last executing test programs: 3m29.44821945s ago: executing program 32 (id=972): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x8000, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f00000002c0)=0xffffffffffffff01, 0x8) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="5a7af70000000000000d00", 0xb) accept4(r0, 0x0, 0x0, 0x800) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x7) epoll_create1(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x2000000, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008001600c053000018000180140002006e657464657673696d3000000000000008001700365e0000080015"], 0x44}}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) r7 = io_uring_setup(0x6002, &(0x7f0000000140)={0x0, 0xa41, 0x40, 0x1, 0x26f}) close_range(r7, r7, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dfd, 0xfffffffffffffffe}}}, 0x90) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x59401, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_SET_SREGS2(r12, 0x4140aecd, &(0x7f00000003c0)={{0x54000, 0x54000, 0x3, 0x6e, 0x5b, 0xc, 0x4, 0x0, 0x0, 0x27, 0x5, 0x4}, {0x1, 0x40000, 0xf, 0x0, 0x6, 0x0, 0x6, 0x1, 0x6, 0x2, 0x58, 0x6}, {0x8000000, 0x100000, 0x8, 0xa7, 0x5, 0xb9, 0x63, 0x3, 0x7, 0xf5, 0xb, 0xc}, {0x1, 0x70000, 0xb, 0xfe, 0x5, 0x4, 0x1, 0xa8, 0x3f, 0x47, 0x82, 0x9}, {0xeeeeffff, 0xfec00000, 0x4, 0x5, 0x53, 0x3f, 0x80, 0x0, 0x78, 0x0, 0x90, 0x9}, {0x50000, 0x70000, 0xd, 0x7, 0x1, 0xb, 0x3, 0x9, 0x3, 0xff, 0x9, 0x7}, {0x25000, 0x2000, 0xb, 0x5, 0x7f, 0x81, 0xc, 0x81, 0x4, 0x9, 0x8e, 0x6a}, {0x30000, 0x5000, 0x0, 0x3, 0x9, 0x8, 0x9, 0x4, 0xfc, 0x1, 0x7, 0x85}, {0x6000, 0x8}, {0x2000, 0xd}, 0xe0010009, 0x0, 0x6000, 0x10000, 0x6, 0x800, 0x70000, 0x0, [0xcbf, 0x7, 0x0, 0x5]}) ioctl$TCSETA(r3, 0x8925, &(0x7f0000000100)) openat$cdrom(0xffffffffffffff9c, &(0x7f0000001480), 0x6a00, 0x0) 3m19.095488598s ago: executing program 33 (id=1181): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) (async) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xa9525000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r3, &(0x7f0000001440)=""/123, 0x7b, 0x841) (async, rerun: 64) r4 = getpid() (rerun: 64) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x3b, 0x0, @tid=r4}, &(0x7f0000000140)) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000005c0)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 3m6.318123348s ago: executing program 5 (id=1354): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffffffffcfd9, 0xa080) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x8a881, 0xbb) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r6, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r8, &(0x7f00000002c0)="00b543c263", 0x5, 0x2004c811, &(0x7f0000000140)={0xa, 0x4e23, 0xffffffff, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000400)=ANY=[], 0xd7) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r7, 0x0) 3m5.432908718s ago: executing program 5 (id=1369): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x0, 0x0) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=""/244, 0xf4}], 0x1) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[], 0x28}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x124, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@TCA_STAB={0x100, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x2, 0x9, 0x5, 0x2, 0x9, 0x7fff, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x11, 0x7, 0x7f, 0x3, 0x1, 0xe, 0x9, 0x3}}, {0xa, 0x2, [0x7, 0x9, 0xa7a]}}, {{0x1c, 0x1, {0xf, 0x7, 0x6, 0xb5, 0x1, 0xff, 0x3, 0x6}}, {0x10, 0x2, [0x10, 0x1, 0x4, 0xf0, 0x0, 0x5]}}, {{0x1c, 0x1, {0x8, 0x2, 0x8, 0x5, 0x0, 0x0, 0x2, 0x7}}, {0x12, 0x2, [0x280, 0x400, 0x3, 0x0, 0x9, 0x8, 0x3]}}, {{0x1c, 0x1, {0x2, 0x2, 0x9, 0x6, 0x3, 0x6, 0x2, 0x6}}, {0x10, 0x2, [0x2, 0x2, 0x7f, 0x9, 0x6, 0x800]}}, {{0x1c, 0x1, {0x2, 0x50, 0x3, 0x3, 0x2, 0x7fffffff, 0x2, 0x4}}, {0xc, 0x2, [0x2, 0x6, 0x2f5, 0x4]}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x15, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x30, 0x5}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x15, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x30, 0x5}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x78bf, 0x0, 0x40202, 0x100039, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000000500)) (async) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x78bf, 0x0, 0x40202, 0x100039, 0x0, r3}, &(0x7f00000002c0)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4260a122fc297053, &(0x7f0000000280)=0xefefffd8, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x11, 0x3, 0x8) (async) r10 = socket(0x11, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@deltclass={0x9c, 0x29, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x3, 0xffff}, {}, {0xfff8, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xa}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_qfq={{0x8}, {0x2c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x7}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_LMAX={0x8, 0x2, 0xe}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_LMAX={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x9}}, @TCA_RATE={0x6, 0x5, {0xe, 0x9}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x81, 0xe}}, @TCA_RATE={0x6, 0x5, {0x2, 0x97}}, @TCA_RATE={0x6, 0x5, {0x7b}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040054) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r13 = fanotify_init(0x4, 0x40000) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r13, 0x40049366, &(0x7f00000001c0)=0x2) write$UHID_CREATE2(r12, &(0x7f0000000180)=ANY=[], 0x118) (async) write$UHID_CREATE2(r12, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r12, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000680)=@IORING_OP_ASYNC_CANCEL={0xe, 0x8}) 3m5.304681837s ago: executing program 5 (id=1370): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x7c}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x8c, 0xd0, 0x0, 0x8}, {0xff01, 0x5c, 0x2}]}) 3m4.396703872s ago: executing program 5 (id=1374): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r0 = socket$qrtr(0x2a, 0x2, 0x0) (async, rerun: 32) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000006c0)={0xc, {{0x2, 0x4e23, @private=0xa010102}}, {{0x2, 0x0, @local}}}, 0x108) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f0000000080)=""/26, &(0x7f0000000100)=0x1a) (async) sendmsg$sock(r0, &(0x7f0000000040)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'team_slave_0\x00'}}, 0x80, 0x0}, 0x200800c4) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000)) (async) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r4, &(0x7f0000000240)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x200010, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]}) (rerun: 64) 3m3.946622788s ago: executing program 5 (id=1381): r0 = io_uring_setup(0x67bb, &(0x7f0000000300)={0x0, 0x4, 0x0, 0xffffffed}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000003c0)={0x1, 0x1, 0x0, &(0x7f0000000300)=[{0x0}], 0x0}, 0x20) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x10, 0x8003, 0x25f, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[r1], 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x4c, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3dd3c2d1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xa28}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000a00000500150003000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000f00), 0x802, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r5}, './file0/file1\x00'}) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) io_uring_setup(0x67bb, &(0x7f0000000300)={0x0, 0x4, 0x0, 0xffffffed}) (async) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000003c0)={0x1, 0x1, 0x0, &(0x7f0000000300)=[{0x0}], 0x0}, 0x20) (async) syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x10, 0x8003, 0x25f, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000200)) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[r1], 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x4c, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3dd3c2d1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xa28}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000a00000500150003000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000f00), 0x802, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r5}, './file0/file1\x00'}) (async) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) (async) 3m2.974913832s ago: executing program 5 (id=1384): mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='gfs2\x00', 0x6040d8, &(0x7f00000001c0)='discard') 3m2.882012012s ago: executing program 34 (id=1384): mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='gfs2\x00', 0x6040d8, &(0x7f00000001c0)='discard') 2m54.954744329s ago: executing program 3 (id=1484): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000d0429be7000fcdbdf25f300f385", @ANYRES32=0x0, @ANYBLOB="1000000000000000200012800b000100627269646765"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x76}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x36}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8009) 2m54.900311747s ago: executing program 3 (id=1486): madvise(&(0x7f00004ba000/0x2000)=nil, 0x2000, 0xc) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0xc0068000, 0x0, 0xfd6c, 0x0, 0x0, 0x0) (async, rerun: 32) setuid(0xee01) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r3 = getpgid(0x0) (rerun: 32) ptrace(0xffffffffffffffff, r0) (async) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x0, r3}) (async) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1) r4 = userfaultfd(0x80001) io_uring_setup(0x51d2, &(0x7f0000000140)={0x0, 0x3957, 0x1006, 0x6, 0x402d5}) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c}) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 64) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000100000000000000041508000000000010000000000000002000050000076570"], 0x24, 0x2) (async, rerun: 64) rmdir(&(0x7f0000000000)='./file0\x00') setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000240)={0x9, 0xfffffffe, 0x820, 0x1}, 0xfffffcef) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000140)=0xa, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x4) (async) write(r5, &(0x7f00000000c0)="1b0000001e005f025145e9676a2cbf0dffffffff01000000000000", 0x1b) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 2m54.50583258s ago: executing program 3 (id=1488): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) shutdown(r0, 0x1) recvfrom$inet(r0, 0x0, 0x0, 0x40000020, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000001000010427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000180c20000000000140012800b0001006c6f7770616e"], 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m54.504503244s ago: executing program 3 (id=1489): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0xa2) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r2}, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) ioctl$HIDIOCGUSAGES(r4, 0xd01c4813, &(0x7f0000001340)={{0x2, 0xffffffff, 0xfffffffa, 0x8, 0xff, 0x7}, 0xeb, [0x2, 0xd, 0x5, 0x7, 0x0, 0x5e6, 0x9, 0xf29, 0x40, 0x400, 0xe, 0x3, 0x3, 0xffff, 0xefd, 0x6, 0x2, 0xe, 0xfffffffb, 0x9, 0x81, 0x5, 0x7fff, 0x73, 0x4, 0x20000, 0x7fff, 0xfffffffe, 0x3, 0x3, 0x80000000, 0x81, 0x3, 0xb2, 0x10001, 0x0, 0x3, 0x0, 0x5, 0xfffffb23, 0x80000000, 0x682, 0x9, 0xf, 0x5, 0xb68, 0x1020, 0x18, 0x3, 0x7, 0x65, 0x3, 0xffffffff, 0xfd, 0x9, 0xf47, 0x3, 0x6, 0x6, 0xe, 0xb49f, 0x3, 0x0, 0x0, 0x2, 0x5de, 0x4, 0x9, 0x6, 0x9b, 0x8001, 0x0, 0x6a17, 0xfffffffc, 0x7, 0x5, 0x3, 0x7fffffff, 0x1000, 0x7, 0x500000, 0x5, 0x100, 0x401, 0x8, 0x48000000, 0xf70, 0x5, 0x6000000, 0x0, 0x7, 0x5, 0x824, 0x9, 0x3, 0x1, 0x80000001, 0x6, 0x0, 0x800, 0x7, 0x6, 0x200, 0x3, 0x7, 0x0, 0x80, 0xa4, 0x0, 0xfd, 0xfffffffc, 0x7, 0xcfd, 0x4, 0x7, 0x4, 0x8, 0x7f, 0x6000, 0x0, 0x4862, 0x5d8, 0x2, 0xfffffffb, 0x10000, 0x1, 0x10, 0x5, 0x2e09, 0x8, 0xe5a2, 0x1f5, 0x3, 0x6, 0x4, 0x6db0, 0x0, 0x9, 0x10000, 0x59, 0x7, 0xa21e, 0xf611, 0x6, 0x0, 0x1, 0x3, 0xfffffffa, 0x35afdd52, 0xd488, 0x8, 0x0, 0xd728, 0xa72, 0x7, 0x9, 0xfffffc01, 0x8, 0x7, 0x5, 0x2, 0x1, 0x7, 0x3, 0x7f, 0x5, 0x400, 0x6000000, 0x4, 0x7, 0xf, 0xa750, 0x5, 0xfffff801, 0x6, 0x5, 0x3, 0x5, 0x8001, 0x0, 0x4, 0xa, 0x6, 0x5, 0x660, 0x8, 0x3ff, 0x1, 0xffffffff, 0xfffff5db, 0x8000, 0xb4, 0x7ff, 0x1, 0x5, 0x3, 0x3, 0xd, 0x2, 0x4, 0x6, 0x1, 0x2, 0x40, 0x8, 0x3, 0xffffb486, 0x9, 0x3, 0x7, 0x8, 0x6, 0x5, 0xffff, 0x0, 0xfffffdb9, 0x4, 0x6b6, 0xffff, 0x3, 0x8, 0x7fff, 0x81, 0x2, 0x6, 0x7fffffff, 0xd, 0x9, 0x6, 0x55, 0x1, 0x0, 0x4, 0xffffffff, 0x7fff, 0xfec, 0x401, 0x1, 0x8, 0xd485, 0x6, 0x0, 0xab, 0x10, 0x40, 0x3, 0x2, 0x7f, 0x3416, 0x2, 0x9, 0x6, 0xffffffff, 0x7fffffff, 0x0, 0x9, 0x6, 0x35dabc62, 0xfffffffd, 0x8a, 0x5, 0x3, 0x6, 0x5, 0x9, 0x3, 0xfd08, 0x5, 0x1, 0xfffffff8, 0x8, 0x400, 0x3, 0x3, 0xe00, 0x8, 0x800, 0x0, 0x9, 0x2, 0x5, 0x4, 0x9, 0xffff36c5, 0x7fff, 0x4, 0x5, 0xb90, 0xfcfd, 0x6, 0x6, 0x6f, 0x7, 0x2, 0x5, 0x8, 0xfffffffd, 0x6, 0x9, 0x2, 0x4, 0x7fffffff, 0x3, 0x0, 0x2, 0x8000, 0xfa1, 0x8000, 0xfffffff5, 0x5, 0x8, 0x9, 0x5, 0x5, 0xffffff37, 0x8, 0x9, 0x4, 0x8000, 0x7, 0x9, 0x0, 0x4, 0x1ff, 0x4, 0x0, 0x4, 0xd0, 0xfffffff9, 0x2, 0x1, 0x4, 0x200, 0x2, 0x101, 0x6, 0x1, 0x8, 0x80, 0x1, 0x800, 0xe87, 0xc11, 0xdc, 0xd, 0x7, 0x80000000, 0x9, 0x1ff, 0x4, 0x18e, 0x5, 0x1, 0xd, 0x265a, 0x7f, 0x8, 0x9, 0x9, 0x4, 0x6, 0xfff, 0x0, 0x80000000, 0xffffffff, 0x4, 0x9, 0x9, 0x2, 0xfff, 0x15, 0x3, 0x8, 0xa1, 0x3, 0xf, 0x48, 0x3, 0x400, 0x1, 0x1, 0x9, 0x4, 0x10000, 0x9, 0xfffffffe, 0x2, 0x8, 0x9, 0x4b, 0x4, 0x7, 0x4, 0x1, 0x6, 0x400, 0x9, 0x4, 0x4, 0x3, 0x80000001, 0x0, 0x3f, 0x8, 0x4000, 0x3, 0x1, 0x8001, 0xa, 0x2, 0x445a, 0x100, 0xd, 0x0, 0x100, 0x7fffffff, 0xa121, 0x9, 0x5, 0x0, 0x2, 0x5, 0x58b2, 0x8, 0x5, 0x0, 0x800, 0x5, 0xfb, 0x8, 0xf3, 0x1, 0x2, 0x7, 0x10001, 0x6, 0x2, 0x5, 0x0, 0xe70, 0xdd1d, 0x3, 0x5, 0x9, 0x9, 0x0, 0xffffffff, 0xac3, 0x0, 0x80000000, 0x5, 0xfffffffa, 0x1000, 0x0, 0xffff9ef2, 0x7, 0xffff, 0x5, 0x3, 0xc, 0x101, 0xf6f, 0x2, 0x7ff, 0x0, 0x0, 0x3ff, 0xfffff450, 0x3, 0x9, 0x4, 0xe46, 0x200, 0x4, 0x7, 0x8aa3, 0x5, 0x3, 0x8, 0xaf, 0x6, 0xffffffff, 0xe, 0x5, 0xeb, 0x3, 0x7fff, 0x8, 0x0, 0x7, 0x7, 0x4, 0xab4, 0x4, 0xfffffffe, 0x10, 0x9, 0x2, 0x2, 0x1, 0x8, 0xe0, 0x80, 0x7, 0x7ff, 0x9, 0xd6, 0x5, 0x8, 0x5, 0x542, 0x4, 0x3, 0x5, 0x7, 0x7, 0x85, 0x5, 0x10, 0x81, 0xcf, 0xc8, 0x1, 0x8154, 0x61, 0x81, 0xb9, 0x2, 0x22, 0xfffffffd, 0xff, 0x0, 0x7, 0x5, 0x4, 0x4, 0xf, 0x1000, 0x5, 0x4, 0x0, 0xea4, 0x0, 0x3, 0x1, 0x2, 0xffff512b, 0x6, 0x3, 0x7, 0x1, 0x3, 0xfff, 0x7fffffff, 0xb, 0x8, 0x2, 0x3, 0x4, 0xd, 0x80, 0x8, 0x2, 0x8, 0x8001, 0x4, 0x342, 0x1, 0x3, 0x5, 0x740d, 0xfffffffc, 0x5bc9510c, 0x8000, 0x10, 0x9, 0x3, 0x2, 0x9, 0x8, 0x6, 0x800, 0x7b12, 0x8, 0x3, 0x3, 0x5, 0x3, 0x74, 0x0, 0x3, 0xfffffffa, 0x10001, 0x0, 0x3, 0x3, 0x7, 0x8, 0x8000, 0x5, 0x97, 0x10001, 0x7, 0x47b, 0x9, 0x0, 0x7, 0x4, 0xffffffff, 0x8000000, 0xfffff8bf, 0x71, 0x1, 0x10001, 0x0, 0x0, 0x350c, 0x3, 0x8, 0x2, 0x5, 0x0, 0x2, 0x9a5, 0xe, 0x58, 0x9, 0x8, 0x3, 0xfffffff8, 0x4, 0x1, 0x7f, 0xbe, 0x7f, 0x7, 0x733e, 0xa574, 0x5, 0x5, 0x1, 0xf91, 0xffffffff, 0x6, 0x2, 0xa0, 0xfd, 0x1, 0xd, 0x10, 0x3, 0x7, 0x2, 0x9, 0x3, 0xfff, 0x5, 0xa2e, 0x7fffffff, 0xffffffff, 0xffffffc0, 0x7, 0x2, 0x7, 0x1ff, 0xd17, 0x3, 0xc55e, 0x4, 0x8, 0xd, 0x9, 0x4, 0xeb0, 0x7fff, 0xb70b, 0x3, 0x4, 0x400000, 0x10, 0x2, 0xfffffffb, 0x8, 0x2, 0x1, 0x1, 0x8, 0x2, 0x2, 0x800, 0x6, 0x7, 0x5, 0x81, 0x8000, 0x400, 0x800, 0x5, 0x2, 0xff, 0x2, 0x8001, 0x2, 0xf4, 0x100, 0x6, 0x9, 0x37f, 0x2, 0x8, 0x2, 0x7ff, 0x2, 0x0, 0x8, 0xf41, 0x2, 0x7fffffff, 0x9, 0x2516, 0x0, 0x400, 0x6, 0x3, 0x0, 0x9, 0x3a9d, 0x8001, 0x3, 0xffffff0b, 0x6, 0x2, 0x6, 0x5, 0x4, 0x6, 0x3, 0x4, 0x1, 0x4, 0x2, 0xff, 0x3, 0x9, 0x3, 0x6, 0x4, 0x4, 0xfffffffa, 0x0, 0xe32, 0x9, 0x7, 0x10000, 0xc, 0x41, 0x2, 0x0, 0x5, 0x20, 0x4, 0x2800000, 0x2, 0xd, 0x3, 0x8, 0x0, 0x6, 0xe, 0x10001, 0x5, 0x4, 0xdb3, 0x3, 0xccd5, 0x0, 0x7fff, 0xffff8272, 0x8, 0xdf1, 0x6, 0xfffffffc, 0x7, 0x1, 0xfffffff5, 0xfff, 0x1, 0x8cc, 0x3, 0x3, 0x80000000, 0x400, 0x6, 0x7, 0x8, 0x7, 0x0, 0x7f, 0x4, 0x7, 0x8, 0xfffffffa, 0x1, 0x9, 0x4, 0xa, 0xfffff000, 0x357a, 0xf01, 0x20000000, 0xe4, 0x2, 0x9, 0x9, 0x14000, 0xffff, 0x99, 0x8, 0x0, 0x401, 0x3, 0x401, 0x3, 0x83, 0x8, 0xc, 0x5, 0x7, 0x1e2b96b4, 0xff, 0x7, 0x0, 0x8, 0x8, 0x7, 0x9, 0x7, 0x8, 0xfffffffa, 0x8, 0x1, 0xc31, 0xa, 0x2, 0xb5d, 0x1, 0x7f, 0x10, 0x4, 0x129b0ebf, 0x9, 0x4, 0xfffffffb, 0x100, 0x8001, 0x1, 0x3ff, 0x5, 0x2522d0c3, 0x9, 0x0, 0x8001, 0x7, 0x17e00000, 0x4, 0x5, 0x4, 0x5f, 0x6, 0x1, 0x6, 0x8, 0x401, 0x7, 0x5, 0x6, 0x4, 0xfffffffa, 0x8, 0x24, 0xffffffff, 0xffffffff, 0x2, 0x6, 0x9, 0x6, 0x6, 0x2, 0x1, 0xac, 0xe923, 0x7, 0x1, 0x262, 0x18, 0x3, 0x7, 0x3, 0x4, 0x7, 0x9, 0x401, 0x7, 0x9, 0x142, 0x7, 0x10, 0x9, 0x0, 0x0, 0x4, 0x0, 0x701, 0x9, 0x3, 0xfffffff8, 0xe7, 0x400, 0x2, 0x9, 0x4, 0x1, 0x1, 0x4, 0x4, 0xfffffffc, 0x619f, 0x2, 0x5, 0x9, 0x8, 0x8, 0xffff0000, 0x6, 0x0, 0x10, 0xb, 0x10, 0x6, 0xff, 0x8, 0x6, 0x2, 0x3, 0x6be0, 0x0, 0x5eeb, 0x5, 0x7f, 0x10000, 0x9, 0x4, 0x3, 0x3c6d4c5f, 0x9, 0x401, 0x0, 0x6, 0x6, 0x3, 0x6, 0x4, 0x7, 0xffff2214, 0xb5a, 0x4, 0x6, 0xd, 0x800, 0x3, 0xd5a, 0x8001, 0x8001, 0x7, 0x9c15, 0x5, 0x5, 0x10000, 0x10, 0x8000, 0xbc0, 0x10001, 0x9, 0x2, 0x5, 0x4, 0xff, 0x7, 0x1, 0x313, 0x5, 0x4, 0x5, 0x0, 0x4, 0xffff8000, 0x4, 0x80000001, 0x6, 0x146e, 0x5, 0x100, 0xffff0000, 0x3, 0x8, 0x6, 0x5f5, 0xfffffff8, 0xc48, 0x81, 0x9, 0x7fffffff, 0x9, 0x9, 0x6f3, 0x8284, 0x0, 0x7d00, 0x0, 0xfffffff9, 0xffffffff, 0xe, 0x3, 0x7]}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000340)={{r4}, 0x0, 0x2, @unused=[0x10, 0x2, 0x8001, 0x2], @subvolid=0x8}) 2m53.543861492s ago: executing program 3 (id=1495): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0xcf7, 0x2) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f0000000100)={0x0, 0x6}) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r5 = dup3(r3, r2, 0x0) recvmmsg$unix(r5, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r5, 0x4068aea3, &(0x7f0000000340)={0x80, 0x0, 0x7}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xa) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x4800, 0x55007}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vti={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x0, 0x4, @empty}, @IFLA_VTI_LOCAL={0x0, 0x4, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x0, 0x3, 0xd8f}, @IFLA_VTI_FWMARK={0x0, 0x6, 0x7}, @IFLA_VTI_OKEY={0x0, 0x3, 0x1200}]]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x44801) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2m53.062919961s ago: executing program 3 (id=1501): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (rerun: 32) r2 = accept4(r1, 0x0, 0x0, 0x80800) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x97, 0x9, 0x821d, 0xf3, 0x0, 0x0, 0x200, 0x3, 0x0}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000003c0)={r3, 0x1}, &(0x7f0000000400)=0x8) (async) sendmmsg$unix(r2, &(0x7f000000c880)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)="f0a31932", 0x4}], 0x1, 0x0, 0x0, 0x20008848}}], 0x1, 0xc000) (async) accept4(r2, 0x0, 0x0, 0x80000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) creat(&(0x7f0000000340)='./file0\x00', 0x0) (async, rerun: 64) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000000)) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000b0ff00000000000000000000181100003537540a984484e0ddc9e2371076339cc679f6cac69748505e0162620f8025d085c16d32cd0c198222372f86362025b656fe0c9b3b9e2d2123a41589", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m53.000924468s ago: executing program 35 (id=1501): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (rerun: 32) r2 = accept4(r1, 0x0, 0x0, 0x80800) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x97, 0x9, 0x821d, 0xf3, 0x0, 0x0, 0x200, 0x3, 0x0}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000003c0)={r3, 0x1}, &(0x7f0000000400)=0x8) (async) sendmmsg$unix(r2, &(0x7f000000c880)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)="f0a31932", 0x4}], 0x1, 0x0, 0x0, 0x20008848}}], 0x1, 0xc000) (async) accept4(r2, 0x0, 0x0, 0x80000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) creat(&(0x7f0000000340)='./file0\x00', 0x0) (async, rerun: 64) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000000)) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000b0ff00000000000000000000181100003537540a984484e0ddc9e2371076339cc679f6cac69748505e0162620f8025d085c16d32cd0c198222372f86362025b656fe0c9b3b9e2d2123a41589", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m50.668720536s ago: executing program 7 (id=2276): r0 = socket(0x21, 0x2, 0x10000000000002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) r5 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r10, &(0x7f0000000a80)="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", &(0x7f0000000900)=@buf="44647cc7f339799bceca94a33dadad1d04e6083d2d308024e03a63a31659c5b2c5406ee3368575795a01460658c6df514d24df5dff7780a660e7d7c5c3c487d6289ddee0a926c3426b7f145dc74766df522c50adddd690f8cb47c41adfb2fdc280f6"}, 0x20) recvmmsg(r9, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x12020, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x1c, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFACCT_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) sendmsg$NFNL_MSG_ACCT_DEL(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x1c, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFACCT_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r8, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r11) sendmsg$IEEE802154_LLSEC_SETPARAMS(r11, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x30, r12, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x880) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r11, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x30, r12, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r1, @ANYBLOB="010700000000040000001600000008000300", @ANYRESDEC=0x0], 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r1, @ANYBLOB="010700000000040000001600000008000300", @ANYRESDEC=0x0], 0x1c}}, 0x0) io_uring_enter(r5, 0x71ed, 0xdb0a, 0x10, &(0x7f0000000380)={[0xf3df]}, 0x8) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="000400030000000300"/20], 0x20}, 0x1, 0x0, 0x0, 0x54}, 