del_set index 4 as target [ 1195.055426][T17185] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1195.210745][T17198] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:9: iget: checksum invalid [ 1195.677331][T17225] openvswitch: netlink: IP tunnel TTL not specified. [ 1196.008701][ T5748] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 1196.008754][ T5748] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 1196.281630][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 1196.286722][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 1196.375453][T17254] ceph: No mds server is up or the cluster is laggy [ 1197.215735][T17305] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:7: iget: checksum invalid [ 1197.222210][T17306] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:7: iget: checksum invalid [ 1197.228183][T17302] syzkaller0: entered promiscuous mode [ 1197.229884][T17302] syzkaller0: entered allmulticast mode [ 1197.380397][ T5748] Bluetooth: hci0: command 0x0c1a tx timeout [ 1197.380675][ T5747] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1197.391451][T17309] __nla_validate_parse: 1 callbacks suppressed [ 1197.391480][T17309] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11990'. [ 1197.475447][ T5143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1197.484639][ T5143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1197.490114][ T5143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1197.491060][T17314] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:7: iget: checksum invalid [ 1197.507189][T17312] netlink: 'syz.9.11991': attribute type 14 has an invalid length. [ 1197.733978][T17328] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11993'. [ 1197.747491][T17329] nfs: Unknown parameter 'lock ' [ 1197.940714][T17346] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11997'. [ 1198.299613][T17358] program syz.2.12002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1198.546895][ T10] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1198.557082][T17369] binder: 17367:17369 ioctl 40445637 200000000000 returned -22 [ 1198.705947][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1198.710087][ T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1198.712833][ T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1198.716088][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1198.719030][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1198.722110][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1198.725245][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1198.729754][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1198.732769][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.738891][ T10] usb 6-1: config 0 descriptor?? [ 1198.793713][T17375] usb usb8: usbfs: process 17375 (syz.2.12007) did not claim interface 0 before use [ 1198.962974][ T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 63 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1198.973237][ T10] usb 6-1: USB disconnect, device number 63 [ 1198.980553][T13578] udevd[13578]: setting mode of /dev/usb/lp0 to 020660 failed: No such file or directory [ 1198.980671][ T10] usblp0: removed [ 1198.984310][T13578] udevd[13578]: setting owner of /dev/usb/lp0 to uid=0, gid=7 failed: No such file or directory [ 1199.228806][T17394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12011'. [ 1199.402388][T17397] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1199.430260][ T10] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1199.568244][T17408] netlink: 36 bytes leftover after parsing attributes in process `syz.9.12016'. [ 1199.592399][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1199.597047][ T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1199.600779][ T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1199.608312][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1199.612457][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1199.618193][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1199.626513][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1199.639509][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1199.644439][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.661152][ T10] usb 6-1: config 0 descriptor?? [ 1199.673947][T13578] EXT4-fs error: 19 callbacks suppressed [ 1199.673967][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1199.683200][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1199.691999][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1199.696649][T17415] netlink: 'syz.2.12017': attribute type 1 has an invalid length. [ 1199.705613][T17410] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1199.721711][T17415] bond7: option mode: invalid value (8) [ 1199.725494][T17415] bond7 (unregistering): Released all slaves [ 1199.754169][T17410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12017'. [ 1199.886764][ T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1199.909729][ T42] kauditd_printk_skb: 280 callbacks suppressed [ 1199.909748][ T42] audit: type=1400 audit(1132.485:46704): avc: denied { prog_run } for pid=17422 comm="syz.9.12019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1199.996493][ T42] audit: type=1400 audit(1132.560:46705): avc: denied { read write } for pid=17427 comm="syz.2.12021" name="vbi8" dev="devtmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1200.009834][ T42] audit: type=1400 audit(1132.560:46706): avc: denied { open } for pid=17427 comm="syz.2.12021" path="/dev/vbi8" dev="devtmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1200.021673][ T42] audit: type=1400 audit(1132.579:46707): avc: denied { ioctl } for pid=17427 comm="syz.2.12021" path="/dev/vbi8" dev="devtmpfs" ino=1030 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1200.097502][ T42] audit: type=1400 audit(1132.663:46708): avc: denied { read write } for pid=17353 comm="syz.1.12000" name="lp0" dev="devtmpfs" ino=6189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1200.107558][ T42] audit: type=1400 audit(1132.663:46709): avc: denied { open } for pid=17353 comm="syz.1.12000" path="/dev/usb/lp0" dev="devtmpfs" ino=6189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1200.117927][ T42] audit: type=1400 audit(1132.672:46710): avc: denied { create } for pid=17433 comm="syz.9.12023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1200.125619][ T42] audit: type=1400 audit(1132.672:46711): avc: denied { bind } for pid=17433 comm="syz.9.12023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1200.135868][ T42] audit: type=1400 audit(1132.672:46712): avc: denied { accept } for pid=17433 comm="syz.9.12023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1200.154014][ C0] usblp0: nonzero read bulk status received: -71 [ 1200.154321][ T8725] usb 6-1: USB disconnect, device number 64 [ 1200.156678][T17354] usblp0: error -71 reading from printer [ 1200.216781][T17441] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm dhcpcd: iget: checksum invalid [ 1200.227461][ T42] audit: type=1400 audit(1132.785:46713): avc: denied { bpf } for pid=17433 comm="syz.9.12023" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1200.444024][T17450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12024'. [ 1200.702177][ T5143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1200.707765][ T5143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1200.712572][ T5143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1200.844105][T17462] xt_hashlimit: size too large, truncated to 1048576 [ 1200.904640][T17466] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:31: iget: checksum invalid [ 1200.994003][T17468] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1200.994007][T17469] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1201.002316][T17468] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1201.011272][T17468] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 1201.032184][T17472] Invalid argument reading file caps for ./file0 [ 1201.169967][T17478] lo speed is unknown, defaulting to 1000 [ 1201.250768][T17482] netlink: 276 bytes leftover after parsing attributes in process `syz.6.12034'. [ 1201.258353][T17482] netlink: 'syz.6.12034': attribute type 13 has an invalid length. [ 1201.261903][T17482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12034'. [ 1201.266490][T17482] netlink: 'syz.6.12034': attribute type 13 has an invalid length. [ 1201.270212][T17482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12034'. [ 1201.306280][T17485] geneve1: entered allmulticast mode [ 1201.437553][T17489] mac80211_hwsim hwsim101 wlan0: entered promiscuous mode [ 1201.440033][T17489] mac80211_hwsim hwsim101 wlan0: entered allmulticast mode [ 1201.470566][T17491] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:7: iget: checksum invalid [ 1201.477237][T17492] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:7: iget: checksum invalid [ 1201.533163][T17438] usblp0: removed [ 1201.711600][T17523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1201.754665][T17527] netlink: 'syz.6.12046': attribute type 10 has an invalid length. [ 1201.760865][T17527] veth0_to_bond: entered allmulticast mode [ 1201.765007][T17527] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1201.844553][T17530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1201.847663][T17530] IPv6: NLM_F_CREATE should be set when creating new route [ 1203.315267][T17610] __nla_validate_parse: 1 callbacks suppressed [ 1203.315280][T17610] netlink: 376 bytes leftover after parsing attributes in process `syz.6.12070'. [ 1203.368361][T17612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12072'. [ 1203.674589][ T5747] Bluetooth: hci3: unexpected event for opcode 0x040e [ 1203.988309][T17647] bond1: entered promiscuous mode [ 1203.991464][T17647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1204.119929][T17650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1204.169214][T17656] netlink: 'syz.1.12083': attribute type 10 has an invalid length. [ 1204.233381][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12085'. [ 1204.287834][T17663] bond7: entered promiscuous mode [ 1204.413218][T17672] netlink: 'syz.1.12090': attribute type 1 has an invalid length. [ 1204.426388][T17672] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1204.461595][T17672] bond7: (slave geneve3): making interface the new active one [ 1204.520407][T17672] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 1204.635573][T17680] kvm: user requested TSC rate below hardware speed [ 1204.639409][T17680] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1204.649998][T17683] udevd[17683]: failed to execute '/lib/udev/cdrom_id' 'cdrom_id --lock-media /dev/sr0': Bad message [ 1204.674369][T17684] udevd[17684]: failed to execute '/lib/udev/ata_id' 'ata_id --export /dev/sr0': Bad message [ 1204.695452][T17687] udevd[17687]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sr0': Bad message [ 1205.027719][T17703] SELinux: failed to load policy [ 1205.246173][T17717] rdma_op ffff888040be09f0 conn xmit_rdma 0000000000000000 [ 1205.272746][ T42] kauditd_printk_skb: 268 callbacks suppressed [ 1205.272759][ T42] audit: type=1400 audit(1137.501:46982): avc: denied { create } for pid=17719 comm="syz.6.12104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1205.274119][T17721] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12104'. [ 1205.278984][ T42] audit: type=1400 audit(1137.501:46983): avc: denied { ioctl } for pid=17719 comm="syz.6.12104" path="socket:[302652]" dev="sockfs" ino=302652 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1205.365400][ T42] audit: type=1400 audit(1137.595:46984): avc: denied { write } for pid=17722 comm="syz.6.12105" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1205.365455][ T5747] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 1205.419270][ T42] audit: type=1400 audit(1137.642:46985): avc: denied { create } for pid=17724 comm="syz.6.12106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1205.420799][T17725] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12106'. [ 1205.422354][ T42] audit: type=1400 audit(1137.642:46986): avc: denied { read write } for pid=17724 comm="syz.6.12106" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1205.441699][ T42] audit: type=1400 audit(1137.642:46987): avc: denied { open } for pid=17724 comm="syz.6.12106" path="/dev/uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1205.450276][ T42] audit: type=1400 audit(1137.642:46988): avc: denied { ioctl } for pid=17724 comm="syz.6.12106" path="socket:[302664]" dev="sockfs" ino=302664 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1205.457976][ T42] audit: type=1400 audit(1137.642:46989): avc: denied { bind } for pid=17724 comm="syz.6.12106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1205.464599][ T42] audit: type=1400 audit(1137.642:46990): avc: denied { ioctl } for pid=17724 comm="syz.6.12106" path="/dev/uinput" dev="devtmpfs" ino=944 ioctlcmd=0x55c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1205.574949][ T42] audit: type=1400 audit(1137.782:46991): avc: denied { read } for pid=17727 comm="syz.6.12107" name="vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1205.639813][T17735] netlink: 'syz.1.12108': attribute type 1 has an invalid length. [ 1205.663252][T17735] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1205.863677][T17747] netlink: 'syz.6.12113': attribute type 4 has an invalid length. [ 1205.871887][T17747] netlink: 'syz.6.12113': attribute type 4 has an invalid length. [ 1205.928563][T17750] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12114'. [ 1205.932621][T17750] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12114'. [ 1206.057444][ T60] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1206.251616][ T60] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1206.255134][ T60] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1206.258217][ T60] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1206.261152][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.269534][T17741] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1206.284887][T13578] EXT4-fs error: 25 callbacks suppressed [ 1206.284904][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1206.287184][ T60] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1206.287722][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1206.302085][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1206.499363][ T1352] usb 6-1: USB disconnect, device number 65 [ 1206.711016][T17775] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:9: iget: checksum invalid [ 1206.725160][T17777] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:58: iget: checksum invalid [ 1206.768649][T17782] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:9: iget: checksum invalid [ 1206.779898][T17783] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:9: iget: checksum invalid [ 