0x8810) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="000400030000000300"/20], 0x20}, 0x1, 0x0, 0x0, 0x54}, 0x8810) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x54, &(0x7f0000005fc0)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="d53e58a3b5bc43967f3e0631d75ceb01b672b9407e3a03a54a9cf6f2a0a9a71fab47a4c9cc8ccb80c5b44c74e6b60ddc5b09d356393181f49a4dd47e63c86362e606c26f17adcb021a3ebac87838080731", @ANYRESHEX=r1, @ANYRES32=r4, @ANYRESOCT=r3, @ANYBLOB="6aaca7627f3a2f0455d64bb3d8584a7d02468ef440ae62e0fde61be4907876e3819c3960def1e1a220aaa41492640f035d481f702645cc831486a725e4d07fe002cd393ed47bfad63d1b86c52f9d4cb9e356174f4b58d74c125a5880fe4b3fba2d4814f6c28fc78847a512f7a05e1fdcba863302de6189ac1be7c5fde1d7c92c83a8d637dafde8d984a2caee0fa2fe390b330b1dd1b6f47a33383e923c5c5fe3dfcdedfe0a5f211b8913c94fc7f001b964f68cccb60a054ff983e5be06c9d985158bdd7ef467a393825e749b39f1f8bd3a97cddb0bcdf580a87d6bc7e99fee", @ANYRES16=r2, @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x28000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"/392, @ANYRES16=r2, @ANYBLOB="00012cbd7000ffdbdf257000000008000300", @ANYRES32=r14, @ANYBLOB="0a000600ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1m50.658361241s ago: executing program 7 (id=2280): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10000004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="f210040fbc756187152d608a2bfac52370e3a80ce2d83cc3ab02a19ef300f39be6c49a56f6f1ab3326f93529c8638b6ca31251be3f023f281a3e60a98f4c6759800b8a4ee0d221fa1cc9d257fe8618afcaa64266e427705c1e60839bb4815a626ee41a04d3e7c4f5f0feb90ccb46897cec802a7807f971001d3c96939f554511221521bdaa90f4312622c36eb488a97ddb69f9718de293b79558e3b4c7ad8e9e0bb64f53c4ff85f1b0c84748007f3b54ff2b1dc14cbff1c832236c5f82dc31c725251361171e0159"}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)=ANY=[@ANYBLOB="80df8713073ebedeef7e0c4bef992508c1b85f97456c568bb208ab7b72dee8f4d3e9b76bf5f6e3571cd5597adba6b45056222a702260c7aae72b48ea2a861c7744eec3b8c2aab0016795bf9efa02df0f100844", @ANYRES16=0x0, @ANYBLOB="0b562cbd7000fbdbdf252700000005003100020000000a0001007770616e31000000"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40040c0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7f) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040), 0x10) r5 = socket(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="64000000020601080000000000000000000000002400078008001140000000ba050015007f00000008001240fffffffb05001400030000000500010006000000050005005b361b1451da0dfc0a0000000900020073697a3100001c00050004000000000050ffcf200cc77355f8b44f9e1b900700c5de2226db1c56030d5088568872f8242d9d7129e0eb281c6f26033351f87259408763d8280a87c98ad471049409dcf4595b3ee7dba040dc150424cd89bf26b6e734164eca0b742535ee4d097e3b8340a893b50157c38f5e7f672cd9b165f2cd92c61700e519168809b5ec2a0c133d7a50c74467646a9ff6673c628eebcedda2"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$binfmt_misc(r0, &(0x7f0000001340)="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", 0x1000) syz_emit_ethernet(0xb6, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x80, 0x3a, 0x0, @mcast2, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x8, 0x4, 0x4, 0x9, 0x20, 0x2, [@local, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2]}]}}}}}}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES16=r7, @ANYRES16=r3, @ANYBLOB="20002dad7168d8c84d138f2700"], 0x14}}, 0x4000000) bind$phonet(r5, &(0x7f0000000280)={0x23, 0x2, 0xed, 0xa5}, 0x10) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e23, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) 1m50.479344891s ago: executing program 7 (id=2283): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000003000/0x1000)=nil, &(0x7f00002fb000/0x4000)=nil, 0x1000, 0x2, 0x2}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000000)={0x7, 0x0, 0x3002, 0xb5, 0x40, {0xe5b7, 0x3}}) 1m50.478154106s ago: executing program 7 (id=2284): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x24, 0x23, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0xb, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) 1m50.414819593s ago: executing program 7 (id=2285): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x7, 0x2, 0x7e71, 0x1, 0x6, 0x95}) mkdirat(0xffffffffffffff9c, &(0x7f0000001980)='./file1\x00', 0x1b5) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r2, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) r3 = add_key$fscrypt_provisioning(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)={0x2, 0x0, @b}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r3, &(0x7f0000000840)=""/59, 0x3b) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0xe0000000, 0xffffffffd64b043a, 0x83, 0xffff, 0x4, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) ppoll(&(0x7f0000000180)=[{r7, 0x82}], 0x1, 0x0, 0x0, 0x0) dup3(r5, r7, 0x6700000000000000) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000400)={@id={0x2, 0x0, @c}, 0x40, r3, '\x00', @a}) 1m50.231804312s ago: executing program 7 (id=2288): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_mq={0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}}) (async) umount2(&(0x7f0000000340)='./file0\x00', 0xb) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps\x00') (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) (async) r5 = socket$kcm(0x2, 0x2, 0x0) close(r5) socket$kcm(0x2, 0x1, 0x84) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x2e, &(0x7f0000000640)=r4, 0x4) recvmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) (async) exit(0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) (async) syz_open_procfs(r6, &(0x7f0000000000)='net/raw\x00') 1m49.891247743s ago: executing program 2 (id=2292): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'ip6_vti0\x00', @multicast}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa37a1b5110a791c, 0x0) write$tun(r1, &(0x7f0000000100)={@void, @void, @mpls={[{0x8, 0x0, 0x1}, {0x7ff}, {0x6, 0x0, 0x1}, {0x6}], @ipv6=@tipc_packet={0xa, 0x6, "f28da2", 0x55, 0x6, 0xd95ae5bb62ad5999, @private1, @local, {[@routing={0x3b, 0x4, 0x1, 0x7f, 0x0, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], @payload_mcast={{{{{{0x2d, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x46b3, 0x0, 0x1, 0x4, 0x2, 0x1, 0x4, 0xa, 0x1, 0x4e20, 0x4e22}, 0x3, 0x4}, 0x2, 0x8fc}, 0x4}}, [0x0]}}}}}, 0x8d) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x0, 0x0) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000240)=""/237, 0xed}], 0x1) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="050000", @ANYRESHEX=r1], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffff2, 0x5e}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) r5 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r5, 0xd3fc6000) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f0000000480)={{&(0x7f0000000400)=""/10, 0xa}, &(0x7f0000000440)}, 0x20) 1m49.890559181s ago: executing program 2 (id=2293): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) (async) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) ioctl$I2C_PEC(r1, 0x708, 0x7) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x7, &(0x7f0000000000)={0x12, "a3dd982d0ba2d984c335f78f76704978a2f62f39d29c31372205cd39c53f80d4be"}}) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad563292f009abc8b762ee004c90c200", 0x10) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000980)={0x4, 0x0, @ioapic={0xeeee0000, 0x8000000, 0x3, 0x9, 0x0, [{0x1, 0x8, 0xb0, '\x00', 0x7f}, {0x4, 0x82, 0x6, '\x00', 0x5}, {0x6, 0x50, 0xa, '\x00', 0xca}, {0x8, 0x9, 0xfa, '\x00', 0x4}, {0x2, 0x8, 0x5, '\x00', 0x7}, {0x51, 0xdf, 0x0, '\x00', 0x7f}, {0x8, 0x81, 0x6, '\x00', 0x7}, {0x8, 0x0, 0x89, '\x00', 0x7}, {0x2, 0x94, 0x6}, {0x8, 0x4, 0x8, '\x00', 0x5}, {0xc6, 0x6, 0x0, '\x00', 0xdd}, {0x9, 0x7, 0x7, '\x00', 0x5}, {0x7, 0x6, 0x2, '\x00', 0xff}, {0x1, 0x4, 0x6, '\x00', 0xf5}, {0x56, 0x49, 0x4}, {0x0, 0xff, 0x78, '\x00', 0x50}, {0x82, 0xee, 0x1, '\x00', 0xfa}, {0x6, 0x7f, 0x10, '\x00', 0x6}, {0x8d, 0x7c, 0x11, '\x00', 0x1e}, {0x7, 0x6, 0x0, '\x00', 0x8}, {0x9, 0x40, 0xfa, '\x00', 0xf}, {0x6, 0x2, 0x18, '\x00', 0x5}, {0xa, 0xff, 0x3, '\x00', 0x2}, {0xfb, 0xe, 0x40, '\x00', 0x5}]}}) (async) r4 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) ioctl$XFS_IOC_GETBMAPA(r4, 0xc020582c, &(0x7f0000000000)={0x5, 0xc1b8, 0xfffffffffffffffa, 0xffff8457, 0x7}) (async) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000080)={0x1, 0x6, 0x1, &(0x7f0000000040)={0x6, "9f09222b0928a4d4edb8f522fed5113fb4a14fa6e19a022900"}}) 1m49.803431916s ago: executing program 2 (id=2295): socket$packet(0x11, 0xc2340cf684d20d18, 0x300) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000000)=0x4eb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x3, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000180)) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fedbdf250500000008000300f3"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000a40)=ANY=[@ANYBLOB=',debug=0x0000007,version=9p20\\++},%{!(6,afid=0x000000003f5689cf,nodevmap,fscache,afid=0x0000000000000f9c,msize=0x0', @ANYRESHEX=r2]) 1m49.803067742s ago: executing program 2 (id=2297): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f00008b0000/0x4000)=nil, 0x4000, 0x19) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) close(r1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1m49.598299107s ago: executing program 2 (id=2299): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xf8}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000440)}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000140003052abd7000ffdbdf250200e4ff", @ANYBLOB="080002007f0000016c77393dd5c2ddef263c7b012c54d73f3b2346251d882d35b26d6f8c03000000000000002e29cc9c524b74"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20008840) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e040a260c"], 0x7) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'bridge_slave_1\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x46, 0x10d4, 0x5, 0x8, 0xfa, "39c2e3", 0x8}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008"], 0x58}}, 0x0) ioctl$FIOCLEX(r3, 0x5451) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xf8}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000440)}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0}, 0x18) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000140003052abd7000ffdbdf250200e4ff", @ANYBLOB="080002007f0000016c77393dd5c2ddef263c7b012c54d73f3b2346251d882d35b26d6f8c03000000000000002e29cc9c524b74"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20008840) (async) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e040a260c"], 0x7) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'bridge_slave_1\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x46, 0x10d4, 0x5, 0x8, 0xfa, "39c2e3", 0x8}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008"], 0x58}}, 0x0) (async) ioctl$FIOCLEX(r3, 0x5451) (async) 1m49.596927084s ago: executing program 2 (id=2300): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c0000001500010028bd7000ffdbdf2500000000000000000000000000000000ac1414aa0000000000000000000000004e2100094e2300090a00a00032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b36b6e00020000230a0010006a"], 0x5c}, 0x1, 0x0, 0x0, 0x4004050}, 0x20000000) unshare(0x66000080) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r2, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r6 = socket(0x11, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) write(0xffffffffffffffff, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf080001", 0x17) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100), 0x4) write(r7, &(0x7f00000005c0)="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", 0x1000) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = gettid() sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYRES32=r5, @ANYRES16=r7, @ANYRES32=r8], 0x28}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 1m24.920078196s ago: executing program 36 (id=2288): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_mq={0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}}) (async) umount2(&(0x7f0000000340)='./file0\x00', 0xb) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps\x00') (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) (async) r5 = socket$kcm(0x2, 0x2, 0x0) close(r5) socket$kcm(0x2, 0x1, 0x84) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x2e, &(0x7f0000000640)=r4, 0x4) recvmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) (async) exit(0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) (async) syz_open_procfs(r6, &(0x7f0000000000)='net/raw\x00') 1m24.919915946s ago: executing program 37 (id=2300): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c0000001500010028bd7000ffdbdf2500000000000000000000000000000000ac1414aa0000000000000000000000004e2100094e2300090a00a00032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b36b6e00020000230a0010006a"], 0x5c}, 0x1, 0x0, 0x0, 0x4004050}, 0x20000000) unshare(0x66000080) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r2, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r6 = socket(0x11, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) write(0xffffffffffffffff, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf080001", 0x17) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100), 0x4) write(r7, &(0x7f00000005c0)="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", 0x1000) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = gettid() sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYRES32=r5, @ANYRES16=r7, @ANYRES32=r8], 0x28}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 48.343153228s ago: executing program 9 (id=2558): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="53df2b456239", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x4, 0x1000}}}}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x38}}, 0x400d) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r1, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x3c}}, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x416102, 0x41) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000340)="c8c81a14d5b6e0481ebebfa5257df62da896554c482445255f859c3a42711beda6e8cdcd4550f506c6043cf5e7ff0bdf92c6b6e3e9fb03a6") ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0xc0, 0x8, 0x1, 0x41, @private0, @local, 0x40, 0x10, 0x5, 0x3}}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000000191407"], 0x10}}, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 48.248108573s ago: executing program 9 (id=2559): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x400000f3}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x4009, 0x3, 0x3, 0x2, 0x5]}, &(0x7f0000000000)=0x78) r7 = socket$inet(0x2, 0x1, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bind$bt_hci(r8, &(0x7f0000000040), 0x6) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000023) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x7e) write$bt_hci(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="0155b8"], 0x7) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) getsockopt$IP_SET_OP_GET_BYINDEX(r7, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x2}, &(0x7f00000001c0)=0x28) setsockopt$inet_mreqn(r7, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="051f27bd7000fedbdf251500000008000300", @ANYRES32=r10], 0x80}, 0x1, 0x0, 0x0, 0x40048}, 0x0) 48.098201466s ago: executing program 9 (id=2560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x3}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}}, 0x0) close(r0) 48.023814974s ago: executing program 9 (id=2561): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd26, 0xfffffffc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 48.022834431s ago: executing program 9 (id=2562): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x9, r2, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) r5 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r0, r5) r6 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r8, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r11 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r11, 0xc008551a, &(0x7f0000000440)=ANY=[@ANYBLOB="03000000500000000000060000000000000000000000000079daebf0964cb378278d65336ff895a18696705a8ddc5dd1a2be55a4e0eed582808bff42da743475d4a20de84dca0d01dfcc9171fa2e5bec6d171c3f41a50f8e16f55591002c7122eafeed90eded09f4b18192d55a965e761dda122e9f0a81b2979f3ad771"]) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdc00, {0x7, 0x0, 0x0, r10, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NDA_VLAN={0x6, 0x5, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x4040004) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 47.937969479s ago: executing program 9 (id=2563): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 31.895680013s ago: executing program 38 (id=2563): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 23.414809046s ago: executing program 0 (id=2914): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) (async) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffec2) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000100)={0x7fffffff, 0x3ff, 0x85, 0xfffffff9, 0x7, 0xf}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x58, r3, 0x1, 0x80000000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) (async) io_uring_setup(0x37cc, &(0x7f0000000040)={0x0, 0x2a11, 0x1c080, 0xa, 0x20002f7}) 23.41460844s ago: executing program 0 (id=2915): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x4000000, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0x2b, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}]}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x12) 23.359046081s ago: executing program 0 (id=2917): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/181, 0xb5}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x808000, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="0fbd433e66b8000000000f23d80f21f86635000000100f23f866b98d02000066b80080000066ba000000000f30ba4100b80000ef66b9720800000f320f234665c1487c5366b813e500000f23c00f21f86635000004000f23f8baa100edbaf80c66b830a1068b66efbafc0ced", 0x6c}], 0x1, 0x35, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}], 0x1) connect$unix(r3, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000071c0)={0x0, 0x0, &(0x7f0000007180)={&(0x7f0000000140)=ANY=[@ANYRES16=r7, @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf252400000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) 23.265523662s ago: executing program 0 (id=2919): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00') bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000006ac0), 0x0, 0x0) fstatfs(r5, &(0x7f0000007580)=""/19) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x6, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) userfaultfd(0x40002) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x105) write$binfmt_misc(r0, &(0x7f0000000340)="ed8b", 0x2) 23.148160599s ago: executing program 0 (id=2921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="010704194f"], 0x7) (async) r3 = inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x472001, 0x21) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x20, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) set_mempolicy(0x2005, 0x0, 0xfffffffffffffffe) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000300), &(0x7f00000003c0)=0x4) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x94) (async) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000280)=[@uexit={0x0, 0x18, 0xffffffff}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xba, 0x4, 0x80000001, 0x3}}, @wrmsr={0x65, 0x20, {0x840, 0x8000000000000001}}], 0x70}) ioctl$KVM_NMI(r8, 0xae9a) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 22.973851137s ago: executing program 0 (id=2924): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={0x0}, &(0x7f00000001c0)=0x8) r2 = fsmount(0xffffffffffffffff, 0x0, 0x9) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={r1, 0xe7, 0x8, 0x80}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x80, 0x8000, 0xe, 0xb, r4}, 0x10) 22.916938993s ago: executing program 39 (id=2924): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={0x0}, &(0x7f00000001c0)=0x8) r2 = fsmount(0xffffffffffffffff, 0x0, 0x9) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={r1, 0xe7, 0x8, 0x80}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x80, 0x8000, 0xe, 0xb, r4}, 0x10) 1.594916413s ago: executing program 8 (id=3247): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket$kcm(0x2, 0x5, 0x106) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x93) mkdir(&(0x7f00000000c0)='./file0\x00', 0x1) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x4002, @local, 0x6}, 0x1c) chdir(&(0x7f0000000300)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r2, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.503278304s ago: executing program 8 (id=3252): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x5, @raw_data="19d26a1d8d313cb5b5824f34bb98cde77cb6452df126ec3e87dc0ba21ab319a19133e3092db31e308c505adb156e336aa82666e66d3decef36749d69748890a64f431b5a2889b1cef192eb2267abcb25b53625d9a2c959cf2a18f74cf9dc435b8244e3126653a2460ee529504ab39799d8526cd8afa616a0acc33f562f57a8a5a54c1c91a8d67ff7f2829943c536c521d36b61b6c0a0f28d8d045a799148ac7946ace5b874d3d8730ac478a4827e651b59884043dc44f794dc1e3c87dc67c77c3d7ebc328472c844"}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000840)=[@in={0x2, 0x4e21, @local}], 0x10) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r2, &(0x7f0000003500)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x102, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000008c0)=0x8, 0x4) r3 = syz_open_dev$sg(&(0x7f0000002240), 0x0, 0x804100) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r3, 0x0) r4 = socket(0x22, 0x2, 0x24) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000000)=0x15) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 1.168388983s ago: executing program 4 (id=3258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x8000007, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) set_mempolicy(0x4005, &(0x7f0000000000)=0x1, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="79cfaf0bf3ce", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x7, 0x28, 0x67, 0x0, 0xb, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) close(0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x6071, 0x0, 0xe7}}}}}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a888a8b966894f82003a9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0xb, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x40, 0x0, 0xe7}}}}}}, 0x0) 1.051532422s ago: executing program 4 (id=3259): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb0000090800014000000001080002"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x15}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f0000000000)={0x70, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x4, 0x80, 0x3231564e, 0x2, [r8], [0x2000, 0x0, 0x0, 0x49], [0x7fffffff, 0x0, 0x0, 0x2], [0x400000000000001, 0x5]}) 997.851071ms ago: executing program 4 (id=3263): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x8, 0x4}) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x1, &(0x7f0000000040)=""/62, &(0x7f0000000080)=0x3e) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'veth1_vlan\x00', 0x400}) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @loopback}, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x20, 0x8000, 0x0, 0x7, {{0x16, 0x4, 0x2, 0x1, 0x58, 0x65, 0x0, 0x1, 0x29, 0x0, @loopback, @local, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0xa0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010102]}, @rr={0x7, 0x1b, 0x4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast2, @private=0xa010102, @private=0xa010102]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x120, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa4, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x120}}, 0x40000) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000440)={@multicast1, @multicast1}, 0x8) r5 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000480), 0x801, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f00000004c0)={0x1, r5, 0x0, {0x5988, 0x3ff}}, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl1\x00', r4, 0x2f, 0x4, 0x1, 0x4, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x8, 0x7800, 0x9, 0x3}}) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000005c0)=0xffff1000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'gretap0\x00'}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r2) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0x100, r6, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x26, 0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x10}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x47dc7397}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10}]}, 0x100}, 0x1, 0x0, 0x0, 0x48400}, 0x4a0c1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x98, r7, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x57}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x110, r6, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xdd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff000}]}, 0x110}, 0x1, 0x0, 0x0, 0x44081}, 0x4000) r8 = fcntl$getown(r2, 0x9) mq_notify(r0, &(0x7f0000000d00)={0x0, 0x12, 0x2, @tid=r8}) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000d40)={0x1, 0x0, [{0x14c, 0x0, 0x7f}]}) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000d80)={'vlan0\x00', {0x2, 0x0, @dev}}) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000dc0), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0xc4, &(0x7f0000000e00)=0x9, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r9, 0xf507, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000e80)={0x7, 0x0, 0xfffffff8, 0x98fc, 0x0}, &(0x7f0000000ec0)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000f00)={0x9, 0x2, 0x0, 0x0, r10}, 0x10) 901.251104ms ago: executing program 4 (id=3267): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0xd0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'macvlan0\x00', 0x9d}) 897.572289ms ago: executing program 4 (id=3268): r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff8) keyctl$get_keyring_id(0x0, r0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "d6f7e1e2caf44f022e70b2b129f3049dbc56f3b7a7babcae7b853b99f705e3642f434322fb6bc30db6965ac921eb73ac5c402712033426b23763991eaab8be5e", 0x22}, 0x48, 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$reject(0x13, r1, 0x3, 0xcd7, r2) r3 = add_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="c27d57ce61bafab20440d324babfbce5679a877ed264f3e2d845bd69ea8cb08c42dee117bd26ec47d2a3ff0eb61364ebf129db1c070e0d0be1b89c389d90b5c6a38ed0b0d1063337877225c14a54e1044b9e33eb09a4f49a57dbc7f6929e30888a7aeb1bf654f8e80c3e3e9c9a6793673286822196c62df1784c41827d532089460354b106924b7c59e153f579b406834f4ed8be96e98b96c8e4592314bdb2ba44a9363c6e070c", 0xa7, 0xfffffffffffffffb) keyctl$negate(0xd, r3, 0xfff, r2) keyctl$read(0xb, r0, &(0x7f00000003c0)=""/202, 0xca) keyctl$set_timeout(0xf, r0, 0x9120) r4 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000540)='rxrpc_s\x00', &(0x7f0000000580)='!)\\\\]&)\xba\\J-\xc3^*%\\\'[#*\x00') r5 = add_key$fscrypt_provisioning(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)={0x2, 0x0, @b}, 0x48, r1) r6 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$instantiate(0xc, r5, &(0x7f00000006c0)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', 'syz'}, 0x1c, r6) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a80)={0x0, &(0x7f0000000780)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control_nat=0x600c, 0x8, 0x2, 0x5}}, @nested_amd_invlpga={0x17d, 0x20, {0xdddd0000, 0x5840}}, @rdmsr={0x66, 0x18, {0xc0000104}}, @enable_nested={0x12c, 0x18}, @rdmsr={0x66, 0x18, {0x600}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xe6, 0x7, 0x2, 0x1}}, @wrmsr={0x65, 0x20, {0xad3, 0x100}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x67e, 0x3, 0x0, 0x3}}, @enable_nested={0x12c, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18}, @code={0xa, 0x78, {"c4e1f9136233c74424006d000000c744240201000000c7442406000000000f0114240f20d835200000000f22d866d007b9650800000f32360f16d848b8434e0000000000000f23d00f21f8352000000e0f23f8c4836940af770000008b65af400f69995f000000"}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x31, 0x6, 0x0, 0x3}}, @uexit={0x0, 0x18, 0xfffffffffffffff8}, @wr_crn={0x67, 0x20, {0x3, 0x7}}, @in_dx={0x69, 0x20, {0x2bba, 0xd3e6d28a9952f1b5}}], 0x2d8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000b40)=[@text64={0x40, &(0x7f0000000ac0)="43df224e0fc719c4c174560f2e0f1a4800b8010000000f01c1c402392b3fc7442400940e5557c74424020f000000c7442406000000000f011c24b956030000b82df80000ba000000000f30f2440f086666430f3aceecad", 0x57}], 0x1, 0x2, &(0x7f0000000b80)=[@cstype0={0x4, 0x1}], 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000bc0)=@secondary) r8 = add_key$fscrypt_v1(&(0x7f0000000c80), &(0x7f0000000cc0)={'fscrypt:', @desc1}, &(0x7f0000000d00)={0x0, "8431c3e0a992a664dfd38bfa9f0414bdfc0a8c2129d2e4d6b828045c87f747e0fcbcd5877821d1f7b2aaafa3464ba4330e128821ca9b107e0a5b634d72b41583", 0x13}, 0x48, r6) add_key$keyring(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x1}, 0x0, 0x0, r8) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000d80)={r7, 0x3, 0xff, 0x3}) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r9, 0xf2) r10 = add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x2}, 0x0, 0x0, r8) add_key$fscrypt_provisioning(&(0x7f0000000dc0), &(0x7f0000000e00)={'syz', 0x0}, &(0x7f0000000e40)={0x1, 0x0, @a}, 0x48, r10) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r9, 0x69) r11 = add_key$keyring(&(0x7f0000000f40), &(0x7f0000000f80)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$setperm(0x5, r0, 0x2002a00) keyctl$link(0x8, r5, r10) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000fc0)="7c0953c0007e102e750945c8a1ad73512e", 0x11) r12 = add_key$keyring(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x2}, 0x0, 0x0, r11) keyctl$search(0xa, r6, &(0x7f0000001000)='keyring\x00', &(0x7f0000001040)={'syz', 0x1}, r12) 847.897749ms ago: executing program 4 (id=3270): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x9, 0x8, 0x4, 0xfffff43e, 0x97}, &(0x7f0000004480)=0x98) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000300)={r5}, &(0x7f0000000040)=0x8) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r3, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) 794.907476ms ago: executing program 1 (id=3271): ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000000)={0x0, 0x2}) (async) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000b40)={0x114, 0x10, 0x509, 0x0, 0x0, "", [@nested={0x101, 0x31, 0x0, 0x1, [@generic="e7fd1cc987412abd12a61250be1a1ad1f9a11f196ac7446aa3a450935abca7f7f7200509e180ddc434b3a717de9332954acf415edd6e5cc1b36848dfc020a0d3196b64af1050252d4c77e46e53c0b45278490ca70e88acb72aa0fd88699e6d071b8c6cd70173cb8500279d021f54695a25f3d06d936e7b7577", @typed={0x5, 0xb3, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x8e, 0x0, 0x0, @u32=0xd1}, @nested={0x74, 0x7e, 0x0, 0x1, [@nested={0x70, 0x5e, 0x0, 0x1, [@typed={0x59, 0x93, 0x0, 0x0, @binary="ea423366c0f43f13e7cd3199f6900d0d8d42d45cb86a90453c268ab4974703b8b010e74a0a1e65739f0fbb49f3425cc76eeb0b44731b62148e7624508396077fcdd87bc2c98e500b74bb786441a50bc90c3e6e59ae"}, @typed={0x8, 0xe6, 0x0, 0x0, @ipv4=@local}, @nested={0x8, 0x100, 0x0, 0x1, [@nested={0x4, 0x8c}]}]}]}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 793.608881ms ago: executing program 1 (id=3273): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000691226000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) name_to_handle_at(r1, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x400) 708.988481ms ago: executing program 1 (id=3275): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0xfffffffc}}, 0x2f) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r5 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x7dc, r7, 0xf07cb2c35115261c, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x7c0, 0x8, 0x0, 0x1, [{0x43c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ALLOWEDIPS={0x254, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x1d4, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x8}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xcc2}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010102}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cfe663e0c6f1188bc6e3b4fafbe2e0dbe984840c2044acb844551ae64dd76cef"}, @WGPEER_A_FLAGS={0x8}]}, {0x300, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x18c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x118, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "310ee255a6ddc0ba120919a46bd4a510f8745183782fbb70a4c622b40c345b36"}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}]}, 0x7dc}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 708.839324ms ago: executing program 6 (id=3276): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x83, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x48a33}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000001}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 656.192341ms ago: executing program 6 (id=3277): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) 580.652453ms ago: executing program 1 (id=3278): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = add_key$keyring(&(0x7f0000002e00), &(0x7f0000002e40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='syz', r1) (async) keyctl$read(0xb, r1, &(0x7f0000002e80)=""/4096, 0x1000) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) fcntl$setstatus(r2, 0x4, 0x40800) (async) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_SLAVE(r3, 0x703, 0x60) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@deltfilter={0x6c, 0x2d, 0x8, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffe0, 0x9}, {0xe, 0xa}, {0x0, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x73, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x10000}]}}, @TCA_RATE={0x6, 0x5, {0x91, 0x10}}, @TCA_RATE={0x6, 0x5, {0x3, 0xc}}, @TCA_RATE={0x6, 0x5, {0x30, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}]}, 0x6c}}, 0x0) (async) ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, &(0x7f00000000c0)=0xfffffffe) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r7, 0x2000009) (async) sendfile(r2, r7, 0x0, 0x7ffff004) (async) ioctl$KVM_SET_TSC_KHZ_cpu(r7, 0xaea2, 0xfffffffffffffffd) (async) io_setup(0xe8, &(0x7f00000001c0)) (async) socket(0x22, 0x6, 0x40) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 578.583154ms ago: executing program 1 (id=3279): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x20, 0x101000) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '/dev/dri/card#\x00'}}, {@access_uid={'access', 0x3d, r1}}], [{@euid_lt={'euid<', r3}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/video#\x00'}}, {@smackfshat={'smackfshat', 0x3d, '-&'}}, {@dont_hash}, {@context={'context', 0x3d, 'unconfined_u'}}, {@obj_type={'obj_type', 0x3d, '/dev/video#\x00'}}]}}) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x4, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000400)={0x7, 0x2, 0x3e, 0x0, 0x7, 0xb, 0x65f5}) 463.545542ms ago: executing program 1 (id=3280): r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_emit_ethernet(0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004507005e00660000072f90787f0000017f0000010421880b00000000090008000c0086dd000a00060401080088be000000001009ad9f0100000000000004080022eb000000032a032e0200000000000001000872120800655800000003"], 0x0) r2 = accept$netrom(r0, &(0x7f00000001c0)={{0x3, @bcast}, [@null, @remote, @null, @rose, @rose, @bcast, @default]}, &(0x7f0000000140)=0x48) bind$netrom(r2, &(0x7f0000000280)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)=ANY=[@ANYBLOB="580000000102010100000000000000000a00000006000740000400003c0001802c00018014000300ff0100000000000000000000000000010d0004"], 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xe2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}]}}]}, 0x48}}, 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000225708140d8131000728f0102030109021200010001"], 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x3a) bind(r5, &(0x7f0000000000)=@hci={0xa, 0x2}, 0x80) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) (async) sendto(r1, 0x0, 0x0, 0x4014, 0x0, 0x0) 461.220694ms ago: executing program 8 (id=3281): r0 = socket(0x2, 0x80805, 0x0) r1 = memfd_create(&(0x7f0000000140)='\x00\xac=\x9d\xf2\xdb\xe6\xbf\xb4\x91\x1b\x80\x93\x81v\xc5o\xa4k\x012>\xa1\x9c\x86x\x1c\xb3\xd9L\xccc\xecR\xd6\xe8\xf1Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x8c!\xb9ew\xce\xdd8$m\x1d\x8b:\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00Y\x8f\xc6S[\xceS\xa1b \x1d\x14\xfc\x89\xad\xa2\x83V\x93\xb8\vT\x02bS\xcdqE$1\xdbW\x9b<\xc8~\"\x1c\xf5\xa2~\x1e\xd4\'\xf0\xe2\xa4I&RB\xf5\xa5\xc8\x85R\x10\x15\x8d.\xb1_\xedMe!\x9bm\xdd\xd4\xc0E<\"\x8c\a6D6\x13\x10\x02IEWax\xf6C\xa4\xf4#\xa8\xb9\x86\xd210!pcb\xaa\x18\xda\xbb3W\x8b\x9e\xa5Ed9\xdb\xdap\xe5\xf0\xb1\xe7\x14\x00_#\xe1*D1\x92\xb6\xa4\xa0\xe7\a}>nL\xd24\xb3\xb3[\xd3\x7f]4\\\xda\f\x91z\x1c=\x87\x0f\xd2\x89\xf0\x1c\xad\xcf\xd5\x92\x9bc10ZK\x82\xe9\xddb5\xd8\x9e\x8eAO\xbe\xa7,\xa0RG\x96\xc9\x86x\xd1\x85\xee\xaa\xe3\xea\x02\xff\xa7\xf3\xe8\xd8\x11<\x17~r\xaf\x8cx}\xc0%\x06r\xe2', 0x7) fallocate(r1, 0x0, 0x0, 0x35e) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'sh\x00', 0x1, 0x2, 0x6e}, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000001000)='./file7/file0\x00', &(0x7f0000001040), 0x4000) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 377.953031ms ago: executing program 8 (id=3282): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="11a00c00060000001c00fd800100010067726574617080000c000280060011004e28393b83ae4d2a68b68a4d70261d86aade20622fa3277c13b1d478c60eb982c1bb9fb311c6ee041347a988e130173c43a1a77d0b398fb8352c2434d7df881ea910575b7fba2068a7462526d3576ca4eace140f41110c48f8189e9a008625c54f7f700f98df87ff7dbbefe13e954617728f6ddc3911a86681a7c08fe2c041"], 0x3c}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = semget(0x1, 0x4, 0x39c) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x6]) unshare(0x0) semop(r2, &(0x7f00000000c0)=[{}], 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x100fffa, [0x0, 0xfffffffc], 0x1}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x4c8402, 0x0) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6, {0x1000}}, './file0\x00'}) dup(r1) 377.671962ms ago: executing program 6 (id=3283): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f002}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x3, @raw_data="c708189fdcbe38f109fd41eca1fab6cd0322a56c377827c1fce9457335c4cf47591deda9c33bc6cc5b7d3385a843760dd72871795d9eec0df1cf3d0589e7946a9bac962801127e85aca8abe490516e85fa1cca18da61bee3bfa7d0f5ed52f194b6024df56e43d16d7ffeeac46eb01cb5757d29bb22d8abce603d90a7001e3f9be35d285b71faf95797b771ab7048423887417857c97c7c08fc78c4a73b824df30347e9b3a7edbacbafa8e996d0705d042048e6bee4c2de8567b14ab3f6fef57955f02e224730470a"}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f00000001c0)="11eb", 0x2, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @multicast}, 0x14) 377.507964ms ago: executing program 6 (id=3284): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x169a42, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d05}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) 119.590707ms ago: executing program 8 (id=3285): socket(0x6, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x6, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) 118.958464ms ago: executing program 8 (id=3286): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f00000002c0)="c677a0b305ab60cdf226f6d721eeb85d26ba982fb73d589935133d7c654c3e50b85aeaa27d84349c6eb2d06b55a02906c48e2ed93c3d3166805be64fa8d73c97b79e3f548b993771f93427847b1037d1a6fb9302c9de6604c1a02c3e793a875d1aa59d855fa07ca3361e9cb0623dd777", 0x70) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeff, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x2a85, &(0x7f00000003c0)={0x0, 0x1221, 0x8, 0x0, 0x269}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0xd2, &(0x7f0000000940)={0x0, 0xbd84, 0x0, 0x1, 0x101}, &(0x7f0000000140)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd, 0x0, 0x0, 0x0, 0x1}) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x21, 0x0, r9, 0x80, &(0x7f00000004c0)=@pptp={0x18, 0x2, {0x1, @private=0xa010101}}, 0x0, 0x0, 0x0, {0x0, r10}}) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000480)={0x3f, 0x2, 0x2, 0x3}, 0x10) write(r11, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000000000000000000080009001d000000", 0x24) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="bbfb2bbd70006afddbdf215c000000080001003c00000008000352e8e71a3c6464e9277f04546d0d104c5f3cf18d6fa4a7a41731076926ad26116562c0692a4f2f37cec8dfc42c757e7d743d2366ff9d4912d981e8f296e4b265dbde8d827786002c05b4afd6d00249bce500b9e2f1a8c5973bea4fc4953e774e0c35ac445c0623febd8ea14fe850ac68b033d7f938", @ANYRES32=0x0, @ANYBLOB="0800c300080000000800c400ff030000"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000540), 0x0, 0x2, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000e00)={0x1, r14, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000000)={0x200, r14, r1}) 3.518805ms ago: executing program 6 (id=3287): getrandom(&(0x7f0000000000)=""/12, 0xc, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe0000010000000014000f00"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 6 (id=3288): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x44, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x44}}, 0x0) clock_nanosleep(0x1, 0x1, &(0x7f0000000280), 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r5) (async, rerun: 32) r7 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004019}, 0x40) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000071c0)={0x0, 0x0, &(0x7f0000007180)={&(0x7f00000070c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fedbdf252400000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020029bd7000fbdbdf250500000005000600010000000800050000008000080005000200000028000180140002006873723000000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000300000000000c00038008000200050000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000500ff030000528e36d563aed8d070dad537b3da27e1f1fc538e959b7b1a21b9dd164234b1e34644f6fc9191f9e6eadcba7a64b3e5340cd11f3f8cb880b68cc1a7ae2172c2184a784621e57b881e6854fc236bce6c2aa43a"], 0x74}, 0x1, 0x0, 0x0, 0x8811}, 0x48001) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, r4, 0x5, 0x70bd24, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="dc47bf23ccbb"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1, 0x2, 0x5, 0x0, {0xd8, 0xa83, 0x0, 0xa6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800, 0x6, 0x3f}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) kernel console output (not intermixed with test programs): 70.591760][T14766] __nla_validate_parse: 6 callbacks suppressed [ 270.591778][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2480'. [ 270.611762][T14766] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2480'. [ 270.719509][T14773] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 270.721979][T14773] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 1th superblock [ 270.725177][T14773] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 270.727830][T14773] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 2th superblock [ 270.827058][T14781] team0 (unregistering): Port device team_slave_0 removed [ 270.835773][T14781] team0 (unregistering): Port device team_slave_1 removed [ 270.842515][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 270.942979][T14787] netlink: 'syz.8.2485': attribute type 10 has an invalid length. [ 270.947569][T14787] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 270.951693][T14787] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 270.955618][T14787] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 271.926694][T14813] FAT-fs (sr0): bogus number of reserved sectors [ 271.928671][T14813] FAT-fs (sr0): Can't find a valid FAT filesystem [ 271.965214][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 271.992514][T14816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14816 comm=syz.9.2494 [ 272.256540][T14837] xt_hashlimit: size too large, truncated to 1048576 [ 272.362646][T14849] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2506'. [ 