1206.825699][T17786] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:58: iget: checksum invalid [ 1206.833873][T17787] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:31: iget: checksum invalid [ 1206.839805][T17788] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:31: iget: checksum invalid [ 1207.609886][T17809] vivid-003: ================= START STATUS ================= [ 1207.622411][T17809] vivid-003: FM Deviation: 100 [ 1207.634133][T17807] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1207.643514][T17809] vivid-003: ================== END STATUS ================== [ 1207.694471][T17811] xt_hashlimit: size too large, truncated to 1048576 [ 1207.773617][T17820] xt_hashlimit: size too large, truncated to 1048576 [ 1207.923778][T17828] binder: 17827:17828 ioctl c0385869 200000000100 returned -22 [ 1207.972314][T17828] binder: 17827:17828 ioctl c00c620f 200000000500 returned -22 [ 1207.975960][T17827] [U]  [ 1208.008875][T17830] netlink: 'syz.1.12135': attribute type 4 has an invalid length. [ 1208.069716][T17838] netlink: 44 bytes leftover after parsing attributes in process `syz.9.12138'. [ 1208.094745][T17839] [U] [ 1208.096036][T17839] [U] [ 1208.097244][T17839] [U] [ 1208.098433][T17839] [U] [ 1208.109274][T17839] [U] [ 1208.110549][T17839] [U] [ 1208.111761][T17839] [U] [ 1208.112957][T17839] [U] [ 1208.114847][T17839] [U] [ 1208.116059][T17839] [U] [ 1208.117263][T17839] [U] [ 1208.118459][T17839] [U] [ 1208.121996][T17839] [U] [ 1208.123263][T17839] [U] [ 1208.124456][T17839] [U] [ 1208.125660][T17839] [U] [ 1208.127058][T17839] [U] [ 1208.128333][T17839] [U] [ 1208.129498][T17839] [U] [ 1208.130523][T17839] [U] [ 1208.131436][T17839] [U] [ 1208.132491][T17839] [U] [ 1208.133408][T17839] [U] [ 1208.134267][T17839] [U] [ 1208.135183][T17839] [U] [ 1208.138838][T17839] [U] [ 1208.140068][T17839] [U] [ 1208.141261][T17839] [U] [ 1208.142394][T17839] [U] [ 1208.144250][T17839] [U] [ 1208.145429][T17839] [U] [ 1208.146584][T17839] [U] [ 1208.147752][T17839] [U] [ 1208.149146][T17839] [U] [ 1208.150486][T17839] [U] [ 1208.151649][T17839] [U] [ 1208.152642][T17839] [U] [ 1208.153561][T17839] [U] [ 1208.154682][T17839] [U] [ 1208.155601][T17839] [U] [ 1208.156627][T17839] [U] [ 1208.157612][T17839] [U] [ 1208.158774][T17839] [U] [ 1208.159740][T17839] [U] [ 1208.160662][T17839] [U] [ 1208.161756][T17839] [U] [ 1208.163280][T17839] [U] [ 1208.164485][T17839] [U] [ 1208.165669][T17839] [U] [ 1208.166861][T17839] [U] [ 1208.168103][T17839] [U] [ 1208.169496][T17839] [U] [ 1208.170633][T17839] [U] [ 1208.171758][T17839] [U] [ 1208.172956][T17839] [U] [ 1208.177276][T17839] [U] [ 1208.178468][T17839] [U] [ 1208.179600][T17839] [U] [ 1208.180695][T17839] [U] [ 1208.187059][T17839] [U] [ 1208.188475][T17839] [U] [ 1208.189666][T17839] [U] [ 1208.190816][T17839] [U] [ 1208.193725][T17845] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12137'. [ 1208.199118][T17839] [U] [ 1208.200310][T17839] [U] [ 1208.201499][T17839] [U] [ 1208.202682][T17839] [U] [ 1208.210504][T17839] [U] [ 1208.213436][T17839] [U] [ 1208.214616][T17839] [U] [ 1208.215652][T17839] [U] [ 1208.216707][T17839] [U] [ 1208.222166][T17847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12140'. [ 1208.223697][T17839] [U] [ 1208.226799][T17839] [U] [ 1208.227716][T17848] netlink: 'syz.1.12140': attribute type 10 has an invalid length. [ 1208.227838][T17839] [U] [ 1208.232125][T17839] [U] [ 1208.244162][T17839] [U] [ 1208.245422][T17839] [U] [ 1208.246609][T17839] [U] [ 1208.247811][T17839] [U] [ 1208.257282][T17839] [U] [ 1208.258544][T17839] [U] [ 1208.259855][T17839] [U] [ 1208.261023][T17839] [U] [ 1208.268580][T17839] [U] [ 1208.271447][T17839] [U] [ 1208.272508][T17839] [U] [ 1208.273542][T17839] [U] [ 1208.274544][T17839] [U] [ 1208.282415][T17839] [U] [ 1208.283501][T17839] [U] [ 1208.284406][T17839] [U] [ 1208.285298][T17839] [U] [ 1208.290256][T17851] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1208.292014][T17839] [U] [ 1208.294758][T17839] [U] [ 1208.295901][T17839] [U] [ 1208.297047][T17839] [U] [ 1208.304419][T17839] [U] [ 1208.305639][T17839] [U] [ 1208.306795][T17839] [U] [ 1208.307916][T17839] [U] [ 1208.320184][T17839] [U] [ 1208.321561][T17839] [U] [ 1208.322740][T17839] [U] [ 1208.323837][T17839] [U] [ 1208.324876][T17839] [U] [ 1208.331683][T17839] [U] [ 1208.332752][T17839] [U] [ 1208.333843][T17839] [U] [ 1208.334897][T17839] [U] [ 1208.336323][T17839] [U] [ 1208.337214][T17839] [U] [ 1208.338071][T17839] [U] [ 1208.338936][T17839] [U] [ 1208.340151][T17839] [U] [ 1208.341063][T17839] [U] [ 1208.341974][T17839] [U] [ 1208.342917][T17839] [U] [ 1208.343951][T17839] [U] [ 1208.345013][T17839] [U] [ 1208.345962][T17839] [U] [ 1208.346878][T17839] [U] [ 1208.347774][T17839] [U] [ 1208.349993][T17839] [U] [ 1208.350885][T17839] [U] [ 1208.351754][T17839] [U] [ 1208.352641][T17839] [U] [ 1208.355329][T17839] [U] [ 1208.356255][T17839] [U] [ 1208.357139][T17839] [U] [ 1208.358015][T17839] [U] [ 1208.359067][T17839] [U] [ 1208.359970][T17839] [U] [ 1208.360832][T17839] [U] [ 1208.361684][T17839] [U] [ 1208.362657][T17839] [U] [ 1208.363641][T17839] [U] [ 1208.364531][T17839] [U] [ 1208.365408][T17839] [U] [ 1208.366286][T17839] [U] [ 1208.367550][T17839] [U] [ 1208.368446][T17839] [U] [ 1208.369337][T17839] [U] [ 1208.370215][T17839] [U] [ 1208.371285][T17839] [U] [ 1208.372339][T17839] [U] [ 1208.373264][T17839] [U] [ 1208.374143][T17839] [U] [ 1208.375322][T17839] [U] [ 1208.376264][T17839] [U] [ 1208.377152][T17839] [U] [ 1208.378157][T17839] [U] [ 1208.379412][T17839] [U] [ 1208.380483][T17839] [U] [ 1208.381488][T17839] [U] [ 1208.382406][T17839] [U] [ 1208.383338][T17839] [U] [ 1208.384385][T17839] [U] [ 1208.385392][T17839] [U] [ 1208.386284][T17839] [U] [ 1208.387190][T17839] [U] [ 1208.388332][T17839] [U] [ 1208.389270][T17839] [U] [ 1208.390179][T17839] [U] [ 1208.391058][T17839] [U] [ 1208.392201][T17839] [U] [ 1208.393245][T17839] [U] [ 1208.394128][T17839] [U] [ 1208.395012][T17839] [U] [ 1208.396071][T17839] [U] [ 1208.397063][T17839] [U] [ 1208.397978][T17839] [U] [ 1208.398859][T17839] [U] [ 1208.399767][T17839] [U] [ 1208.400948][T17839] [U] [ 1208.401864][T17839] [U] [ 1208.402770][T17839] [U] [ 1208.403872][T17839] [U] [ 1208.404977][T17839] [U] [ 1208.405867][T17839] [U] [ 1208.406753][T17839] [U] [ 1208.407664][T17839] [U] [ 1208.408713][T17839] [U] [ 1208.409603][T17839] [U] [ 1208.410511][T17839] [U] [ 1208.411409][T17839] [U] [ 1208.412405][T17839] [U] [ 1208.413355][T17839] [U] [ 1208.414234][T17839] [U] [ 1208.415129][T17839] [U] [ 1208.416022][T17839] [U] [ 1208.417090][T17839] [U] [ 1208.417982][T17839] [U] [ 1208.418875][T17839] [U] [ 1208.419760][T17839] [U] [ 1208.422425][T17839] [U] [ 1208.423336][T17839] [U] [ 1208.424192][T17839] [U] [ 1208.425127][T17839] [U] [ 1208.426175][T17839] [U] [ 1208.427127][T17839] [U] [ 1208.428063][T17839] [U] [ 1208.428943][T17839] [U] [ 1208.430055][T17839] [U] [ 1208.431007][T17839] [U] [ 1208.431917][T17839] [U] [ 1208.432813][T17839] [U] [ 1208.433689][T17839] [U] [ 1208.434694][T17839] [U] [ 1208.435638][T17839] [U] [ 1208.436544][T17839] [U] [ 1208.437424][T17839] [U] [ 1208.438420][T17839] [U] [ 1208.439379][T17839] [U] [ 1208.440283][T17839] [U] [ 1208.441160][T17839] [U] [ 1208.442263][T17839] [U] [ 1208.443169][T17839] [U] [ 1208.444062][T17839] [U] [ 1208.444945][T17839] [U] [ 1208.445957][T17839] [U] [ 1208.447023][T17839] [U] [ 1208.447933][T17839] [U] [ 1208.448821][T17839] [U] [ 1208.449699][T17839] [U] [ 1208.450732][T17839] [U] [ 1208.451621][T17839] [U] [ 1208.452496][T17839] [U] [ 1208.453381][T17839] [U] [ 1208.454487][T17839] [U] [ 1208.455405][T17839] [U] [ 1208.456337][T17839] [U] [ 1208.457241][T17839] [U] [ 1208.458305][T17839] [U] [ 1208.459198][T17839] [U] [ 1208.460100][T17839] [U] [ 1208.460975][T17839] [U] [ 1208.462272][T17839] [U] [ 1208.463254][T17839] [U] [ 1208.464144][T17839] [U] [ 1208.465035][T17839] [U] [ 1208.465926][T17839] [U] [ 1208.466915][T17839] [U] [ 1208.467916][T17839] [U] [ 1208.468930][T17839] [U] [ 1208.469793][T17839] [U] [ 1208.470792][T17839] [U] [ 1208.471689][T17839] [U] [ 1208.472590][T17839] [U] [ 1208.473480][T17839] [U] [ 1208.476081][T17839] [U] [ 1208.476975][T17839] [U] [ 1208.477837][T17839] [U] [ 1208.478740][T17839] [U] [ 1208.479781][T17839] [U] [ 1208.480742][T17839] [U] [ 1208.481627][T17839] [U] [ 1208.482538][T17839] [U] [ 1208.483450][T17839] [U] [ 1208.484949][T17839] [U] [ 1208.485858][T17839] [U] [ 1208.486753][T17839] [U] [ 1208.487649][T17839] [U] [ 1208.488601][T17839] [U] [ 1208.489756][T17839] [U] [ 1208.490720][T17839] [U] [ 1208.491607][T17839] [U] [ 1208.492619][T17839] [U] [ 1208.493528][T17839] [U] [ 1208.494413][T17839] [U] [ 1208.495294][T17839] [U] [ 1208.498351][T17839] [U] [ 1208.499446][T17839] [U] [ 1208.500328][T17839] [U] [ 1208.501201][T17839] [U] [ 1208.502095][T17839] [U] [ 1208.503054][T17839] [U] [ 1208.503956][T17839] [U] [ 1208.504831][T17839] [U] [ 1208.505718][T17839] [U] [ 1208.507252][T17839] [U] [ 1208.508172][T17839] [U] [ 1208.509067][T17839] [U] [ 1208.509999][T17839] [U] [ 1208.511043][T17839] [U] [ 1208.511954][T17839] [U] [ 1208.512849][T17839] [U] [ 1208.513725][T17839] [U] [ 1208.514624][T17839] [U] [ 1208.516061][T17839] [U] [ 1208.516957][T17839] [U] [ 1208.517847][T17839] [U] [ 1208.518731][T17839] [U] [ 1208.519765][T17839] [U] [ 1208.520664][T17839] [U] [ 1208.521619][T17839] [U] [ 1208.522532][T17839] [U] [ 1208.523573][T17839] [U] [ 1208.524461][T17839] [U] [ 1208.525342][T17839] [U] [ 1208.526241][T17839] [U] [ 1208.527884][T17839] [U] [ 1208.528786][T17839] [U] [ 1208.529822][T17839] [U] [ 1208.530723][T17839] [U] [ 1208.531997][T17839] [U] [ 1208.532977][T17839] [U] [ 1208.533875][T17839] [U] [ 1208.534748][T17839] [U] [ 1208.535651][T17839] [U] [ 1208.536955][T17839] [U] [ 1208.537846][T17839] [U] [ 1208.538767][T17839] [U] [ 1208.539700][T17839] [U] [ 1208.540702][T17839] [U] [ 1208.541597][T17839] [U] [ 1208.542544][T17839] [U] [ 1208.543468][T17839] [U] [ 1208.544460][T17839] [U] [ 1208.545363][T17839] [U] [ 1208.546283][T17839] [U] [ 1208.547221][T17839] [U] [ 1208.548767][T17839] [U] [ 1208.549637][T17839] [U] [ 1208.550440][T17839] [U] [ 1208.551289][T17839] [U] [ 1208.552090][T17839] [U] [ 1208.553316][T17839] [U] [ 1208.554102][T17839] [U] [ 1208.554895][T17839] [U] [ 1208.555686][T17839] [U] [ 1208.556578][T17839] [U] [ 1208.557360][T17839] [U] [ 1208.558145][T17839] [U] [ 1208.558945][T17839] [U] [ 1208.560466][T17839] [U] [ 1208.561292][T17839] [U] [ 1208.562166][T17839] [U] [ 1208.562975][T17839] [U] [ 1208.563937][T17839] [U] [ 1208.564875][T17839] [U] [ 1208.565753][T17839] [U] [ 1208.566652][T17839] [U] [ 1208.567568][T17839] [U] [ 1208.571234][T17839] [U] [ 1208.572180][T17839] [U] [ 1208.573086][T17839] [U] [ 1208.573987][T17839] [U] [ 1208.576204][T17839] [U] [ 1208.577139][T17839] [U] [ 1208.578036][T17839] [U] [ 1208.579006][T17839] [U] [ 1208.580308][T17839] [U] [ 1208.581216][T17839] [U] [ 1208.582138][T17839] [U] [ 1208.583059][T17839] [U] [ 1208.584195][T17839] [U] [ 1208.585307][T17839] [U] [ 1208.586201][T17839] [U] [ 1208.587107][T17839] [U] [ 1208.587986][T17839] [U] [ 1208.589110][T17839] [U] [ 1208.590041][T17839] [U] [ 1208.591043][T17839] [U] [ 1208.592019][T17839] [U] [ 1208.593730][T17839] [U] [ 1208.594634][T17839] [U] [ 1208.595573][T17839] [U] [ 1208.596582][T17839] [U] [ 1208.597934][T17839] [U] [ 1208.598947][T17839] [U] [ 1208.599845][T17839] [U] [ 1208.600721][T17839] [U] [ 1208.602067][T17839] [U] [ 1208.603201][T17839] [U] [ 1208.604103][T17839] [U] [ 1208.604991][T17839] [U] [ 1208.605869][T17839] [U] [ 1208.606985][T17839] [U] [ 1208.607897][T17839] [U] [ 1208.608785][T17839] [U] [ 1208.609661][T17839] [U] [ 1208.610698][T17839] [U] [ 1208.611618][T17839] [U] [ 1208.612504][T17839] [U] [ 1208.613398][T17839] [U] [ 1208.614947][T17839] [U] [ 1208.615874][T17839] [U] [ 1208.616764][T17839] [U] [ 1208.617776][T17839] [U] [ 1208.629720][T17839] [U] [ 1208.630699][T17839] [U] [ 1208.631606][T17839] [U] [ 1208.632520][T17839] [U] [ 1208.633436][T17839] [U] [ 1208.642970][T17839] [U] [ 1208.643902][T17839] [U] [ 1208.644747][T17839] [U] [ 1208.645569][T17839] [U] [ 1208.647815][T17839] [U] [ 1208.648709][T17839] [U] [ 1208.649734][T17839] [U] [ 1208.650792][T17839] [U] [ 1208.653091][T17839] [U] [ 1208.654015][T17839] [U] [ 1208.654893][T17839] [U] [ 1208.655805][T17839] [U] [ 1208.656946][T17839] [U] [ 1208.659189][T17839] [U] [ 1208.660219][T17839] [U] [ 1208.661308][T17839] [U] [ 1208.662267][T17839] [U] [ 1208.663496][T17839] [U] [ 1208.664656][T17839] [U] [ 1208.665736][T17839] [U] [ 1208.666818][T17839] [U] [ 1208.668046][T17839] [U] [ 1208.668953][T17839] [U] [ 1208.669846][T17839] [U] [ 1208.670759][T17839] [U] [ 1208.671832][T17839] [U] [ 1208.672746][T17839] [U] [ 1208.673662][T17839] [U] [ 1208.674562][T17839] [U] [ 1208.675595][T17839] [U] [ 1208.676731][T17839] [U] [ 1208.677891][T17839] [U] [ 1208.679015][T17839] [U] [ 1208.680109][T17839] [U] [ 1208.681504][T17839] [U] [ 1208.682603][T17839] [U] [ 1208.683705][T17839] [U] [ 1208.684783][T17839] [U] [ 1208.685965][T17839] [U] [ 1208.686873][T17839] [U] [ 1208.687787][T17839] [U] [ 1208.688674][T17839] [U] [ 1208.690548][T17867] netlink: 'syz.6.12145': attribute type 1 has an invalid length. [ 1208.696855][T17839] [U] [ 1208.697467][T17867] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12145'. [ 1208.698007][T17839] [U] [ 1208.702635][T17839] [U] [ 1208.703690][T17839] [U] [ 1208.709391][T17839] [U] [ 1208.710432][T17839] [U] [ 1208.711364][T17839] [U] [ 1208.712382][T17839] [U] [ 1208.713420][T17839] [U] [ 1208.724272][T17839] [U] [ 1208.725184][T17839] [U] [ 1208.726077][T17839] [U] [ 1208.726942][T17839] [U] [ 1208.732631][T17839] [U] [ 1208.733570][T17839] [U] [ 1208.734506][T17839] [U] [ 1208.735690][T17839] [U] [ 1208.741381][T17839] [U] [ 1208.742444][T17839] [U] [ 1208.743370][T17839] [U] [ 1208.744261][T17839] [U] [ 1208.749681][T17839] [U] [ 1208.751282][T17839] [U] [ 1208.752196][T17839] [U] [ 1208.753100][T17839] [U] [ 1208.753983][T17839] [U] [ 1208.757743][T17839] [U] [ 1208.758658][T17839] [U] [ 1208.759573][T17839] [U] [ 1208.760475][T17839] [U] [ 1208.761728][T17839] [U] [ 1208.762635][T17839] [U] [ 1208.763560][T17839] [U] [ 1208.764553][T17839] [U] [ 1208.768035][T17839] [U] [ 1208.769152][T17839] [U] [ 1208.770072][T17839] [U] [ 1208.771056][T17839] [U] [ 1208.774588][T17839] [U] [ 1208.775568][T17839] [U] [ 1208.776472][T17839] [U] [ 1208.777391][T17839] [U] [ 1208.778269][T17839] [U] [ 1208.779752][T17839] [U] [ 1208.780658][T17839] [U] [ 1208.781577][T17839] [U] [ 1208.782458][T17839] [U] [ 1208.785612][T17839] [U] [ 1208.786526][T17839] [U] [ 1208.787438][T17839] [U] [ 1208.788465][T17839] [U] [ 1208.791811][T17839] [U] [ 1208.792898][T17839] [U] [ 1208.793789][T17839] [U] [ 1208.794676][T17839] [U] [ 1208.796912][T17839] [U] [ 1208.797871][T17839] [U] [ 1208.798793][T17839] [U] [ 1208.799694][T17839] [U] [ 