272.368506][T14849] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2506'. [ 272.374195][T14849] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 272.489174][ T6026] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 272.524173][ T6107] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 272.660200][ T6026] usb 13-1: Using ep0 maxpacket: 8 [ 272.663020][ T6026] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 272.666205][ T6026] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.669847][ T6026] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.675806][ T6026] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 272.678713][ T6026] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.682709][ T6026] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 272.684537][ T6107] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 272.685570][ T6026] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.688435][ T6107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.688450][ T6107] usb 5-1: Product: syz [ 272.688457][ T6107] usb 5-1: Manufacturer: syz [ 272.688465][ T6107] usb 5-1: SerialNumber: syz [ 272.919255][ T6026] usb 13-1: GET_CAPABILITIES returned 0 [ 272.920926][ T6026] usbtmc 13-1:16.0: can't read capabilities [ 273.066571][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 273.134850][T14844] bond_slave_0: mtu less than device minimum [ 273.138084][ T6107] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 273.143496][ T6107] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 273.145792][ T10] usb 13-1: USB disconnect, device number 2 [ 273.149118][ T6107] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 273.155889][ T6107] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 273.160443][ T6107] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 273.166219][ T6107] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 273.174954][ T6107] usb 5-1: USB disconnect, device number 41 [ 273.667992][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 273.670124][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.705961][T14894] netlink: 'syz.0.2516': attribute type 10 has an invalid length. [ 273.719189][T14894] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 273.999905][T14908] Cannot find add_set index 2 as target [ 274.007676][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 274.112368][T14916] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2522'. [ 274.157211][ T10] usb 5-1: device descriptor read/64, error -71 [ 274.189447][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 274.386077][T14924] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2525'. [ 274.398887][T14924] netlink: 'syz.9.2525': attribute type 27 has an invalid length. [ 274.413869][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 274.523249][T14928] binder: BC_ACQUIRE_RESULT not supported [ 274.525668][T14928] binder: 14927:14928 ioctl c0306201 2000000003c0 returned -22 [ 274.534392][T14928] binder: 14927:14928 ioctl 4020ae76 2000000020c0 returned -22 [ 274.539459][T14928] random: crng reseeded on system resumption [ 274.552861][ T10] usb 5-1: device descriptor read/64, error -71 [ 274.678287][T14937] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 274.681396][ T10] usb usb5-port1: attempt power cycle [ 274.684142][T14939] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 274.688910][T14937] overlayfs: maximum fs stacking depth exceeded [ 274.791886][ T5934] Bluetooth: hci5: Invalid handle: 0x7664 > 0x0eff [ 275.025425][T14957] IPVS: Unknown mcast interface: syzkaller1 [ 275.076753][ T10] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 275.099670][ T10] usb 5-1: device descriptor read/8, error -71 [ 275.301305][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 275.386950][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 275.408368][ T5999] usb 14-1: new full-speed USB device number 3 using dummy_hcd [ 275.412943][ T10] usb 5-1: device descriptor read/8, error -71 [ 275.538109][ T10] usb usb5-port1: unable to enumerate USB device [ 275.590748][ T5999] usb 14-1: too many configurations: 92, using maximum allowed: 8 [ 275.594942][ T5999] usb 14-1: config 0 has an invalid descriptor of length 147, skipping remainder of the config [ 275.598482][ T5999] usb 14-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.602633][ T5999] usb 14-1: config 0 has an invalid descriptor of length 147, skipping remainder of the config [ 275.605934][ T5999] usb 14-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.609667][ T5999] usb 14-1: config 0 has an invalid descriptor of length 147, skipping remainder of the config [ 275.613266][ T5999] usb 14-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.617137][ T5999] usb 14-1: config 0 has an invalid descriptor of length 147, skipping remainder of the config [ 275.620739][ T5999] usb 14-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.624840][ T5999] usb 14-1: config 0 has an invalid descriptor of length 147, skipping remainder of the config [ 275.628129][ T5999] usb 14-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.632086][ T5999] usb 14-1: config 0 has an invalid descriptor of length 147, skipping remainder of the config [ 275.635708][ T5999] usb 14-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.641827][ T5999] usb 14-1: config 0 has an invalid descriptor of length 147, skipping remainder of the config [ 275.645846][ T5999] usb 14-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.649919][ T5999] usb 14-1: config 0 has an invalid descriptor of length 147, skipping remainder of the config [ 275.654042][ T5999] usb 14-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.659442][ T5999] usb 14-1: New USB device found, idVendor=046d, idProduct=3bc5, bcdDevice=e4.b1 [ 275.663010][ T5999] usb 14-1: New USB device strings: Mfr=246, Product=150, SerialNumber=47 [ 275.666650][ T5999] usb 14-1: Product: syz [ 275.668386][ T5999] usb 14-1: Manufacturer: syz [ 275.670298][ T5999] usb 14-1: SerialNumber: syz [ 275.673859][ T5999] usb 14-1: config 0 descriptor?? [ 275.894120][ T6026] usb 14-1: USB disconnect, device number 3 [ 276.402642][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 276.577023][ T40] kauditd_printk_skb: 17466 callbacks suppressed [ 276.577037][ T40] audit: type=1400 audit(1770792370.525:33776): avc: denied { read write } for pid=15002 comm="syz.9.2542" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 276.578185][T15003] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 276.579273][ T40] audit: type=1400 audit(1770792370.525:33777): avc: denied { open } for pid=15002 comm="syz.9.2542" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 276.743963][ T40] audit: type=1326 audit(1770792370.675:33778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14974 comm="syz.8.2539" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd0d9bf79 code=0x7fc00000 [ 276.781755][ T40] audit: type=1400 audit(1770792370.712:33779): avc: denied { append } for pid=15013 comm="syz.9.2544" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 276.856317][T15020] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2545'. [ 276.864975][ T40] audit: type=1400 audit(1770792370.797:33780): avc: denied { connect } for pid=15021 comm="syz.8.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 276.875076][ T40] audit: type=1400 audit(1770792370.806:33781): avc: denied { map } for pid=15019 comm="syz.9.2545" path="socket:[68792]" dev="sockfs" ino=68792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 276.885587][ T40] audit: type=1400 audit(1770792370.806:33782): avc: denied { read } for pid=15019 comm="syz.9.2545" path="socket:[68792]" dev="sockfs" ino=68792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 276.933334][ T40] audit: type=1400 audit(1770792370.853:33783): avc: denied { write } for pid=15028 comm="syz.8.2548" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 276.942161][T15029] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2548'. [ 276.952222][T15029] binder: 15028:15029 ioctl c018620c 200000000000 returned -1 [ 277.016727][ T40] audit: type=1400 audit(1770792370.937:33784): avc: denied { remove_name } for pid=15028 comm="syz.8.2548" name="file1" dev="9p" ino=72614125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 277.029748][ T40] audit: type=1400 audit(1770792370.937:33785): avc: denied { rename } for pid=15028 comm="syz.8.2548" name="file1" dev="9p" ino=72614125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 277.075284][T15038] CIFS mount error: No usable UNC path provided in device string! [ 277.075284][T15038] [ 277.081195][T15038] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 277.086010][T15036] fuseblk: Unknown parameter 'fdi0x0000000000000086' [ 277.186469][T15047] overlayfs: failed to resolve './bus': -2 [ 277.234906][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2553'. [ 277.498513][T15074] netlink: 100 bytes leftover after parsing attributes in process `syz.9.2559'. [ 277.514840][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 277.747325][T15086] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 278.059399][T15100] syzkaller0: entered promiscuous mode [ 278.063386][T15100] syzkaller0: entered allmulticast mode [ 278.088135][T15100] tipc: Started in network mode [ 278.090237][T15100] tipc: Node identity de96cec7c6bc, cluster identity 4711 [ 278.093989][T15100] tipc: Enabled bearer , priority 0 [ 278.096776][T15101] tipc: Enabling of bearer rejected, already enabled [ 278.108865][T15101] tipc: Resetting bearer [ 278.120132][T15101] tipc: Disabling bearer [ 278.283599][T15114] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2567'. [ 278.340767][T15119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2569'. [ 278.424809][T15124] syzkaller0: entered promiscuous mode [ 278.426646][T15124] syzkaller0: entered allmulticast mode [ 278.434358][T15124] netlink: 276 bytes leftover after parsing attributes in process `syz.8.2571'. [ 278.501318][T15134] netlink: 'syz.0.2574': attribute type 5 has an invalid length. [ 278.637446][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 278.671457][T15137] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 278.674762][T15137] overlayfs: overlapping lowerdir path [ 278.730868][T15144] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 278.755800][ T6019] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 278.763060][T15146] netlink: 'syz.8.2578': attribute type 1 has an invalid length. [ 278.779971][T15146] bond1: entered promiscuous mode [ 278.782495][T15146] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.789590][T15146] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2578'. [ 278.936900][ T6019] usb 5-1: Using ep0 maxpacket: 8 [ 278.940813][ T6019] usb 5-1: config 2 interface 0 has no altsetting 0 [ 278.945834][ T6019] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 278.950058][ T6019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.953503][ T6019] usb 5-1: Product: syz [ 278.955405][ T6019] usb 5-1: Manufacturer: syz [ 278.957523][ T6019] usb 5-1: SerialNumber: syz [ 279.187358][ T6019] usb 5-1: USB disconnect, device number 46 [ 279.198069][T15156] ip6gre1: entered promiscuous mode [ 279.200278][T15156] ip6gre1: entered allmulticast mode [ 279.264485][T15158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.749575][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 279.806247][T15177] netlink: 'syz.0.2592': attribute type 1 has an invalid length. [ 279.826117][T15177] bond1: entered promiscuous mode [ 279.828703][T15177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.852112][T15177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.854491][T15177] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 279.857968][T15177] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 279.863117][T15177] bond1: (slave vxcan3): making interface the new active one [ 279.866874][T15177] vxcan3: entered promiscuous mode [ 279.871115][T15177] vxcan3: left promiscuous mode [ 279.873064][T15175] netlink: 'syz.8.2591': attribute type 1 has an invalid length. [ 279.919323][T15175] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 279.923346][T15175] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 279.929404][T15175] bond2: (slave vxcan3): making interface the new active one [ 279.933377][T15175] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 279.940031][T15175] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2591'. [ 279.945359][T15175] bond2 (unregistering): (slave vxcan3): Releasing backup interface [ 279.949533][T15175] bond2 (unregistering): Released all slaves [ 280.003128][T15182] kvm: kvm [15174]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 280.010139][T15182] kvm: kvm [15174]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 280.169270][T15185] netfs: Couldn't get user pages (rc=-14) [ 280.423547][T15206] "syz.0.2600" (15206) uses obsolete ecb(arc4) skcipher [ 280.424478][T15212] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 280.468795][T15218] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2604'. [ 280.488556][T15218] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.559876][T15229] tmpfs: Bad value for 'mpol' [ 280.573639][T15226] fuse: Bad value for 'fd' [ 280.759148][T15241] 9p: Bad value for 'dfltgid' [ 280.761287][T15241] 9p: Bad value for 'dfltgid' [ 280.850888][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 280.871245][T15248] nvme_fabrics: missing parameter 'transport=%s' [ 280.876697][T15248] nvme_fabrics: missing parameter 'nqn=%s' [ 280.911409][T15254] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 281.560667][T15297] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 281.673136][T15305] FAT-fs (sr0): bogus number of reserved sectors [ 281.675507][T15305] FAT-fs (sr0): Can't find a valid FAT filesystem [ 281.717177][T14590] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 281.888329][T14590] usb 13-1: Using ep0 maxpacket: 16 [ 281.894749][T14590] usb 13-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 281.900205][T14590] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.904983][T14590] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.908849][T14590] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 281.914799][T14590] usb 13-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 281.918710][T14590] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.924096][T14590] usb 13-1: config 0 descriptor?? [ 281.962868][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 282.056347][T15317] netlink: 'syz.6.2635': attribute type 1 has an invalid length. [ 282.075335][T15317] bond7: (slave geneve2): making interface the new active one [ 282.078252][T15317] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 282.080380][ T5982] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 282.083827][ T1150] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 282.088149][ T1150] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 282.095785][ T1150] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 282.099479][ T1150] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 282.253334][ T5982] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 282.255998][ T5982] usb 5-1: config 0 has no interface number 0 [ 282.258098][ T5982] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 282.261588][ T5982] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 282.265231][ T5982] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 282.268998][ T5982] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 282.272576][ T5982] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 282.276071][ T5982] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 282.280472][ T5982] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 282.283792][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.291616][ T5982] usb 5-1: config 0 descriptor?? [ 282.294111][T15314] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 282.296565][T15314] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 282.303071][ T5982] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 282.370648][T14590] input: HID 0458:5013 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:0458:5013.0009/input/input34 [ 282.456884][T14590] input: HID 0458:5013 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:0458:5013.0009/input/input35 [ 282.515662][ T5982] usb 5-1: USB disconnect, device number 47 [ 282.528396][ T5982] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 282.543215][T14590] kye 0003:0458:5013.0009: input,hiddev1,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.8-1/input0 [ 282.576004][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 282.576024][ T40] audit: type=1400 audit(1770792376.137:33832): avc: denied { append } for pid=15287 comm="syz.8.2625" name="event4" dev="devtmpfs" ino=3579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 282.587071][T14590] usb 13-1: USB disconnect, device number 3 [ 282.594912][T15322] fido_id[15322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb13/13-1/report_descriptor': No such file or directory [ 282.921975][T15324] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 283.031733][T15332] FAT-fs (sr0): bogus number of reserved sectors [ 283.035607][T15332] FAT-fs (sr0): Can't find a valid FAT filesystem [ 283.073713][ T40] audit: type=1400 audit(1770792376.595:33833): avc: denied { create } for pid=15333 comm="syz.6.2640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 283.082179][T15334] netlink: 'syz.6.2640': attribute type 29 has an invalid length. [ 283.084408][T15337] __nla_validate_parse: 3 callbacks suppressed [ 283.084422][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2641'. [ 283.085507][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 283.085541][ T40] audit: type=1400 audit(1770792376.604:33834): avc: denied { write } for pid=15333 comm="syz.6.2640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 283.103722][T15337] tipc: Cannot configure node identity twice [ 283.143170][T15341] : entered promiscuous mode [ 283.253603][T15352] xt_SECMARK: invalid mode: 2 [ 283.295056][T15355] FAT-fs (sr0): bogus number of reserved sectors [ 283.297095][T15355] FAT-fs (sr0): Can't find a valid FAT filesystem [ 283.367950][T15364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'. [ 283.372178][T15364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'. [ 283.447237][ T40] audit: type=1400 audit(1770792376.941:33835): avc: denied { getopt } for pid=15365 comm="syz.6.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 283.861117][ T40] audit: type=1400 audit(1770792377.334:33836): avc: denied { unmount } for pid=14195 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 283.925863][ T40] audit: type=1400 audit(1770792377.399:33837): avc: denied { bind } for pid=15405 comm="syz.8.2662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 284.039144][ T40] audit: type=1400 audit(1770792377.502:33838): avc: denied { getopt } for pid=15421 comm="syz.8.2665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 284.092331][T15424] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2666'. [ 284.095088][T15424] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2666'. [ 284.115825][T15425] SELinux: policydb magic number 0x11 does not match expected magic number 0xf97cff8c [ 284.119441][T15425] SELinux: failed to load policy [ 284.186928][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 284.340096][ T5999] libceph: connect (1)[c::]:6789 error -101 [ 284.342806][ T5999] libceph: mon0 (1)[c::]:6789 connect error [ 284.598615][ T40] audit: type=1400 audit(1770792378.026:33839): avc: denied { getopt } for pid=15441 comm="syz.0.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 284.603909][T15442] netlink: zone id is out of range [ 284.637867][ T10] libceph: connect (1)[c::]:6789 error -101 [ 284.640634][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 284.668873][ T5999] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 284.841694][ T5999] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 246, changing to 7 [ 284.845525][ T5999] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 16980, setting to 1024 [ 284.849216][ T5999] usb 11-1: config 0 interface 0 has no altsetting 0 [ 284.853227][ T5999] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 284.856267][ T5999] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 284.858999][ T5999] usb 11-1: Product: syz [ 284.860507][ T5999] usb 11-1: Manufacturer: syz [ 284.862043][ T5999] usb 11-1: SerialNumber: syz [ 284.865488][ T5999] usb 11-1: config 0 descriptor?? [ 284.869746][ T5999] usb 11-1: selecting invalid altsetting 0 [ 285.204598][ T6019] libceph: connect (1)[c::]:6789 error -101 [ 285.206608][ T6019] libceph: mon0 (1)[c::]:6789 connect error [ 285.210087][T15431] ceph: No mds server is up or the cluster is laggy [ 285.299188][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 285.566876][T15455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pid=15455 comm=syz.0.2674 [ 285.631797][T15457] kvm: user requested TSC rate below hardware speed [ 285.635757][T15457] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 286.017944][ T6107] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 286.021280][ T6107] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 286.024591][ T6107] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 286.027346][ T6107] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 286.030085][ T6107] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 286.032633][ T6107] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 286.035468][ T6107] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 286.039427][ T6107] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 286.041881][ T6107] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 286.044351][ T6107] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 286.052015][ T6107] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 286.080057][T15462] fido_id[15462]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 286.092291][T15464] bridge_slave_0: left allmulticast mode [ 286.094379][T15464] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.185702][T15468] netlink: 'syz.0.2679': attribute type 1 has an invalid length. [ 286.199903][T15468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.207579][T15468] bond2: entered allmulticast mode [ 286.233126][T15471] netlink: 'syz.0.2680': attribute type 13 has an invalid length. [ 286.235878][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2680'. [ 286.243794][ T1150] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.243883][T15471] netlink: 'syz.0.2680': attribute type 13 has an invalid length. [ 286.246631][ T1150] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.249059][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2680'. [ 286.253105][ T1150] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.257778][ T1150] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.355955][T15473] ptrace attach of "/syz-executor exec"[15475] was attempted by "/syz-executor exec"[15473] [ 286.359466][T15474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2681'. [ 286.359802][T15473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2681'. [ 286.411438][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 286.574908][T15478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2682'. [ 286.698828][ T40] audit: type=1400 audit(1770792635.981:33840): avc: denied { setopt } for pid=15480 comm="syz.0.