1208.800577][T17839] [U] [ 1208.803747][T17839] [U] [ 1208.804667][T17839] [U] [ 1208.805546][T17839] [U] [ 1208.806438][T17839] [U] [ 1208.809965][T17839] [U] [ 1208.810868][T17839] [U] [ 1208.811763][T17839] [U] [ 1208.812621][T17839] [U] [ 1208.814468][T17839] [U] [ 1208.815405][T17839] [U] [ 1208.816299][T17839] [U] [ 1208.817180][T17839] [U] [ 1208.820534][T17839] [U] [ 1208.821539][T17839] [U] [ 1208.822418][T17839] [U] [ 1208.823299][T17839] [U] [ 1208.824166][T17839] [U] [ 1208.827605][T17839] [U] [ 1208.828518][T17839] [U] [ 1208.829412][T17839] [U] [ 1208.830296][T17839] [U] [ 1208.832696][T17839] [U] [ 1208.833610][T17839] [U] [ 1208.834481][T17839] [U] [ 1208.835366][T17839] [U] [ 1208.838837][T17839] [U] [ 1208.839811][T17839] [U] [ 1208.840744][T17839] [U] [ 1208.841752][T17839] [U] [ 1208.846635][T17839] [U] [ 1208.849199][T17839] [U] [ 1208.850114][T17839] [U] [ 1208.851152][T17839] [U] [ 1208.852131][T17839] [U] [ 1208.856871][T17839] [U] [ 1208.858012][T17839] [U] [ 1208.858909][T17839] [U] [ 1208.859863][T17839] [U] [ 1208.864724][T17839] [U] [ 1208.865653][T17839] [U] [ 1208.866540][T17839] [U] [ 1208.867347][T17883] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12151'. [ 1208.867445][T17839] [U] [ 1208.877647][T17839] [U] [ 1208.878605][T17839] [U] [ 1208.879501][T17839] [U] [ 1208.880364][T17839] [U] [ 1208.885869][T17839] [U] [ 1208.886848][T17839] [U] [ 1208.887763][T17839] [U] [ 1208.888669][T17839] [U] [ 1208.889565][T17839] [U] [ 1208.892282][ T5747] Bluetooth: hci1: unexpected event 0x10 length: 6 > 1 [ 1208.903986][T17839] [U] [ 1208.907353][T17839] [U] [ 1208.908466][T17839] [U] [ 1208.909514][T17839] [U] [ 1208.910577][ T5748] Bluetooth: hci1: hardware error 0x5a [ 1208.911800][T17839] [U] [ 1208.914128][T17839] [U] [ 1208.915009][T17839] [U] [ 1208.915912][T17839] [U] [ 1208.920483][T17839] [U] [ 1208.921418][T17839] [U] [ 1208.922322][T17839] [U] [ 1208.923301][T17839] [U] [ 1208.927066][T17839] [U] [ 1208.928103][T17839] [U] [ 1208.928999][T17839] [U] [ 1208.929880][T17839] [U] [ 1208.930757][T17839] [U] [ 1208.935354][T17839] [U] [ 1208.936514][T17839] [U] [ 1208.937435][T17839] [U] [ 1208.938315][T17839] [U] [ 1208.940533][T17839] [U] [ 1208.941438][T17839] [U] [ 1208.942360][T17839] [U] [ 1208.943372][T17839] [U] [ 1208.954597][T17839] [U] [ 1208.968732][T17883] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17883 comm=syz.6.12151 [ 1209.166288][T17901] ISOFS: Unable to identify CD-ROM format. [ 1209.259737][T17907] netlink: 'syz.9.12160': attribute type 23 has an invalid length. [ 1209.475867][T17920] binder: 17919:17920 ioctl 5423 200000000000 returned -22 [ 1209.479760][T17920] binder: 17919:17920 ioctl 5412 200000000040 returned -22 [ 1209.534614][T17922] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12164'. [ 1209.980323][T17940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1210.027315][T17940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1210.070948][T17951] afs: Unknown parameter './file0' [ 1210.120650][T17955] "syz.6.12175" (17955) uses obsolete ecb(arc4) skcipher [ 1210.148255][T17955] netlink: 'syz.6.12175': attribute type 1 has an invalid length. [ 1210.185758][T17955] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1210.188487][T17961] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 1210.198606][T17955] netlink: 76 bytes leftover after parsing attributes in process `syz.6.12175'. [ 1210.205259][T17961] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12176'. [ 1210.211581][T17961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1210.223819][T17956] lo speed is unknown, defaulting to 1000 [ 1210.297533][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12179'. [ 1210.396197][T14359] usb 14-1: new high-speed USB device number 25 using dummy_hcd [ 1210.479616][T17975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12180'. [ 1210.486561][T17975] bond0: entered promiscuous mode [ 1210.489366][T17975] gretap0: entered promiscuous mode [ 1210.496368][T17975] debugfs: 'hsr1' already exists in 'hsr' [ 1210.498657][T17975] Cannot create hsr debugfs directory [ 1210.500379][T17975] hsr1: entered promiscuous mode [ 1210.556774][T14359] usb 14-1: device descriptor read/64, error -71 [ 1210.641388][T17985] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12183'. [ 1210.666003][ T42] kauditd_printk_skb: 274 callbacks suppressed [ 1210.666067][ T42] audit: type=1400 audit(1142.554:47266): avc: denied { create } for pid=17984 comm="syz.2.12183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1210.688928][T17985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17985 comm=syz.2.12183 [ 1210.694209][ T42] audit: type=1400 audit(1142.564:47267): avc: denied { write } for pid=17984 comm="syz.2.12183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1210.707141][ T42] audit: type=1400 audit(1142.564:47268): avc: denied { read } for pid=17984 comm="syz.2.12183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1210.714895][ T42] audit: type=1400 audit(1142.573:47269): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=51864 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1210.757736][ T42] audit: type=1400 audit(1142.573:47270): avc: denied { ioctl } for pid=17958 comm="syz.9.12177" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1210.788691][ T42] audit: type=1400 audit(1142.667:47271): avc: denied { prog_load } for pid=17982 comm="syz.1.12182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1210.794602][ T42] audit: type=1400 audit(1142.667:47272): avc: denied { bpf } for pid=17982 comm="syz.1.12182" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1210.800981][ T42] audit: type=1400 audit(1142.667:47273): avc: denied { perfmon } for pid=17982 comm="syz.1.12182" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1210.808138][ T42] audit: type=1400 audit(1142.676:47274): avc: denied { create } for pid=17987 comm="syz.2.12184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1210.823397][T14359] usb 14-1: new high-speed USB device number 26 using dummy_hcd [ 1210.964231][T14359] usb 14-1: device descriptor read/64, error -71 [ 1210.979378][T17991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12185'. [ 1211.027712][ T42] audit: type=1400 audit(1142.891:47275): avc: denied { map_create } for pid=17992 comm="syz.1.12186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1211.082079][T14359] usb usb14-port1: attempt power cycle [ 1211.092124][T17994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17994 comm=syz.1.12186 [ 1211.117321][T17994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12186'. [ 1211.151404][ T5748] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1211.267750][T17996] netlink: zone id is out of range [ 1211.270973][T17996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1289 sclass=netlink_route_socket pid=17996 comm=syz.6.12187 [ 1211.301265][T17996] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input139 [ 1211.341800][T18001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1211.446493][T18011] netlink: 'syz.6.12192': attribute type 7 has an invalid length. [ 1211.457330][T14359] usb 14-1: new high-speed USB device number 27 using dummy_hcd [ 1211.477767][T14359] usb 14-1: device descriptor read/8, error -71 [ 1211.504967][T18017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=18017 comm=syz.1.12194 [ 1211.511547][T18017] netlink: 'syz.1.12194': attribute type 1 has an invalid length. [ 1211.514676][T18015] binder: 18014:18015 ioctl c058671e 200000001380 returned -22 [ 1211.539594][T18017] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1211.668679][T18020] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1211.672175][T18029] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1211.753083][T14359] usb 14-1: new high-speed USB device number 28 using dummy_hcd [ 1211.789211][T14359] usb 14-1: device descriptor read/8, error -71 [ 1211.903247][T14359] usb usb14-port1: unable to enumerate USB device [ 1212.225600][T18054] xt_hashlimit: size too large, truncated to 1048576 [ 1212.243628][T18055] EXT4-fs error: 26 callbacks suppressed [ 1212.243662][T18055] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:46: iget: checksum invalid [ 1212.404195][T18067] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1212.412507][T18067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1212.440855][T18067] fuse: fd is not a fuse device [ 1212.555958][T18077] netlink: 'syz.6.12210': attribute type 11 has an invalid length. [ 1212.747009][T12339] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1212.759594][T18084] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1212.769725][T18084] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1212.943139][T12339] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 1212.946545][T12339] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1212.951374][T12339] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1212.955357][T12339] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1212.958196][T12339] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1212.961081][T12339] usb 6-1: Product: syz [ 1212.962466][T12339] usb 6-1: Manufacturer: syz [ 1212.963976][T12339] usb 6-1: SerialNumber: syz [ 1212.968452][T12339] usb 6-1: config 0 descriptor?? [ 1212.977847][T12339] hub 6-1:0.0: bad descriptor, ignoring hub [ 1212.979781][T12339] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1212.991470][T12339] usb 6-1: selecting invalid altsetting 0 [ 1213.023951][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1213.028119][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1213.031960][T13578] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1213.324395][T12339] usb 6-1: USB disconnect, device number 66 [ 1213.371090][T18107] netlink: 'syz.6.12219': attribute type 11 has an invalid length. [ 1213.396022][T18106] pim6reg9: entered allmulticast mode [ 1213.409910][T18109] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm dhcpcd: iget: checksum invalid [ 1213.444506][T18111] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm dhcpcd: iget: checksum invalid [ 1213.467070][T18116] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm dhcpcd: iget: checksum invalid [ 1213.556206][T18118] syzkaller0: entered promiscuous mode [ 1213.558638][T18118] syzkaller0: entered allmulticast mode [ 1213.561425][T18122] 9pnet_virtio: no channels available for device syz [ 1213.573601][T18122] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 1213.722680][ T5748] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 1213.740453][T18130] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1213.763952][ T5748] Bluetooth: hci3: unexpected event for opcode 0x100c [ 1213.764202][T18132] netlink: 'syz.6.12228': attribute type 1 has an invalid length. [ 1213.793116][ T5143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1213.797849][ T5143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1213.801410][ T5143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1214.141930][T18158] __nla_validate_parse: 8 callbacks suppressed [ 1214.141942][T18158] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12234'. [ 1214.286642][T18162] 0xfffffffffffffffd-0x000000020000 : "" [ 1214.288603][T18162] mtd: partition "" is out of reach -- disabled [ 1214.288603][T18163] udevd[18163]: failed to execute '/lib/udev/cdrom_id' 'cdrom_id --lock-media /dev/sr0': Bad message [ 1214.305630][T18164] udevd[18164]: failed to execute '/lib/udev/ata_id' 'ata_id --export /dev/sr0': Bad message [ 1214.314134][T18162] ftl_cs: FTL header not found. [ 1214.324895][T18167] udevd[18167]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sr0': Bad message [ 1214.346365][T18168] udevd[18168]: failed to execute '/lib/udev/mtd_probe' 'mtd_probe /dev/mtd7ro': Bad message [ 1214.604671][T18191] udevd[18191]: failed to execute '/lib/udev/cdrom_id' 'cdrom_id --lock-media /dev/sr0': Bad message [ 1214.636477][T18194] udevd[18194]: failed to execute '/lib/udev/ata_id' 'ata_id --export /dev/sr0': Bad message [ 1214.637269][T18193] dvmrp0: entered allmulticast mode [ 1214.673668][T18198] udevd[18198]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sr0': Bad message [ 1215.094896][T18209] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1215.097869][T18209] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1215.178277][T18212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12249'. [ 1215.337758][T18225] sch_fq: defrate 0 ignored. [ 1215.358649][T18227] netlink: 40 bytes leftover after parsing attributes in process `syz.9.12254'. [ 1215.367430][T18227] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12254'. [ 1215.373355][T18227] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12254'. [ 1215.408651][T18230] tmpfs: Bad value for 'mpol' [ 1215.420822][T18230] input: syz1 as /devices/virtual/input/input140 [ 1215.433982][T18232] program syz.1.12256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1215.454544][T18233] netlink: 20 bytes leftover after parsing attributes in process `syz.9.12254'. [ 1215.751570][ T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 1216.046029][ T42] kauditd_printk_skb: 316 callbacks suppressed [ 1216.046043][ T42] audit: type=1400 audit(1147.580:47592): avc: denied { mount } for pid=18261 comm="syz.9.12265" name="/" dev="9p" ino=80478419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1216.056931][ T42] audit: type=1400 audit(1147.589:47593): avc: denied { read write } for pid=18261 comm="syz.9.12265" name="file1" dev="9p" ino=80478593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1216.073816][ T42] audit: type=1400 audit(1147.589:47594): avc: denied { ioctl open } for pid=18261 comm="syz.9.12265" path="/85/file0/file1" dev="9p" ino=80478593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1216.086135][ T42] audit: type=1400 audit(1147.608:47595): avc: denied { read write } for pid=18261 comm="syz.9.12265" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1216.094837][ T42] audit: type=1400 audit(1147.608:47596): avc: denied { open } for pid=18261 comm="syz.9.12265" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1216.103961][ T42] audit: type=1400 audit(1147.608:47597): avc: denied { ioctl } for pid=18261 comm="syz.9.12265" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1216.113218][ T42] audit: type=1400 audit(1147.617:47598): avc: denied { unmount } for pid=16652 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1216.255190][ T42] audit: type=1400 audit(1147.786:47599): avc: denied { create } for pid=18263 comm="syz.9.12266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1216.268111][ T42] audit: type=1400 audit(1147.786:47600): avc: denied { setopt } for pid=18263 comm="syz.9.12266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1216.284572][ T42] audit: type=1400 audit(1147.814:47601): avc: denied { read write } for pid=16652 