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 287.523626][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 287.557156][ T6026] usb 11-1: USB disconnect, device number 31 [ 287.581925][ T40] audit: type=1400 audit(1770792636.813:33841): avc: denied { map } for pid=15490 comm="syz.0.2687" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 287.687963][T15497] netlink: 'syz.6.2689': attribute type 1 has an invalid length. [ 287.701704][T15497] bond8: entered promiscuous mode [ 287.703375][T15497] bond8: entered allmulticast mode [ 287.712890][T15497] bond8: (slave ip6gretap1): making interface the new active one [ 287.715412][T15497] ip6gretap1: entered promiscuous mode [ 287.717273][T15497] ip6gretap1: entered allmulticast mode [ 287.719626][T15497] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 287.951735][ T29] page_pool_release_retry() stalled pool shutdown: id 62, 47 inflight 60 sec [ 288.016156][ T6107] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 288.177748][ T6107] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 288.181525][ T6107] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 288.185021][ T6107] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 288.188882][ T6107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 288.193491][ T6107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 288.198576][ T6107] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 288.203956][ T6107] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 288.207760][ T6107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.216453][ T6107] usb 5-1: config 0 descriptor?? [ 288.219563][T15501] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 288.253443][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 288.253461][ T40] audit: type=1400 audit(1770792637.449:33843): avc: denied { read } for pid=15502 comm="syz.6.2691" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 288.285289][T15506] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 288.399748][ T40] audit: type=1400 audit(1770792637.570:33844): avc: denied { ioctl } for pid=15510 comm="syz.6.2694" path="socket:[72037]" dev="sockfs" ino=72037 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 288.444823][ T6107] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 288.473000][T15514] syzkaller0: entered promiscuous mode [ 288.474851][T15514] syzkaller0: entered allmulticast mode [ 288.478006][T15514] __nla_validate_parse: 2 callbacks suppressed [ 288.478016][T15514] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2695'. [ 288.610234][T15516] 8021q: VLANs not supported on ip6_vti0 [ 288.640380][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 288.656202][ T40] audit: type=1400 audit(1770792637.813:33845): avc: denied { read write } for pid=15500 comm="syz.0.2690" name="lp0" dev="devtmpfs" ino=3611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 288.658948][ C2] usblp0: nonzero read bulk status received: -71 [ 288.664705][ T40] audit: type=1400 audit(1770792637.813:33846): avc: denied { open } for pid=15500 comm="syz.0.2690" path="/dev/usb/lp0" dev="devtmpfs" ino=3611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 288.671133][T15501] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 288.674460][ T40] audit: type=1400 audit(1770792637.832:33847): avc: denied { write } for pid=15500 comm="syz.0.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 288.683738][ T40] audit: type=1400 audit(1770792637.841:33848): avc: denied { watch watch_reads } for pid=15500 comm="syz.0.2690" path="/87/file1" dev="tmpfs" ino=492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 288.727571][ T40] audit: type=1400 audit(1770792637.888:33849): avc: denied { append } for pid=15526 comm="syz.8.2699" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 288.728177][T15527] netlink: 'syz.8.2699': attribute type 4 has an invalid length. [ 288.743354][T15527] vivid-000: ================= START STATUS ================= [ 288.746535][T15527] vivid-000: Test Pattern: 75% Colorbar [ 288.752028][T15527] vivid-000: Fill Percentage of Frame: 4 [ 288.755353][T15527] vivid-000: Horizontal Movement: No Movement [ 288.758008][T15527] vivid-000: Vertical Movement: No Movement [ 288.760486][T15527] vivid-000: OSD Text Mode: All [ 288.762801][T15527] vivid-000: Show Border: false [ 288.765368][T15527] vivid-000: Show Square: false [ 288.767484][T15527] vivid-000: Sensor Flipped Horizontally: false [ 288.769926][T15527] vivid-000: Sensor Flipped Vertically: false [ 288.772405][T15527] vivid-000: Insert SAV Code in Image: false [ 288.775580][T15527] vivid-000: Insert EAV Code in Image: false [ 288.778103][T15527] vivid-000: Insert Video Guard Band: false [ 288.780238][T15527] vivid-000: Reduced Framerate: false [ 288.782536][T15527] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 288.786084][T15527] vivid-000: S-Video 000-0 Is Connected To: None [ 288.788538][T15527] vivid-000: Enable Capture Cropping: true [ 288.790830][T15527] vivid-000: Enable Capture Composing: true [ 288.793237][T15527] vivid-000: Enable Capture Scaler: true [ 288.795503][T15527] vivid-000: Timestamp Source: End of Frame [ 288.798207][T15527] vivid-000: Colorspace: sRGB [ 288.801177][T15527] vivid-000: Transfer Function: Default [ 288.801460][ T40] audit: type=1400 audit(1770792637.954:33850): avc: denied { read } for pid=15526 comm="syz.8.2699" lport=18795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 288.803460][T15527] vivid-000: Y'CbCr Encoding: Default [ 288.803504][T15527] vivid-000: HSV Encoding: Hue 0-179 [ 288.816501][T15527] vivid-000: Quantization: Default [ 288.818872][T15527] vivid-000: Apply Alpha To Red Only: false [ 288.821290][T15527] vivid-000: Standard Aspect Ratio: 4x3 [ 288.823198][T15527] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 288.826370][T15527] vivid-000: DV Timings: 4096x2160p60 inactive [ 288.829263][T15527] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 288.832036][T15527] vivid-000: Maximum EDID Blocks: 2 [ 288.834145][T15527] vivid-000: Limited RGB Range (16-235): false [ 288.836649][T15527] vivid-000: Rx RGB Quantization Range: Automatic [ 288.839782][T15527] vivid-000: Power Present: 0x00000001 [ 288.841166][ T6019] usb 5-1: USB disconnect, device number 48 [ 288.841698][T15527] tpg source WxH: 320x180 (Luma) [ 288.846330][T15527] tpg field: 1 [ 288.847755][T15527] tpg crop: (0,0)/320x180 [ 288.849215][T15527] tpg compose: (0,0)/320x180 [ 288.851250][T15527] tpg colorspace: 8 [ 288.852851][T15527] tpg transfer function: 0/0 [ 288.854733][T15527] tpg quantization: 0/0 [ 288.856058][ T6019] usblp0: removed [ 288.856405][T15527] tpg RGB range: 0/2 [ 288.856416][T15527] vivid-000: ================== END STATUS ================== [ 288.885530][ T40] audit: type=1400 audit(1770792638.038:33851): avc: denied { ioctl } for pid=15534 comm="syz.8.2701" path="socket:[70554]" dev="sockfs" ino=70554 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 288.906990][ T40] audit: type=1400 audit(1770792638.056:33852): avc: denied { write } for pid=15534 comm="syz.8.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 288.907533][ T5929] Bluetooth: hci6: ISO packet for unknown connection handle 0 [ 288.948944][T15535] kvm: vcpu 3: requested lapic timer restore with starting count register 0x390=96 (192 ns) > initial count (120 ns). Using initial count to start timer. [ 289.074489][ T6107] usb 11-1: new full-speed USB device number 32 using dummy_hcd [ 289.247880][ T6107] usb 11-1: config 0 has an invalid interface number: 205 but max is 0 [ 289.251255][ T6107] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.255592][ T6107] usb 11-1: config 0 has no interface number 0 [ 289.258761][ T6107] usb 11-1: config 0 interface 205 has no altsetting 0 [ 289.263309][ T6107] usb 11-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 289.266224][ T6107] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.268953][ T6107] usb 11-1: Product: syz [ 289.270331][ T6107] usb 11-1: Manufacturer: syz [ 289.271845][ T6107] usb 11-1: SerialNumber: syz [ 289.277914][ T6107] usb 11-1: config 0 descriptor?? [ 289.281579][ T6107] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 289.285243][ T6107] dvb-usb: bulk message failed: -22 (3/0) [ 289.300465][ T6107] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 289.304314][ T6107] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 289.307951][ T6107] usb 11-1: media controller created [ 289.310822][ T6107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.318134][ T6107] dvb-usb: bulk message failed: -22 (6/0) [ 289.320814][ T6107] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 289.326164][ T6107] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb11/11-1/input/input37 [ 289.332968][ T6107] dvb-usb: schedule remote query interval to 150 msecs. [ 289.336033][ T6107] dvb-usb: bulk message failed: -22 (3/0) [ 289.352489][ T6107] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 289.506214][ T6107] dvb-usb: bulk message failed: -22 (1/0) [ 289.508795][ T6107] dvb-usb: error while querying for an remote control event. [ 289.646759][T15555] afs: Unknown parameter 'IM&w#C' [ 289.680705][T15557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2706'. [ 289.684310][ T6107] dvb-usb: bulk message failed: -22 (1/0) [ 289.686114][ T6107] dvb-usb: error while querying for an remote control event. [ 289.748265][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 289.855594][ T6107] dvb-usb: bulk message failed: -22 (1/0) [ 289.858713][ T6107] dvb-usb: error while querying for an remote control event. [ 289.873370][T15570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15570 comm=syz.0.2710 [ 289.896011][T15569] openvswitch: netlink: Flow key attr not present in new flow. [ 289.924532][T15574] netlink: 'syz.8.2712': attribute type 4 has an invalid length. [ 289.930766][T15574] netlink: 'syz.8.2712': attribute type 4 has an invalid length. [ 290.026397][ T6107] dvb-usb: bulk message failed: -22 (1/0) [ 290.028348][ T6107] dvb-usb: error while querying for an remote control event. [ 290.197576][ T6107] dvb-usb: bulk message failed: -22 (1/0) [ 290.199750][ T6107] dvb-usb: error while querying for an remote control event. [ 290.227492][T15595] openvswitch: netlink: Flow actions attr not present in new flow. [ 290.281094][ T5982] IPVS: starting estimator thread 0... [ 290.285815][T15598] No source specified [ 290.355872][T15606] ip6t_srh: unknown srh match flags 4000 [ 290.369235][ T6107] dvb-usb: bulk message failed: -22 (1/0) [ 290.372687][ T6107] dvb-usb: error while querying for an remote control event. [ 290.400689][T15599] IPVS: using max 27 ests per chain, 64800 per kthread [ 290.429460][T15606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2722'. [ 290.436054][T15606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2722'. [ 290.440150][T15606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2722'. [ 290.444971][T15606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2722'. [ 290.463749][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2725'. [ 290.472968][T15613] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2725'. [ 290.540707][ T6107] dvb-usb: bulk message failed: -22 (1/0) [ 290.552683][ T6107] dvb-usb: error while querying for an remote control event. [ 290.587841][T15621] syzkaller0: entered promiscuous mode [ 290.589706][T15621] syzkaller0: entered allmulticast mode [ 290.721466][ T6107] dvb-usb: bulk message failed: -22 (1/0) [ 290.723396][ T6107] dvb-usb: error while querying for an remote control event. [ 290.807522][ T6019] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 290.871297][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 290.903360][ T6107] dvb-usb: bulk message failed: -22 (1/0) [ 290.905237][ T6107] dvb-usb: error while querying for an remote control event. [ 290.978305][ T6019] usb 5-1: Using ep0 maxpacket: 32 [ 290.981427][ T6019] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 290.987251][ T6019] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 290.990981][ T6019] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 290.994369][ T6019] usb 5-1: Product: syz [ 290.995937][ T6019] usb 5-1: Manufacturer: syz [ 290.997546][ T6019] usb 5-1: SerialNumber: syz [ 291.002616][ T6019] usb 5-1: config 0 descriptor?? [ 291.005425][T15620] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 291.009273][ T6019] hub 5-1:0.0: bad descriptor, ignoring hub [ 291.011393][ T6019] hub 5-1:0.0: probe with driver hub failed with error -5 [ 291.075474][ T6107] dvb-usb: bulk message failed: -22 (1/0) [ 291.077828][ T6107] dvb-usb: error while querying for an remote control event. [ 291.245560][ T6107] dvb-usb: bulk message failed: -22 (1/0) [ 291.247597][ T6107] dvb-usb: error while querying for an remote control event. [ 291.417117][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 291.419029][ T29] dvb-usb: error while querying for an remote control event. [ 291.589051][ T6107] dvb-usb: bulk message failed: -22 (1/0) [ 291.591053][ T6107] dvb-usb: error while querying for an remote control event. [ 291.759015][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 291.761049][ T29] dvb-usb: error while querying for an remote control event. [ 291.812511][ T10] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 291.940829][ T6107] dvb-usb: bulk message failed: -22 (1/0) [ 291.942796][ T6107] dvb-usb: error while querying for an remote control event. [ 291.974503][ T10] usb 13-1: Using ep0 maxpacket: 8 [ 291.979443][ T10] usb 13-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 291.983174][ T10] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.983621][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 291.993832][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 291.994496][ T6013] usb 5-1: USB disconnect, device number 49 [ 291.997059][ T10] pvrusb2: ********** [ 292.000775][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 292.005155][ T10] pvrusb2: Important functionality might not be entirely working. [ 292.008438][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 292.013058][ T10] pvrusb2: ********** [ 292.032449][ T6013] usb 11-1: USB disconnect, device number 32 [ 292.056576][ T6013] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 292.130536][T15625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2730'. [ 292.205151][ T2493] pvrusb2: Invalid write control endpoint [ 292.245526][ T2493] pvrusb2: Invalid write control endpoint [ 292.247461][ T2493] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 292.250478][ T2493] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 292.252917][ T2493] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 292.256121][ T2493] pvrusb2: Device being rendered inoperable [ 292.258151][ T2493] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 292.260503][ T2493] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 292.265840][ T2493] pvrusb2: Attached sub-driver cx25840 [ 292.268045][ T2493] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 292.274615][ T2493] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 292.424826][T15623] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2729'. [ 292.428005][T15623] netlink: 'syz.8.2729': attribute type 3 has an invalid length. [ 292.431250][T15623] netlink: 'syz.8.2729': attribute type 3 has an invalid length. [ 292.444301][T15623] netdevsim netdevsim8: Firmware load for './file0/file0/..' refused, path contains '..' component [ 292.450748][ T6026] usb 13-1: USB disconnect, device number 4 [ 292.698423][T15631] bond3: entered promiscuous mode [ 292.701102][T15631] 8021q: adding VLAN 0 to HW filter on device bond3 [ 292.790580][T15636] [U] v3f"S/4:XTzWtlW= [ 292.792950][T15636] [U] J"e:" [ 293.091689][T15647] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 293.095845][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 293.824159][T15671] batadv_slave_1: entered promiscuous mode [ 293.827462][T15670] batadv_slave_1: left promiscuous mode [ 293.940891][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 293.940908][ T40] audit: type=1400 audit(1770792642.741:33860): avc: denied { create } for pid=15673 comm="syz.0.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 293.956694][ T5934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.960117][ T5934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.967274][ T5934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.970928][ T5934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.975756][ T5934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.983119][ T40] audit: type=1400 audit(1770792642.797:33861): avc: denied { create } for pid=15681 comm="syz.0.2747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 293.992600][ T40] audit: type=1400 audit(1770792642.806:33862): avc: denied { ioctl } for pid=15681 comm="syz.0.2747" path="socket:[71374]" dev="sockfs" ino=71374 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 294.039668][T15684] SELinux: failed to load policy [ 294.137169][T15677] chnl_net:caif_netlink_parms(): no params data found [ 294.193811][T15677] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.196930][T15677] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.202825][T15677] bridge_slave_0: entered allmulticast mode [ 294.208651][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 294.223650][T15677] bridge_slave_0: entered promiscuous mode [ 294.249867][T15677] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.256286][T15677] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.259231][T15677] bridge_slave_1: entered allmulticast mode [ 294.265099][T15677] bridge_slave_1: entered promiscuous mode [ 294.295512][T14982] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.330005][T15707] __nla_validate_parse: 5 callbacks suppressed [ 294.330016][T15707] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2755'. [ 294.335031][T15677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.340469][T15677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.356761][T15677] team0: Port device team_slave_0 added [ 294.370178][T15677] team0: Port device team_slave_1 added [ 294.385342][T15677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.387597][T15677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.396425][T15677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.432459][T15677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.435174][T15677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.435199][T15677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.457032][ T40] audit: type=1400 audit(1770792643.246:33863): avc: denied { connect } for pid=15710 comm="syz.0.2757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 294.460359][ T40] audit: type=1400 audit(1770792643.246:33864): avc: denied { bind } for pid=15710 comm="syz.0.2757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 294.491458][ T40] audit: type=1400 audit(1770792643.274:33865): avc: denied { listen } for pid=15710 comm="syz.0.2757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 294.501786][ T40] audit: type=1400 audit(1770792643.274:33866): avc: denied { accept } for pid=15710 comm="syz.0.2757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 294.512608][T14982] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.550051][T15726] openvswitch: netlink: Missing valid actions attribute. [ 294.554286][T15726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.558394][ T40] audit: type=1400 audit(1770792643.339:33867): avc: denied { accept } for pid=15725 comm="syz.8.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 294.561765][T15677] hsr_slave_0: entered promiscuous mode [ 294.564888][ T40] audit: type=1400 audit(1770792643.339:33868): avc: denied { read } for pid=15725 comm="syz.8.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 294.567056][T15677] hsr_slave_1: entered promiscuous mode [ 294.583957][T15722] syzkaller0: entered promiscuous mode [ 294.585958][T15722] syzkaller0: entered allmulticast mode [ 294.589022][T15722] 0: reclassify loop, rule prio 0, protocol 800 [ 294.614124][T14982] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.715953][T15677] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.736967][T14982] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.794599][T15677] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.804569][ T40] audit: type=1400 audit(1770792643.564:33869): avc: denied { ioctl } for pid=15731 comm="syz.8.2764" path="/109/file0/file0" dev="fuse" ino=67 ioctlcmd=0x542d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 294.919503][T15677] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.954136][T15735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.987892][ T6019] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 294.991280][ T6019] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 295.011925][T11366] wlan1: authenticated [ 295.012375][T15735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.030462][T11366] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 295.071330][T11366] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 295.073175][T15735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.074758][T11366] wlan1: associated [ 295.208296][T14982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.217594][T14982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.222850][T14982] bond0 (unregistering): Released all slaves [ 295.248213][T15677] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.320439][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 295.464733][T15677] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 295.479938][T15677] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 295.494673][T15677] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 295.498742][T15677] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 295.641340][T15764] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2768'. [ 295.642062][T15677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.648831][T15764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.654584][T15764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.681816][T14982] hsr_slave_0: left promiscuous mode [ 295.688760][T14982] hsr_slave_1: left promiscuous mode [ 295.690872][T14982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.693277][T14982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.696422][T14982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.700546][T14982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.717022][T14982] veth1_macvtap: left promiscuous mode [ 295.718844][T14982] veth0_macvtap: left promiscuous mode [ 295.720658][T14982] veth1_vlan: left promiscuous mode [ 295.722501][T14982] veth0_vlan: left promiscuous mode [ 295.854874][T15772] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2770'. [ 295.859345][T15773] binder: 15766:15773 unknown command 0 [ 295.861152][T15773] binder: 15766:15773 ioctl c0306201 2000000004c0 returned -22 [ 296.126429][T14982] team0 (unregistering): Port device team_slave_1 removed [ 296.165041][T14982] team0 (unregistering): Port device team_slave_0 removed [ 296.167970][ T5929] Bluetooth: hci0: command tx timeout [ 296.422052][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 296.536361][T15767] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2769'. [ 296.542847][T15767] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2769'. [ 296.547492][T15770] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2770'. [ 296.551161][T15770] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2770'. [ 296.582570][T15677] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.606640][T14990] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.609354][T14990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.623041][T11360] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.625460][T11360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.747996][T15794] overlay: ./file0 is not a directory [ 296.761026][T15804] netlink: 4456 bytes leftover after parsing attributes in process `syz.8.2778'. [ 296.769083][T15804] netlink: 'syz.8.2778': attribute type 27 has an invalid length. [ 296.840692][T15808] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2778'. [ 296.844895][T15808] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2778'. [ 296.858251][T15804] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.860841][T15804] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.904101][T15816] netlink: 'syz.8.2778': attribute type 5 has an invalid length. [ 296.959119][T15804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.976622][T15804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.127461][T15804] bond1: left promiscuous mode [ 297.134469][T15804] ip6gre1: left promiscuous mode [ 297.136702][T15804] ip6gre1: left allmulticast mode [ 297.154822][T14983] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.158636][T14983] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.163988][T14983] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.172168][T14983] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.198045][T15677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.201139][T15830] xt_hashlimit: size too large, truncated to 1048576 [ 297.232597][T15677] veth0_vlan: entered promiscuous mode [ 297.262589][T15677] veth1_vlan: entered promiscuous mode [ 297.303108][T15677] veth0_macvtap: entered promiscuous mode [ 297.311793][T15677] veth1_macvtap: entered promiscuous mode [ 297.336746][T15677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.355508][T15677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.367361][ T1150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.369105][T15847] IPVS: Scheduler module ip_vs_sip not found [ 297.376001][ T1150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.400422][ T1150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.403550][ T1150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.455249][T11360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.457816][T11360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.485880][T14983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.489300][T14983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.534414][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 297.773842][T15906] netlink: 'syz.0.2800': attribute type 1 has an invalid length. [ 297.800038][T15906] 8021q: adding VLAN 0 to HW filter on device bond4 [ 297.825582][T15906] bond4: (slave geneve2): making interface the new active one [ 297.829540][T15906] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 298.400670][ T5929] Bluetooth: hci0: command tx timeout [ 298.514773][T15994] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 298.517851][T15994] SELinux: failed to load policy [ 298.538984][T15994] SELinux: ebitmap: empty map [ 298.540696][T15994] SELinux: failed to load policy [ 298.606741][T16016] netlink: 'syz.1.2822': attribute type 3 has an invalid length. [ 298.649252][T16022] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 298.651952][T16022] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 298.655193][T16022] vhci_hcd vhci_hcd.0: Device attached [ 298.657369][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 298.658129][T16024] usbip_core: unknown command [ 298.661682][T16024] vhci_hcd: unknown pdu 808464432 [ 298.664602][T16024] usbip_core: unknown command [ 298.670408][T11360] vhci_hcd vhci_hcd.6: stop threads [ 298.672170][T11360] vhci_hcd vhci_hcd.6: release socket [ 298.673882][T11360] vhci_hcd vhci_hcd.6: disconnect device [ 298.816370][T16042] overlayfs: failed to resolve './bus': -2 [ 298.967607][ T9] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 299.128747][ T9] usb 13-1: Using ep0 maxpacket: 8 [ 299.131768][ T9] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 299.134323][ T9] usb 13-1: config 0 has no interface number 0 [ 299.136327][ T9] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 299.140278][ T9] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 299.143956][ T9] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 299.147441][ T9] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 299.152036][ T9] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 299.154928][ T9] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.158789][ T9] usb 13-1: config 0 descriptor?? [ 299.164622][ T9] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 299.308815][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 299.308827][ T40] audit: type=1400 audit(1770792647.771:33888): avc: denied { wake_alarm } for pid=16059 comm="syz.0.2836" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 299.327068][T16062] fuse: Bad value for 'fd' [ 299.363237][ T5971] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 299.379940][ T9] usb 13-1: USB disconnect, device number 5 [ 299.385472][ T9] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 299.521207][T16060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.536514][ T5971] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 299.540246][ T5971] usb 6-1: config 0 has no interface number 0 [ 299.542878][ T5971] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 299.547821][ T5971] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 299.552867][ T5971] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 299.555204][ T5971] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 299.560664][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 299.563621][ T5971] usb 6-1: Product: syz [ 299.565635][ T5971] usb 6-1: SerialNumber: syz [ 299.570240][ T5971] usb 6-1: config 0 descriptor?? [ 299.574062][ T5971] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 299.577404][ T5971] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input39 [ 299.736006][T16060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.758968][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 299.791009][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 299.806229][ T9] usb 6-1: USB disconnect, device number 17 [ 299.820105][ T9] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 299.845300][T16103] fuse: Bad value for 'fd' [ 299.903248][ T40] audit: type=1400 audit(1770792648.332:33889): avc: denied { setopt } for pid=16106 comm="syz.6.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 300.052857][T16115] qnx4: no qnx4 filesystem (no root dir). [ 300.131210][T16126] netlink: 'syz.0.2850': attribute type 2 has an invalid length. [ 300.138248][T16119] __nla_validate_parse: 6 callbacks suppressed [ 300.138289][T16119] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2850'. [ 300.241042][T16135] overlay: ./file1 is not a directory [ 300.250326][T16129] macsec2: entered promiscuous mode [ 300.321361][T16146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.377557][T16159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2861'. [ 300.392259][T16157] netlink: 'syz.8.2860': attribute type 6 has an invalid length. [ 300.394997][T16156] netlink: 'syz.8.2860': attribute type 6 has an invalid length. [ 300.399930][T16159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.414493][T16165] erspan1: entered promiscuous mode [ 300.417792][T16163] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 300.430408][T16168] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 300.450057][T16159] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 300.465039][ T40] audit: type=1400 audit(1770792648.856:33890): avc: denied { watch } for pid=16162 comm="syz.6.2862" path="/428/bus/file0" dev="overlay" ino=2294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 300.501166][ T40] audit: type=1400 audit(1770792648.893:33891): avc: denied { unmount } for pid=10778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 300.572719][ T40] audit: type=1400 audit(1770792648.968:33892): avc: denied { watch watch_reads } for pid=16184 comm="syz.6.2867" path="/proc/1330" dev="proc" ino=74543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 300.629693][ T5929] Bluetooth: hci0: command tx timeout [ 300.639268][T16196] can0: slcan on ttynull. [ 300.734030][T16195] can0 (unregistered): slcan off ttynull. [ 300.783256][ T40] audit: type=1400 audit(1770792649.155:33893): avc: denied { ioctl } for pid=16212 comm="syz.8.2877" path="socket:[76234]" dev="sockfs" ino=76234 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 300.798842][ T40] audit: type=1400 audit(1770792649.164:33894): avc: denied { mounton } for pid=16212 comm="syz.8.2877" path="/135/bus" dev="tmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 300.811461][T16213] MTD: Couldn't look up './bus': -15 [ 300.815108][ T40] audit: type=1400 audit(1770792649.183:33895): avc: denied { write } for pid=16212 comm="syz.8.2877" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 300.846778][T16219] netlink: 'syz.6.2879': attribute type 29 has an invalid length. [ 300.880545][T16222] overlay: ./file0 is not a directory [ 300.882596][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 301.026234][T16235] netlink: 384 bytes leftover after parsing attributes in process `syz.8.2885'. [ 301.029674][ T40] audit: type=1400 audit(1770792649.389:33896): avc: denied { append } for pid=16236 comm="syz.1.2884" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 301.041244][T16238] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 301.128765][ T40] audit: type=1400 audit(1770792649.482:33897): avc: denied { getopt } for pid=16221 comm="syz.0.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 301.381492][T16268] nvme_fabrics: missing parameter 'transport=%s' [ 301.384826][T16268] nvme_fabrics: missing parameter 'nqn=%s' [ 301.389351][T16271] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2896'. [ 301.392455][T16268] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2895'. [ 301.436164][T16275] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2898'. [ 301.474823][T16279] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2900'. [ 301.571301][T16281] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 301.959258][ T29] IPVS: starting estimator thread 0... [ 301.965652][T16302] tipc: Enabling of bearer rejected, already enabled [ 301.989189][T16306] 9p: Bad value for 'version' [ 301.994241][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 302.005464][T16306] xt_connbytes: Forcing CT accounting to be enabled [ 302.008339][T16306] set match dimension is over the limit! [ 302.011150][T16306] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.058871][T16304] IPVS: using max 46 ests per chain, 110400 per kthread [ 302.147053][T16317] syzkaller0: entered promiscuous mode [ 302.148882][T16317] syzkaller0: entered allmulticast mode [ 302.261891][ T9] usb 11-1: new high-speed USB device number 33 using dummy_hcd [ 302.275688][ T29] Process accounting resumed [ 302.299190][T16324] Process accounting resumed [ 302.362982][T16331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2915'. [ 302.375621][T16326] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 3b81, magic 3b != 6b] [ 302.422054][ T9] usb 11-1: Using ep0 maxpacket: 8 [ 302.437916][ T9] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 302.441063][ T9] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 302.444417][ T9] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 302.447483][ T9] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.451527][ T9] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 302.452465][T16340] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2918'. [ 302.457923][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.530189][T16342] netfs: Couldn't get user pages (rc=-14) [ 302.633009][T16334] Attempt to restore checkpoint with obsolete wellknown handles [ 302.635640][T16334] Attempt to restore checkpoint with obsolete wellknown handles [ 302.673861][T16344] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2920'. [ 302.677653][ T9] usb 11-1: GET_CAPABILITIES returned 0 [ 302.679657][ T9] usbtmc 11-1:16.0: can't read capabilities [ 302.709140][ T1474] usb 11-1: USB disconnect, device number 33 [ 302.783001][T11360] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.787809][T11360] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.840015][ T5929] Bluetooth: hci0: command tx timeout [ 302.930960][T16363] hsr_slave_1 (unregistering): left promiscuous mode [ 302.944383][ T5934] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.949239][ T5934] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.952220][ T5934] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.961281][ T5934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.966007][T11360] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.966223][ T5934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.969640][T11360] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.999377][T16376] A link change request failed with some changes committed already. Interface ! may have been left with an inconsistent configuration, please check. [ 303.029589][T16378] team0: Device gtp1 is of different type [ 303.096644][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 303.099849][T11360] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.103182][T11360] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.118836][T16385] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 303.157329][T16392] comedi comedi3: dt2801: I/O port conflict (0x6,2) [ 303.166768][T16392] comedi comedi3: s526: I/O port conflict (0x8000,64) [ 303.197569][T16394] tc_dump_action: action bad kind [ 303.239521][T16408] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 303.267534][T11360] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.270864][T11360] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.291981][T16373] chnl_net:caif_netlink_parms(): no params data found [ 303.321286][T16416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=16416 comm=syz.1.2942 [ 303.374613][T16373] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.377000][T16373] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.379389][T16373] bridge_slave_0: entered allmulticast mode [ 303.382376][T16373] bridge_slave_0: entered promiscuous mode [ 303.388407][T16373] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.390766][T16373] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.393188][T16373] bridge_slave_1: entered allmulticast mode [ 303.402407][T16373] bridge_slave_1: entered promiscuous mode [ 303.417121][T16424] overlay: ./file0 is not a directory [ 303.429175][T16373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.462461][T16373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.518589][T16373] team0: Port device team_slave_0 added [ 303.523268][T11360] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.758078][T11360] bond4 (unregistering): (slave geneve2): Releasing active interface [ 304.057748][T16439] netlink: 'syz.1.2946': attribute type 6 has an invalid length. [ 304.105388][T11360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.109536][T11360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.113109][T16440] netlink: 'syz.1.2946': attribute type 6 has an invalid length. [ 304.116011][T11360] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 304.124090][T11360] bond0 (unregistering): Released all slaves [ 304.211826][T11360] bond1 (unregistering): Released all slaves [ 304.218806][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 304.319551][T11360] bond2 (unregistering): Released all slaves [ 304.420739][T11360] bond3 (unregistering): Released all slaves [ 304.540393][T11360] bond4 (unregistering): Released all slaves [ 304.548580][T16373] team0: Port device team_slave_1 added [ 304.613733][T16373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.617473][T16373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.629554][T16373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.638653][T16373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.641211][T16373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.650668][T16373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.684453][T11360] tipc: Left network mode [ 304.735321][T16373] hsr_slave_0: entered promiscuous mode [ 304.737790][T16373] hsr_slave_1: entered promiscuous mode [ 304.741226][T16373] debugfs: 'hsr0' already exists in 'hsr' [ 304.744671][T16373] Cannot create hsr debugfs directory [ 304.891295][T16467] Cannot find add_set index 65532 as target [ 304.929430][ T40] kauditd_printk_skb: 1329 callbacks suppressed [ 304.929447][ T40] audit: type=1400 audit(1770792653.035:35227): avc: denied { connect } for pid=16468 comm="syz.1.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 304.989189][ T40] audit: type=1400 audit(1770792653.082:35228): avc: denied { write } for pid=16468 comm="syz.1.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 305.077382][T16480] fuse: Bad value for 'fd' [ 305.101076][ T40] audit: type=1400 audit(1770792653.194:35229): avc: denied { read } for pid=16468 comm="syz.1.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 305.151271][ T5934] Bluetooth: hci1: command tx timeout [ 305.190603][T11360] hsr_slave_0: left promiscuous mode [ 305.200770][T16492] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 305.204369][T11360] hsr_slave_1: left promiscuous mode [ 305.207393][T11360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.210513][T11360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.224867][T11360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.227349][T11360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.243578][T11360] veth1_macvtap: left promiscuous mode [ 305.246547][T11360] veth0_macvtap: left promiscuous mode [ 305.248702][T11360] veth1_vlan: left promiscuous mode [ 305.250630][T11360] veth0_vlan: left promiscuous mode [ 305.320460][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 306.170827][T16522] __nla_validate_parse: 10 callbacks suppressed [ 306.170838][T16522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2962'. [ 306.196347][T16525] fuse: Bad value for 'fd' [ 306.236052][T16530] netlink: 'syz.6.2964': attribute type 10 has an invalid length. [ 306.259730][T16530] netlink: 'syz.6.2964': attribute type 10 has an invalid length. [ 306.265075][T16530] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2964'. [ 306.335451][T16539] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 306.341321][T16540] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 306.359636][ T40] audit: type=1400 audit(1770792654.372:35230): avc: denied { ioctl } for pid=16538 comm="syz.6.2967" path="socket:[77568]" dev="sockfs" ino=77568 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 306.432731][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 306.458981][ T40] audit: type=1400 audit(1770792654.466:35231): avc: denied { write } for pid=16550 comm="syz.1.2968" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 306.462701][T16551] autofs4:pid:16551:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 306.507987][T16555] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 306.533057][T16551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56086 sclass=netlink_route_socket pid=16551 comm=syz.1.2968 [ 306.603522][T11360] IPVS: stop unused estimator thread 0... [ 306.649450][T16373] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 306.659345][T16373] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 306.663702][T16373] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 306.668667][T16373] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 306.750035][T16584] macvlan0: entered promiscuous mode [ 306.752021][T16584] macvlan0: entered allmulticast mode [ 306.754587][T16584] veth1_vlan: entered allmulticast mode [ 306.797427][T16594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2974'. [ 306.800343][T16594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2974'. [ 306.813821][T16373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.817437][ T40] audit: type=1400 audit(1770792654.793:35232): avc: denied { listen } for pid=16596 comm="syz.8.