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1216.368707][T18273] ================================================================== [ 1216.371307][T18273] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4c/0xd0 [ 1216.373799][T18273] Write of size 4 at addr ffff88802e99c708 by task syz.9.12269/18273 [ 1216.377032][T18273] [ 1216.378325][T18273] CPU: 2 UID: 0 PID: 18273 Comm: syz.9.12269 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1216.378350][T18273] Tainted: [L]=SOFTLOCKUP [ 1216.378355][T18273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1216.378385][T18273] Call Trace: [ 1216.378416][T18273] [ 1216.378422][T18273] dump_stack_lvl+0x100/0x190 [ 1216.378482][T18273] print_report+0x13d/0x4b0 [ 1216.378540][T18273] ? __virt_addr_valid+0x239/0x430 [ 1216.378577][T18273] ? try_module_get+0x4c/0xd0 [ 1216.378597][T18273] kasan_report+0xdf/0x1c0 [ 1216.378650][T18273] ? try_module_get+0x4c/0xd0 [ 1216.378672][T18273] kasan_check_range+0x10f/0x1e0 [ 1216.378689][T18273] try_module_get+0x4c/0xd0 [ 1216.378708][T18273] dvb_device_open+0x124/0x3b0 [ 1216.378897][T18273] ? __pfx_dvb_device_open+0x10/0x10 [ 1216.378911][T18273] chrdev_open+0x234/0x6a0 [ 1216.378941][T18273] ? __pfx_chrdev_open+0x10/0x10 [ 1216.378952][T18273] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1216.379043][T18273] do_dentry_open+0x6ab/0x14d0 [ 1216.379062][T18273] ? __pfx_chrdev_open+0x10/0x10 [ 1216.379077][T18273] vfs_open+0x82/0x3f0 [ 1216.379091][T18273] path_openat+0x2873/0x4280 [ 1216.379107][T18273] ? __pfx_path_openat+0x10/0x10 [ 1216.379119][T18273] do_file_open+0x20e/0x430 [ 1216.379130][T18273] ? __pfx_do_file_open+0x10/0x10 [ 1216.379150][T18273] ? alloc_fd+0x471/0x7a0 [ 1216.379162][T18273] ? do_getname+0x191/0x390 [ 1216.379175][T18273] do_sys_openat2+0x10f/0x1e0 [ 1216.379187][T18273] ? __pfx_do_sys_openat2+0x10/0x10 [ 1216.379204][T18273] __x64_sys_openat+0x12d/0x210 [ 1216.379219][T18273] ? __pfx___x64_sys_openat+0x10/0x10 [ 1216.379237][T18273] do_syscall_64+0x115/0x870 [ 1216.379420][T18273] ? clear_bhb_loop+0x40/0x90 [ 1216.379435][T18273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.379450][T18273] RIP: 0033:0x7efc06b5e68e [ 1216.379461][T18273] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1216.379475][T18273] RSP: 002b:00007efc07b19b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1216.379525][T18273] RAX: ffffffffffffffda RBX: 00007efc07b1a6c0 RCX: 00007efc06b5e68e [ 1216.379536][T18273] RDX: 0000000000000400 RSI: 00007efc07b19c00 RDI: ffffffffffffff9c [ 1216.379545][T18273] RBP: 00007efc07b19c00 R08: 0000000000000000 R09: 0000000000000000 [ 1216.379553][T18273] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1216.379562][T18273] R13: 00007efc06e26038 R14: 00007efc06e25fa0 R15: 00007ffc0cd16528 [ 1216.379575][T18273] [ 1216.379581][T18273] [ 1216.460067][T18273] Allocated by task 1: [ 1216.461772][T18273] kasan_save_stack+0x30/0x50 [ 1216.463667][T18273] kasan_save_track+0x14/0x30 [ 1216.465356][T18273] __kasan_kmalloc+0xaa/0xb0 [ 1216.466861][T18273] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1216.468700][T18273] bus_add_driver+0x92/0x5b0 [ 1216.470503][T18273] driver_register+0x1e2/0x360 [ 1216.472085][T18273] vidtv_bridge_init+0x52/0x80 [ 1216.473825][T18273] do_one_initcall+0x11d/0x700 [ 1216.475391][T18273] kernel_init_freeable+0x6ea/0x7b0 [ 1216.477121][T18273] kernel_init+0x1f/0x1e0 [ 1216.478856][T18273] ret_from_fork+0x72b/0xd50 [ 1216.480798][T18273] ret_from_fork_asm+0x1a/0x30 [ 1216.482685][T18273] [ 1216.483654][T18273] The buggy address belongs to the object at ffff88802e99c600 [ 1216.483654][T18273] which belongs to the cache kmalloc-256 of size 256 [ 1216.488770][T18273] The buggy address is located 56 bytes to the right of [ 1216.488770][T18273] allocated 208-byte region [ffff88802e99c600, ffff88802e99c6d0) [ 1216.494155][T18273] [ 1216.495098][T18273] The buggy address belongs to the physical page: [ 1216.497516][T18273] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e99c [ 1216.500828][T18273] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1216.503977][T18273] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1216.506791][T18273] page_type: f5(slab) [ 1216.508335][T18273] raw: 00fff00000000040 ffff88801bc42b40 dead000000000100 dead000000000122 [ 1216.511513][T18273] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1216.514667][T18273] head: 00fff00000000040 ffff88801bc42b40 dead000000000100 dead000000000122 [ 1216.518070][T18273] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1216.521401][T18273] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 1216.524734][T18273] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1216.528038][T18273] page dumped because: kasan: bad access detected [ 1216.530475][T18273] page_owner tracks the page as allocated [ 1216.532630][T18273] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14461717339, free_ts 0 [ 1216.539849][T18273] post_alloc_hook+0xfd/0x120 [ 1216.541425][T18273] get_page_from_freelist+0xf48/0x3530 [ 1216.543205][T18273] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1216.545086][T18273] new_slab+0xa2/0x650 [ 1216.546386][T18273] refill_objects+0xe3/0x410 [ 1216.547853][T18273] __pcs_replace_empty_main+0x376/0x680 [ 1216.549590][T18273] __kmalloc_cache_noprof+0x479/0x6c0 [ 1216.551572][T18273] bus_add_driver+0x92/0x5b0 [ 1216.553354][T18273] driver_register+0x1e2/0x360 [ 1216.555165][T18273] usb_register_driver+0x21c/0x3e0 [ 1216.557216][T18273] do_one_initcall+0x11d/0x700 [ 1216.559000][T18273] kernel_init_freeable+0x6ea/0x7b0 [ 1216.560961][T18273] kernel_init+0x1f/0x1e0 [ 1216.562597][T18273] ret_from_fork+0x72b/0xd50 [ 1216.564366][T18273] ret_from_fork_asm+0x1a/0x30 [ 1216.566180][T18273] page_owner free stack trace missing [ 1216.568197][T18273] [ 1216.569120][T18273] Memory state around the buggy address: [ 1216.571223][T18273] ffff88802e99c600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1216.574207][T18273] ffff88802e99c680: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 1216.577219][T18273] >ffff88802e99c700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1216.580210][T18273] ^ [ 1216.581845][T18273] ffff88802e99c780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1216.584854][T18273] ffff88802e99c800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1216.587841][T18273] ================================================================== Jan 1 00:19:08 syzkaller kern.alert kernel: [ 1216.530475][T18273] page_owner tracks the page as allocated Jan 1 00:19:08 syzkaller kern.alert kernel: [ 1216.532630][T18273] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14461717339, free_ts 0 Jan 1 00:19:08 syzkaller kern.alert kernel: [ 1216.566180][T18273] page_owner free stack trace missing [ 1216.643455][T18273] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1216.645736][T18273] CPU: 0 UID: 0 PID: 18273 Comm: syz.9.12269 Tainted: G L syzkaller #0 PREEMPT(full) [ 1216.649592][T18273] Tainted: [L]=SOFTLOCKUP [ 1216.651265][T18273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1216.655118][T18273] Call Trace: [ 1216.656441][T18273] [ 1216.657591][T18273] dump_stack_lvl+0x100/0x190 [ 1216.659432][T18273] vpanic+0x552/0x970 [ 1216.660985][T18273] ? __pfx_vpanic+0x10/0x10 [ 1216.662695][T18273] ? mark_held_locks+0x40/0x70 [ 1216.664554][T18273] ? try_module_get+0x4c/0xd0 [ 1216.666338][T18273] panic+0xd1/0xe0 [ 1216.667780][T18273] ? __pfx_panic+0x10/0x10 [ 1216.669470][T18273] ? try_module_get+0x4c/0xd0 [ 1216.671600][T18273] ? preempt_schedule_common+0x42/0xc0 [ 1216.673687][T18273] check_panic_on_warn.cold+0x19/0x34 [ 1216.675744][T18273] end_report.part.0+0x3a/0x90 [ 1216.677583][T18273] kasan_report.cold+0xe/0x18 [ 1216.679404][T18273] ? try_module_get+0x4c/0xd0 [ 1216.681173][T18273] kasan_check_range+0x10f/0x1e0 [ 1216.682800][T18273] try_module_get+0x4c/0xd0 [ 1216.684255][T18273] dvb_device_open+0x124/0x3b0 [ 1216.685747][T18273] ? __pfx_dvb_device_open+0x10/0x10 [ 1216.687410][T18273] chrdev_open+0x234/0x6a0 [ 1216.688802][T18273] ? __pfx_chrdev_open+0x10/0x10 [ 1216.690367][T18273] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1216.692400][T18273] do_dentry_open+0x6ab/0x14d0 [ 1216.693910][T18273] ? __pfx_chrdev_open+0x10/0x10 [ 1216.695468][T18273] vfs_open+0x82/0x3f0 [ 1216.696761][T18273] path_openat+0x2873/0x4280 [ 1216.698211][T18273] ? __pfx_path_openat+0x10/0x10 [ 1216.699764][T18273] do_file_open+0x20e/0x430 [ 1216.701189][T18273] ? __pfx_do_file_open+0x10/0x10 [ 1216.702775][T18273] ? alloc_fd+0x471/0x7a0 [ 1216.704134][T18273] ? do_getname+0x191/0x390 [ 1216.705564][T18273] do_sys_openat2+0x10f/0x1e0 [ 1216.707041][T18273] ? __pfx_do_sys_openat2+0x10/0x10 [ 1216.708666][T18273] __x64_sys_openat+0x12d/0x210 [ 1216.710189][T18273] ? __pfx___x64_sys_openat+0x10/0x10 [ 1216.711861][T18273] do_syscall_64+0x115/0x870 [ 1216.713333][T18273] ? clear_bhb_loop+0x40/0x90 [ 1216.714801][T18273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.716649][T18273] RIP: 0033:0x7efc06b5e68e [ 1216.718041][T18273] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1216.723935][T18273] RSP: 002b:00007efc07b19b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1216.726561][T18273] RAX: ffffffffffffffda RBX: 00007efc07b1a6c0 RCX: 00007efc06b5e68e [ 1216.729367][T18273] RDX: 0000000000000400 RSI: 00007efc07b19c00 RDI: ffffffffffffff9c [ 1216.732415][T18273] RBP: 00007efc07b19c00 R08: 0000000000000000 R09: 0000000000000000 [ 1216.735471][T18273] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1216.738519][T18273] R13: 00007efc06e26038 R14: 00007efc06e25fa0 R15: 00007ffc0cd16528 [ 1216.741563][T18273] [ 1216.743608][T18273] Kernel Offset: disabled [ 1216.745246][T18273] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:46:15 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc9003858c000 RCX=0000000000334589 RDX=0000000020002000 RSI=0000000000000000 RDI=fffff5201a39d580 RBP=0000000100010000 RSP=ffffc9000312f840 R8 =0000000000000006 R9 =0000000000000000 R10=fffff520070b1800 R11=0000000000000000 R12=0000000000000000 R13=0000000100010000 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff8bb96613 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007faab2c046c0 ffffffff 00c00000 GS =0000 ffff8880d5de8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efc07b19ff8 CR3=00000000408a9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=000000008802fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 37656c69662f3165 6c69662f3236342f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffddb991de6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffddb991de6 00007ffddb991dec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff449234452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff449234492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff4492345f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff449234484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88803d281c70 RCX=ffffffff898d2364 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc900031af4f8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000010 R11=0000000000000000 R12=0000000000000000 R13=ffff8880274d6812 R14=ffff88803d281cf4 R15=ffff888022e06000 RIP=ffffffff8209d6b8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f98eb951300 ffffffff 00c00000 GS =0000 ffff8880d5ee8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055717eedb000 CR3=0000000038d72000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000086 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002ff3 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffeb08 0003000800061000 201000060074ce0e 0000022c00000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040122a204100007 8004010000040806 06010181c4101000 07b003fec099affb ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0cad861008068003 06800407a0031010 00079003030ebe1b ab34955610080480 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0304800407800310 1000088004010000 040806060159aa00 1000000800040404 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fe21818010000020 8080809000000406 0278ec002364626e 2f7665642f01ffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03000000ffffffd2 03000000ffffffca 03000000ffffffc2 03000000ffffffba ZMM25=c98846c3c98846c3 c98846c3c98846c3 c98846c3c98846c3 c98846c3c98846c3 c98846c3c98846c3 c98846c3c98846c3 c98846c3c98846c3 c98846c3c98846c3 ZMM26=b79f6594b79f6594 b79f6594b79f6594 b79f6594b79f6594 b79f6594b79f6594 b79f6594b79f6594 b79f6594b79f6594 b79f6594b79f6594 b79f6594b79f6594 ZMM27=9df78eb49df78eb4 9df78eb49df78eb4 9df78eb49df78eb4 9df78eb49df78eb4 9df78eb49df78eb4 9df78eb49df78eb4 9df78eb49df78eb4 9df78eb49df78eb4 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e4330000e4330000 e4330000e4330000 e4330000e4330000 e4330000e4330000 e4330000e4330000 e4330000e4330000 e4330000e4330000 e4330000e4330000 info registers vcpu 2 CPU#2 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a294e5 RDI=ffffffff9b9fbb40 RBP=ffffffff9b9fbb00 RSP=ffffc9000421f2c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6532303838387257 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9b6ee1f0 R15=ffffffff85a29480 RIP=ffffffff85a2950f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007efc07b1a6c0 ffffffff 00c00000 GS =0000 ffff8880d5fe8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efc06b87480 CR3=000000010f94b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0cd16a16 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0cd16a16 00007ffc0cd16a1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc06c34452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc06c34492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc06c345f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc06c34484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc06df05f8 00007efc06df05c8 00007efc06df0600 00007efc06df05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000009bca2f RBX=ffff88801eeca540 RCX=ffffffff8bb952d5 RDX=0000000000000000 RSI=ffffffff8e1a3c59 RDI=ffffffff8c400f80 RBP=ffffed1003dd94a8 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4e678d R10=ffff88806a733c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bb9389f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60e8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efc04df5ff8 CR3=0000000062daa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000010100 Opmask02=00000000fefcf000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7461706d6f636e69 2f6b726f772f7375 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc33f41946 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc33f41946 00007ffc33f4194c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f4de34452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f4de34492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f4de345f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f4de34484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000038 0000000000000001 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000