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 306.831335][T16594] netlink: 'syz.1.2974': attribute type 28 has an invalid length. [ 306.846023][T16373] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.862773][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.865080][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.870921][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.873230][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.876799][T16603] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 306.881402][T16603] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 306.887235][T16603] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2975'. [ 306.942317][T16603] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16603 comm=syz.8.2975 [ 306.955621][T16603] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 307.062025][T16373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.074036][T16619] team_slave_0: entered promiscuous mode [ 307.076074][T16619] team_slave_1: entered promiscuous mode [ 307.087182][T16619] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 307.153192][ T40] audit: type=1400 audit(1770792655.111:35233): avc: denied { connect } for pid=16627 comm="syz.1.2978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 307.239566][T16373] veth0_vlan: entered promiscuous mode [ 307.244681][T16373] veth1_vlan: entered promiscuous mode [ 307.257526][T16639] autofs: Bad value for 'fd' [ 307.261949][T16373] veth0_macvtap: entered promiscuous mode [ 307.265853][T16373] veth1_macvtap: entered promiscuous mode [ 307.276412][T16373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.288758][T16373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.294049][ T1150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.302421][ T1150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.309555][ T1150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.316286][ T1150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.328925][T16646] overlay: filesystem on ./bus not supported as upperdir [ 307.374542][ T5934] Bluetooth: hci1: command tx timeout [ 307.376979][T11360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.376992][T11360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.410613][T14996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.413723][T14996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.555804][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 307.597734][ T40] audit: type=1804 audit(1770792655.522:35234): pid=16672 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2986" name="/newroot/1/file0" dev="tmpfs" ino=24 res=1 errno=0 [ 307.611124][ T40] audit: type=1800 audit(1770792655.522:35235): pid=16672 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2986" name="file0" dev="tmpfs" ino=24 res=0 errno=0 [ 307.643197][T16676] netlink: 'syz.4.2987': attribute type 10 has an invalid length. [ 307.649980][T16676] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 307.659917][T16676] bridge_slave_0: left allmulticast mode [ 307.661818][T16676] bridge_slave_0: left promiscuous mode [ 307.665490][T16676] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.669809][T16676] bridge_slave_1: left allmulticast mode [ 307.671722][T16676] bridge_slave_1: left promiscuous mode [ 307.673526][ T60] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 307.676476][T16676] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.681472][T16676] bond0: (slave bond_slave_0): Releasing backup interface [ 307.687304][T16676] bond0: (slave bond_slave_1): Releasing backup interface [ 307.692739][T16676] team0: Port device team_slave_0 removed [ 307.707283][T16676] team0: Port device team_slave_1 removed [ 307.710399][T16676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.712754][T16676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.718297][T16676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.723404][T16676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.728028][T16676] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 307.755910][ T5999] libceph: connect (1)[c::]:6789 error -101 [ 307.758219][ T5999] libceph: mon0 (1)[c::]:6789 connect error [ 307.812472][ T60] usb 6-1: device descriptor read/64, error -71 [ 307.867321][T16684] ceph: No mds server is up or the cluster is laggy [ 308.079882][ T60] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 308.186827][ T5999] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 308.230265][ T60] usb 6-1: device descriptor read/64, error -71 [ 308.236819][T16717] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 308.347450][ T5999] usb 13-1: Using ep0 maxpacket: 8 [ 308.347810][ T60] usb usb6-port1: attempt power cycle [ 308.352178][ T5999] usb 13-1: config 179 has an invalid interface number: 65 but max is 0 [ 308.355680][ T5999] usb 13-1: config 179 has no interface number 0 [ 308.360819][ T5999] usb 13-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 308.364518][ T5999] usb 13-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 308.368325][ T5999] usb 13-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 308.373578][ T5999] usb 13-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 308.378265][ T5999] usb 13-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 308.385005][ T5999] usb 13-1: config 179 interface 65 has no altsetting 0 [ 308.388033][ T5999] usb 13-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 308.394794][ T5999] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.407793][T16702] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 308.419318][ T5999] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:179.65/input/input41 [ 308.470023][T16734] xfrm1: entered allmulticast mode [ 308.478011][ T5325] input input41: unable to receive magic message: -110 [ 308.481723][ T5325] input input41: unable to receive magic message: -32 [ 308.484265][T16734] netlink: 'syz.6.2996': attribute type 10 has an invalid length. [ 308.484330][ C0] xpad 13-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 308.486797][T16734] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2996'. [ 308.494207][ T5325] input input41: unable to receive magic message: -32 [ 308.500587][ T5325] input input41: unable to receive magic message: -32 [ 308.521088][ T5325] input input41: unable to receive magic message: -32 [ 308.524982][ T5325] input input41: unable to receive magic message: -32 [ 308.657365][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 308.686512][T16043] usb 13-1: USB disconnect, device number 6 [ 308.688464][ C0] xpad 13-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 308.723636][ T60] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 308.739427][ T40] audit: type=1400 audit(1770792656.597:35236): avc: denied { setopt } for pid=16742 comm="syz.4.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 308.755355][ T60] usb 6-1: device descriptor read/8, error -71 [ 308.963638][T16750] autofs: Unknown parameter 'ui' [ 308.966958][T16750] autofs: Unknown parameter 'ui' [ 309.010467][ T60] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 309.043120][ T60] usb 6-1: device descriptor read/8, error -71 [ 309.160194][ T60] usb usb6-port1: unable to enumerate USB device [ 309.325423][T16763] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3005'. [ 309.598615][ T5934] Bluetooth: hci1: command tx timeout [ 309.769665][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 309.962787][T16793] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 310.327992][T16816] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3017'. [ 310.331315][T16816] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3017'. [ 310.334245][T16816] netlink: 'syz.8.3017': attribute type 11 has an invalid length. [ 310.341328][T16816] netlink: 'syz.8.3017': attribute type 7 has an invalid length. [ 310.481196][T16829] btrfs: Unknown parameter ' 6`un/X˜ +R6{I8:' [ 310.492771][T16827] netfs: Couldn't get user pages (rc=-14) [ 310.739205][T16861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3028'. [ 310.795350][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 310.795362][ T40] audit: type=1400 audit(1770792658.514:35243): avc: denied { accept } for pid=16866 comm="syz.6.3030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 310.881926][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 310.900237][ T40] audit: type=1400 audit(1770792658.617:35244): avc: denied { bind } for pid=16860 comm="syz.1.3028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 310.904166][T16871] netlink: 'syz.8.3031': attribute type 8 has an invalid length. [ 310.907737][ T40] audit: type=1400 audit(1770792658.617:35245): avc: denied { ioctl } for pid=16870 comm="syz.8.3031" path="socket:[81040]" dev="sockfs" ino=81040 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 310.929859][T16874] sctp: [Deprecated]: syz.6.3030 (pid 16874) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.929859][T16874] Use struct sctp_sack_info instead [ 311.018017][T10874] IPVS: starting estimator thread 0... [ 311.138859][T16883] IPVS: using max 46 ests per chain, 110400 per kthread [ 311.181181][ T40] audit: type=1400 audit(1770792658.879:35246): avc: denied { write } for pid=16897 comm="syz.4.3038" name="/" dev="9p" ino=72614019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 311.271158][ T40] audit: type=1804 audit(1770792658.963:35247): pid=16902 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.3041" name="file0" dev="ramfs" ino=79130 res=1 errno=0 [ 311.283744][T16905] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 311.457610][T16921] xt_hashlimit: size too large, truncated to 1048576 [ 311.549980][T16927] __nla_validate_parse: 3 callbacks suppressed [ 311.549996][T16927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3046'. [ 311.674717][T16930] Failed to get privilege flags for destination (handle=0x2:0x7) [ 311.808012][ T40] audit: type=1400 audit(1770792659.468:35248): avc: denied { bind } for pid=16946 comm="syz.6.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 311.816689][ T40] audit: type=1400 audit(1770792659.468:35249): avc: denied { rename } for pid=16943 comm="syz.1.3050" name="file0" dev="tmpfs" ino=382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 311.825713][ T40] audit: type=1400 audit(1770792659.477:35250): avc: denied { read } for pid=16943 comm="syz.1.3050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 311.868943][ T40] audit: type=1400 audit(1770792659.524:35251): avc: denied { setopt } for pid=16943 comm="syz.1.3050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 311.990177][ T40] audit: type=1400 audit(1770792659.636:35252): avc: denied { create } for pid=16957 comm="syz.8.3054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 311.993461][T16968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3056'. [ 311.997088][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 312.019277][T16973] netlink: 'syz.8.3058': attribute type 1 has an invalid length. [ 312.073285][T16973] 8021q: adding VLAN 0 to HW filter on device bond4 [ 312.077941][T16973] bond3: (slave bond4): making interface the new active one [ 312.082010][T16973] bond3: (slave bond4): Enslaving as an active interface with an up link [ 312.133607][T10874] usb 11-1: new high-speed USB device number 34 using dummy_hcd [ 312.197173][T16979] bond2 (unregistering): Released all slaves [ 312.273099][T16976] netlink: 'syz.4.3059': attribute type 8 has an invalid length. [ 312.315584][T10874] usb 11-1: Using ep0 maxpacket: 32 [ 312.319357][T10874] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.323336][T10874] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.329659][T10874] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 312.336042][T10874] usb 11-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 312.344901][T10874] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.345815][T17004] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3067'. [ 312.351140][T10874] usb 11-1: config 0 descriptor?? [ 312.425741][T17010] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 312.756973][T17032] fuse: Bad value for 'user_id' [ 312.759168][T17032] fuse: Bad value for 'user_id' [ 312.788756][T10874] hid (null): invalid report_size 25705 [ 312.806589][T10874] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0458:5011.000B/input/input42 [ 312.877088][T10874] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0458:5011.000B/input/input43 [ 312.904398][T10874] kye 0003:0458:5011.000B: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 313.102466][ T5999] usb 11-1: USB disconnect, device number 34 [ 313.106608][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 313.940864][ T29] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 313.985389][T17081] usb usb8: usbfs: process 17081 (syz.6.3087) did not claim interface 0 before use [ 313.995392][T17079] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3086'. [ 314.001821][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3086'. [ 314.106231][T17090] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3090'. [ 314.120323][ T29] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 314.121899][T17090] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 314.123686][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.129594][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.132879][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 314.141154][T17090] pimreg: entered allmulticast mode [ 314.143659][T17090] pimreg: left allmulticast mode [ 314.144668][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.148564][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.151837][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 314.155417][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.158451][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.162260][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 314.165866][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.169358][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.172661][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 314.175494][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.178362][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.181586][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 314.184373][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.187231][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.190603][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 314.193451][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.196375][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.199907][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 314.202800][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.205528][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.209146][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 314.212811][ T29] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 314.215599][ T29] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 314.218096][ T29] usb 6-1: Product: syz [ 314.219576][ T29] usb 6-1: Manufacturer: syz [ 314.220986][ T29] usb 6-1: SerialNumber: syz [ 314.222783][T17090] netlink: 'syz.6.3090': attribute type 7 has an invalid length. [ 314.224073][ T29] usb 6-1: config 0 descriptor?? [ 314.229719][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 314.231557][ T29] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 314.409951][T17106] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 314.409951][T17106] The task syz.6.3094 (17106) triggered the difference, watch for misbehavior. [ 314.445449][ T29] usb 6-1: USB disconnect, device number 22 [ 314.450177][ T29] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 314.521356][T17108] overlayfs: empty lowerdir [ 314.524421][T17108] tmpfs: Bad value for 'mpol' [ 314.565035][T17110] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3096'. [ 314.574306][T17110] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3096'. [ 315.331228][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 315.354201][T17124] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 315.356983][T17124] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 315.360690][T17124] vhci_hcd vhci_hcd.0: Device attached [ 315.425486][T17125] vhci_hcd: connection closed [ 315.426718][ T1150] vhci_hcd vhci_hcd.6: stop threads [ 315.437506][ T1150] vhci_hcd vhci_hcd.6: release socket [ 315.440564][ T1150] vhci_hcd vhci_hcd.6: disconnect device [ 315.960569][T17159] netlink: 'syz.4.3110': attribute type 1 has an invalid length. [ 315.993593][T17159] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 315.996782][T17159] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 316.001145][T17159] bond1: (slave vxcan3): making interface the new active one [ 316.003922][T17159] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 316.007838][T17162] xt_hashlimit: size too large, truncated to 1048576 [ 316.009745][T17159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3110'. [ 316.019306][T17159] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 316.025045][T17159] bond1 (unregistering): Released all slaves [ 316.069356][T17165] netlink: 'syz.4.3110': attribute type 1 has an invalid length. [ 316.071925][T17165] netlink: 'syz.4.3110': attribute type 4 has an invalid length. [ 316.074512][T17165] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3110'. [ 316.166876][ T40] kauditd_printk_skb: 61 callbacks suppressed [ 316.166887][ T40] audit: type=1400 audit(1770792663.545:35314): avc: denied { create } for pid=17171 comm="syz.4.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 316.181383][ T40] audit: type=1400 audit(1770792663.554:35315): avc: denied { bind } for pid=17171 comm="syz.4.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 316.225506][ T40] audit: type=1400 audit(1770792663.591:35316): avc: denied { read write } for pid=17174 comm="syz.1.3114" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 316.236471][ T40] audit: type=1400 audit(1770792663.591:35317): avc: denied { open } for pid=17174 comm="syz.1.3114" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 316.245112][ T40] audit: type=1400 audit(1770792663.601:35318): avc: denied { mount } for pid=17174 comm="syz.1.3114" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 316.283284][ T40] audit: type=1400 audit(1770792663.657:35319): avc: denied { read write } for pid=17176 comm="syz.4.3115" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 316.295252][ T40] audit: type=1400 audit(1770792663.657:35320): avc: denied { open } for pid=17176 comm="syz.4.3115" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 316.305575][ T40] audit: type=1400 audit(1770792663.666:35321): avc: denied { read } for pid=17174 comm="syz.1.3114" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 316.314374][ T40] audit: type=1400 audit(1770792663.666:35322): avc: denied { open } for pid=17174 comm="syz.1.3114" path="/76/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 316.322918][T17178] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 316.325301][ T40] audit: type=1400 audit(1770792663.675:35323): avc: denied { create } for pid=17176 comm="syz.4.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 316.329696][T17178] block device autoloading is deprecated and will be removed. [ 316.343442][T17175] md: md2 stopped. [ 316.454327][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 316.789089][T17193] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 317.345911][T17204] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3125'. [ 317.350374][ T5982] IPVS: starting estimator thread 0... [ 317.459493][T17205] IPVS: using max 46 ests per chain, 110400 per kthread [ 317.466091][T17214] FAULT_INJECTION: forcing a failure. [ 317.466091][T17214] name failslab, interval 1, probability 0, space 0, times 1 [ 317.472043][T17214] CPU: 3 UID: 0 PID: 17214 Comm: syz.1.3128 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.472062][T17214] Tainted: [L]=SOFTLOCKUP [ 317.472067][T17214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 317.472074][T17214] Call Trace: [ 317.472078][T17214] [ 317.472083][T17214] dump_stack_lvl+0x100/0x190 [ 317.472104][T17214] should_fail_ex.cold+0x5/0xa [ 317.472118][T17214] should_failslab+0xc2/0x120 [ 317.472132][T17214] __kvmalloc_node_noprof+0x101/0xac0 [ 317.472151][T17214] ? seq_read_iter+0x819/0x1270 [ 317.472162][T17214] ? lock_acquire+0x17c/0x330 [ 317.472179][T17214] ? seq_read_iter+0x819/0x1270 [ 317.472189][T17214] ? avc_policy_seqno+0x9/0x20 [ 317.472206][T17214] seq_read_iter+0x819/0x1270 [ 317.472221][T17214] ? __pfx_seq_read_iter+0x10/0x10 [ 317.472233][T17214] vfs_read+0x825/0xb30 [ 317.472251][T17214] ? __pfx_vfs_read+0x10/0x10 [ 317.472270][T17214] ksys_read+0x12a/0x250 [ 317.472280][T17214] ? __pfx_ksys_read+0x10/0x10 [ 317.472294][T17214] do_syscall_64+0x106/0xf80 [ 317.472310][T17214] ? clear_bhb_loop+0x40/0x90 [ 317.472323][T17214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.472334][T17214] RIP: 0033:0x7f8d09b9bf79 [ 317.472344][T17214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.472354][T17214] RSP: 002b:00007f8d0ab08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 317.472366][T17214] RAX: ffffffffffffffda RBX: 00007f8d09e15fa0 RCX: 00007f8d09b9bf79 [ 317.472373][T17214] RDX: 0000000000002020 RSI: 0000200000004180 RDI: 0000000000000004 [ 317.472380][T17214] RBP: 00007f8d0ab08090 R08: 0000000000000000 R09: 0000000000000000 [ 317.472386][T17214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.472393][T17214] R13: 00007f8d09e16038 R14: 00007f8d09e15fa0 R15: 00007ffcc42af658 [ 317.472408][T17214] [ 317.555751][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 317.628328][T17221] xt_hashlimit: size too large, truncated to 1048576 [ 317.820281][T17232] input: syz0 as /devices/virtual/input/input44 [ 317.885454][T17232] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 317.893713][T17201] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 317.898164][T17201] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 317.916614][T17201] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 317.922277][T17201] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 317.940805][T14643] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 317.965417][T17201] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 317.967367][T17201] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 318.047464][T17240] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 318.124010][T14643] usb 9-1: Using ep0 maxpacket: 8 [ 318.127809][T14643] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 318.131140][T14643] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 318.136152][T14643] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 318.139319][T14643] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 318.139348][T14643] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 318.139361][T14643] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.316981][T17258] netlink: 'syz.6.3139': attribute type 7 has an invalid length. [ 318.362262][T14643] usb 9-1: GET_CAPABILITIES returned 0 [ 318.364098][T14643] usbtmc 9-1:16.0: can't read capabilities [ 318.433812][ T5999] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 318.577408][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 318.581564][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 318.585124][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 318.587960][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 318.592258][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 318.595350][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 318.598794][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 318.602419][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 318.606210][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 318.611856][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 318.619574][ T5999] usb 6-1: config 128 has an invalid interface number: 148 but max is 0 [ 318.619651][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 318.627067][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 318.630822][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 318.634600][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 318.638364][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 318.642149][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 318.647932][ T5999] usb 6-1: config 128 has no interface number 0 [ 318.649674][ T831] usb 9-1: USB disconnect, device number 6 [ 318.650553][ T5999] usb 6-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 318.655408][ T5999] usb 6-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 318.659195][ T5999] usb 6-1: config 128 interface 148 has no altsetting 0 [ 318.663760][ T5999] usb 6-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 318.667558][ T5999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.671708][ T5999] usb 6-1: Product: syz [ 318.673535][ T5999] usb 6-1: Manufacturer: syz [ 318.675560][ T5999] usb 6-1: SerialNumber: syz [ 318.678840][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 318.906827][T17282] netlink: 212304 bytes leftover after parsing attributes in process `syz.8.3144'. [ 318.911335][T17282] openvswitch: netlink: Message has 6 unknown bytes. [ 318.935727][ T5999] usb 6-1: USB disconnect, device number 23 [ 318.951214][T17286] xt_ecn: cannot match TCP bits for non-tcp packets [ 319.085162][T17286] syz.8.3145 (17286): drop_caches: 2 [ 319.182695][T17298] netlink: 'syz.8.3148': attribute type 9 has an invalid length. [ 319.244662][T17302] 9pnet_virtio: no channels available for device syz [ 319.258773][T17303] netlink: 'syz.4.3149': attribute type 1 has an invalid length. [ 319.287088][T17303] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 319.292885][T17303] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 319.455423][T17313] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 319.492231][ T5999] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 319.684156][ T5999] usb 6-1: Using ep0 maxpacket: 8 [ 319.691872][ T5999] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 319.698392][ T5999] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 319.698896][T17325] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3157'. [ 319.701556][ T5999] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 319.707723][T17325] netlink: 'syz.4.3157': attribute type 4 has an invalid length. [ 319.708834][ T5999] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 319.715613][ T5999] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.720312][ T5999] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 319.723531][ T5999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.780410][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 319.852986][T17334] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 319.860955][T17334] netlink: 'syz.4.3159': attribute type 11 has an invalid length. [ 319.867294][T17334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3159'. [ 319.923201][T17336] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 319.929668][T17336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63133 sclass=netlink_route_socket pid=17336 comm=syz.6.3160 [ 319.943642][ T5999] usb 6-1: usb_control_msg returned -32 [ 319.945461][ T5999] usbtmc 6-1:16.0: can't read capabilities [ 319.950425][T17235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17235 comm=syz.1.3135 [ 319.958773][ T5999] usb 6-1: USB disconnect, device number 24 [ 319.991454][T17342] f2fs: Unknown parameter 'discx'' [ 320.253507][T17357] /dev/nullb0: Can't open blockdev [ 320.401065][T12560] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 320.497160][T17388] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3172'. [ 320.568706][T12560] usb 9-1: Using ep0 maxpacket: 8 [ 320.572851][T12560] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 320.576660][T12560] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 320.585324][T12560] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 320.590710][T12560] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 320.593551][T17399] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3176'. [ 320.595234][T12560] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.600044][T12560] usb 9-1: Product: syz [ 320.601419][T12560] usb 9-1: Manufacturer: syz [ 320.603028][T12560] usb 9-1: SerialNumber: syz [ 320.620505][T12560] usb 9-1: config 0 descriptor?? [ 320.678721][T12560] rc_core: IR keymap rc-streamzap not found [ 320.681355][T12560] Registered IR keymap rc-empty [ 320.683954][T12560] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 320.691648][T12560] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input45 [ 320.697821][T17413] tap0: tun_chr_ioctl cmd 1074025675 [ 320.699580][T17413] tap0: persist disabled [ 320.760597][T17413] tap0: tun_chr_ioctl cmd 1074025675 [ 320.762788][T17413] tap0: persist disabled [ 320.765796][T17413] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3178'. [ 320.856429][T12560] usb 9-1: USB disconnect, device number 7 [ 320.902658][T17419] syzkaller0: entered promiscuous mode [ 320.904599][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 320.907031][T17419] syzkaller0: entered allmulticast mode [ 320.997729][T17425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59881 sclass=netlink_route_socket pid=17425 comm=syz.8.3179 [ 321.048788][T17431] program syz.1.3180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.051762][T17431] ata1.00: invalid transfer count 0 [ 321.131665][T17448] tipc: Enabling of bearer rejected, media not registered [ 321.179930][T17455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3187'. [ 321.480808][ T34] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 321.532505][ T40] kauditd_printk_skb: 126 callbacks suppressed [ 321.532517][ T40] audit: type=1400 audit(1770792668.556:35450): avc: denied { write } for pid=17481 comm="syz.4.3194" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 321.545771][ T40] audit: type=1400 audit(1770792668.575:35451): avc: denied { ioctl } for pid=17481 comm="syz.4.3194" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 321.567536][ T40] audit: type=1400 audit(1770792668.594:35452): avc: denied { create } for pid=17481 comm="syz.4.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 321.577577][ T40] audit: type=1400 audit(1770792668.603:35453): avc: denied { write } for pid=17481 comm="syz.4.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 321.585600][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3194'. [ 321.590730][ T40] audit: type=1400 audit(1770792668.612:35454): avc: denied { write } for pid=17481 comm="syz.4.3194" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 321.609349][ T40] audit: type=1400 audit(1770792668.622:35455): avc: denied { name_connect } for pid=17481 comm="syz.4.3194" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 321.648982][ T34] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 321.652964][ T34] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 321.662623][ T34] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 321.666155][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 321.670394][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 321.676344][ T34] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 321.679838][ T34] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 321.682993][ T34] usb 6-1: Product: syz [ 321.684932][ T34] usb 6-1: Manufacturer: syz [ 321.693308][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 321.699259][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 321.702465][ T34] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 321.704986][ T34] cdc_wdm 6-1:1.0: Unknown control protocol [ 321.749125][ T40] audit: type=1400 audit(1770792668.752:35456): avc: denied { create } for pid=17493 comm="syz.4.3197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 321.777464][T17497] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3198'. [ 321.869493][T17513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=17513 comm=syz.6.3202 [ 321.907002][ T40] audit: type=1400 audit(1770792668.902:35457): avc: denied { read write } for pid=17454 comm="syz.1.3187" name="cdc-wdm0" dev="devtmpfs" ino=3748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 321.917760][ T40] audit: type=1400 audit(1770792668.902:35458): avc: denied { open } for pid=17454 comm="syz.1.3187" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 321.930129][ T40] audit: type=1400 audit(1770792668.921:35459): avc: denied { read write } for pid=17454 comm="syz.1.3187" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 321.945692][ T6019] usb 6-1: USB disconnect, device number 25 [ 321.969960][T17522] netlink: 'syz.1.3204': attribute type 11 has an invalid length. [ 321.973296][T17522] netlink: 'syz.1.3204': attribute type 7 has an invalid length. [ 321.984075][T17520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.015705][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 322.082535][T17526] binder: 17525:17526 ioctl c0306201 2000000003c0 returned -14 [ 322.097736][T17528] tmpfs: Unknown parameter 'nos [ 322.097736][T17528] 9$9)}SNp4' [ 322.111942][ T1474] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 322.205626][T17534] tmpfs: Bad value for 'mpol' [ 322.272308][ T1474] usb 9-1: Using ep0 maxpacket: 8 [ 322.275340][ T1474] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 322.278045][ T1474] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 322.281740][ T1474] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 322.285220][ T1474] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 322.288746][ T1474] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 322.292110][ T1474] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.296307][ T1474] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 322.299225][ T1474] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.520775][ T1474] usb 9-1: usb_control_msg returned -32 [ 322.522670][ T1474] usbtmc 9-1:16.0: can't read capabilities [ 322.710226][T17540] netlink: 'syz.8.3210': attribute type 30 has an invalid length. [ 322.756873][T17540] netlink: 'syz.8.3210': attribute type 30 has an invalid length. [ 322.829659][T17540] netlink: 'syz.8.3210': attribute type 30 has an invalid length. [ 322.902073][ C1] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 322.915539][T17541] usbtmc 9-1:16.0: Unable to send data, error -71 [ 322.918713][T17541] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 322.942376][ T5999] usb 9-1: USB disconnect, device number 8 [ 323.046122][T17545] devtmpfs: Cannot change global quota limit on remount [ 323.117824][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 323.136574][T17545] kvm: pic: non byte write [ 323.163540][T17550] ipvlan1: entered allmulticast mode [ 323.165703][T17550] veth0_vlan: entered allmulticast mode [ 323.171933][T17550] team0: Device ipvlan1 failed to register rx_handler [ 323.626215][T17595] __nla_validate_parse: 3 callbacks suppressed [ 323.626227][T17595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3230'. [ 323.669588][T17595] macvlan2: entered promiscuous mode [ 323.757618][T17606] netlink: 'syz.4.3233': attribute type 9 has an invalid length. [ 323.817446][T17608] wg1: entered promiscuous mode [ 323.819642][T17608] wg1: entered allmulticast mode [ 323.903744][T17612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3236'. [ 323.906821][T17591] delete_channel: no stack [ 323.908722][T17612] xt_l2tp: v2 doesn't support IP mode [ 323.936472][T17615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.001874][T17625] overlayfs: failed to resolve './bus': -2 [ 324.056081][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3240'. [ 324.113777][T17637] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3243'. [ 324.154118][T17645] macvlan2: entered promiscuous mode [ 324.216534][T17646] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 324.229524][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 324.362846][T17678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3253'. [ 324.614171][T17696] netlink: 'syz.4.3258': attribute type 9 has an invalid length. [ 324.618220][T17696] netlink: 'syz.4.3258': attribute type 11 has an invalid length. [ 324.621573][T17696] netlink: 'syz.4.3258': attribute type 12 has an invalid length. [ 324.624922][T17696] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.3258'. [ 324.676979][T17701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3259'. [ 324.731556][T17712] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3262'. [ 324.838664][T17726] /dev/nullb0: Can't open blockdev [ 324.916980][T17733] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 324.932385][T17735] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3271'. [ 324.942744][T17738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3272'. [ 325.231916][T17675] delete_channel: no stack [ 325.289847][ T29] IPVS: starting estimator thread 0... [ 325.341830][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 325.407680][T17769] IPVS: using max 46 ests per chain, 110400 per kthread [ 325.512975][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 325.674898][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.678221][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 325.683164][ T24] usb 6-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 325.686839][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.689490][ T24] usb 6-1: Product: syz [ 325.690837][ T24] usb 6-1: Manufacturer: syz [ 325.692429][ T24] usb 6-1: SerialNumber: syz [ 325.700559][ T24] usb 6-1: config 0 descriptor?? [ 325.823446][ C0] ------------[ cut here ]------------ [ 325.825715][ C0] sk->sk_forward_alloc [ 325.825725][ C0] WARNING: net/ipv4/af_inet.c:157 at inet_sock_destruct+0x653/0x800, CPU#0: swapper/0/0 [ 325.830328][ C0] Modules linked in: [ 325.832523][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.837006][ C0] Tainted: [L]=SOFTLOCKUP [ 325.838878][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 325.843177][ C0] RIP: 0010:inet_sock_destruct+0x653/0x800 [ 325.845609][ C0] Code: b4 4f ff e9 06 fd ff ff e8 9a 4c 10 f8 90 0f 0b 90 e9 35 fe ff ff e8 8c 4c 10 f8 90 0f 0b 90 e9 c5 fe ff ff e8 7e 4c 10 f8 90 <0f> 0b 90 e9 04 ff ff ff e8 70 4c 10 f8 90 0f 0b 90 e9 65 fe ff ff [ 325.853385][ C0] RSP: 0018:ffffc90000007d98 EFLAGS: 00010246 [ 325.856009][ C0] RAX: 0000000000000000 RBX: ffff88803e865ac0 RCX: ffffffff89f6f387 [ 325.858925][ C0] RDX: ffffffff8e2975c0 RSI: ffffffff89f6f482 RDI: ffffffff8e2975c0 [ 325.862046][ C0] RBP: 0000000000000090 R08: 0000000000000005 R09: 0000000000000000 [ 325.865407][ C0] R10: 0000000000000090 R11: 000000000000a906 R12: ffff88803e865ac0 [ 325.868666][ C0] R13: ffff88803e865b50 R14: ffffffff81ed16dd R15: 0000000000000001 [ 325.871397][ C0] FS: 0000000000000000(0000) GS:ffff8880d65b6000(0000) knlGS:0000000000000000 [ 325.874253][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.876788][ C0] CR2: 00007fc02dc17dac CR3: 000000000e396000 CR4: 0000000000352ef0 [ 325.880162][ C0] DR0: 0000020000000008 DR1: 0000000000000000 DR2: 0000000000000009 [ 325.883395][ C0] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 325.885929][ C0] Call Trace: [ 325.887057][ C0] [ 325.888032][ C0] ? rcu_core+0x59d/0x10d0 [ 325.889504][ C0] ? __pfx_udp_destruct_sock+0x10/0x10 [ 325.891650][ C0] ? rcu_core+0x59d/0x10d0 [ 325.893543][ C0] __sk_destruct+0x85/0xbb0 [ 325.895324][ C0] ? rcu_core+0x59d/0x10d0 [ 325.896789][ C0] rcu_core+0x5a2/0x10d0 [ 325.898218][ C0] ? __pfx_rcu_core+0x10/0x10 [ 325.899738][ C0] ? ktime_get+0x1a7/0x300 [ 325.901224][ C0] handle_softirqs+0x1ea/0x910 [ 325.902810][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 325.904682][ C0] __irq_exit_rcu+0xef/0x150 [ 325.906179][ C0] irq_exit_rcu+0x9/0x30 [ 325.907564][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 325.909408][ C0] [ 325.910374][ C0] [ 325.911330][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 325.913424][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 325.915272][ C0] Code: 1e 75 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d a3 9d 10 00 fb f4 bc 33 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 325.922689][ C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000202 [ 325.924645][ C0] RAX: 0000000000365abf RBX: ffffffff8e2975c0 RCX: ffffffff8b7afc75 [ 325.927189][ C0] RDX: 0000000000000000 RSI: ffffffff8dc524c1 RDI: ffffffff8bfa9420 [ 325.929722][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100d486755 [ 325.932480][ C0] R10: ffff88806a433aab R11: 0000000000000000 R12: fffffbfff1c52eb8 [ 325.935020][ C0] R13: 0000000000000000 R14: ffffffff90b7d7d0 R15: 0000000000000000 [ 325.937536][ C0] ? ct_kernel_exit+0x125/0x180 [ 325.939132][ C0] default_idle+0x9/0x10 [ 325.940550][ C0] default_idle_call+0x6c/0xb0 [ 325.942165][ C0] do_idle+0x35b/0x4b0 [ 325.943556][ C0] ? __pfx_do_idle+0x10/0x10 [ 325.945189][ C0] cpu_startup_entry+0x4f/0x60 [ 325.946749][ C0] rest_init+0x251/0x260 [ 325.948109][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 325.949889][ C0] start_kernel+0x47a/0x480 [ 325.951447][ C0] x86_64_start_reservations+0x24/0x30 [ 325.953197][ C0] x86_64_start_kernel+0x122/0x130 [ 325.954836][ C0] common_startup_64+0x13e/0x148 [ 325.956455][ C0] [ 325.957579][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 325.960045][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.963354][ C0] Tainted: [L]=SOFTLOCKUP [ 325.964748][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 325.967973][ C0] Call Trace: [ 325.969066][ C0] [ 325.970013][ C0] dump_stack_lvl+0x100/0x190 [ 325.971978][ C0] vpanic+0x20d/0x630 [ 325.973704][ C0] panic+0xd1/0xd1 [ 325.975023][ C0] ? __pfx_panic+0x10/0x10 [ 325.976454][ C0] ? check_panic_on_warn+0x1f/0x90 [ 325.978094][ C0] check_panic_on_warn.cold+0x19/0x34 [ 325.979801][ C0] ? inet_sock_destruct+0x653/0x800 [ 325.981458][ C0] __warn.cold+0x191/0x2f8 [ 325.982945][ C0] __report_bug+0x296/0x3d0 [ 325.984400][ C0] ? inet_sock_destruct+0x653/0x800 [ 325.986109][ C0] ? __pfx___report_bug+0x10/0x10 [ 325.987707][ C0] ? common_startup_64+0x13e/0x148 [ 325.989338][ C0] ? inet_sock_destruct+0x653/0x800 [ 325.991002][ C0] report_bug+0xb2/0x220 [ 325.992374][ C0] ? inet_sock_destruct+0x653/0x800 [ 325.994041][ C0] handle_bug+0x166/0x2a0 [ 325.995418][ C0] exc_invalid_op+0x17/0x50 [ 325.996869][ C0] asm_exc_invalid_op+0x1a/0x20 [ 325.998426][ C0] RIP: 0010:inet_sock_destruct+0x653/0x800 [ 326.000281][ C0] Code: b4 4f ff e9 06 fd ff ff e8 9a 4c 10 f8 90 0f 0b 90 e9 35 fe ff ff e8 8c 4c 10 f8 90 0f 0b 90 e9 c5 fe ff ff e8 7e 4c 10 f8 90 <0f> 0b 90 e9 04 ff ff ff e8 70 4c 10 f8 90 0f 0b 90 e9 65 fe ff ff [ 326.006363][ C0] RSP: 0018:ffffc90000007d98 EFLAGS: 00010246 [ 326.008320][ C0] RAX: 0000000000000000 RBX: ffff88803e865ac0 RCX: ffffffff89f6f387 [ 326.010820][ C0] RDX: ffffffff8e2975c0 RSI: ffffffff89f6f482 RDI: ffffffff8e2975c0 [ 326.013314][ C0] RBP: 0000000000000090 R08: 0000000000000005 R09: 0000000000000000 [ 326.015808][ C0] R10: 0000000000000090 R11: 000000000000a906 R12: ffff88803e865ac0 [ 326.018388][ C0] R13: ffff88803e865b50 R14: ffffffff81ed16dd R15: 0000000000000001 [ 326.020903][ C0] ? rcu_core+0x59d/0x10d0 [ 326.022250][ C0] ? inet_sock_destruct+0x557/0x800 [ 326.023917][ C0] ? inet_sock_destruct+0x652/0x800 [ 326.025589][ C0] ? inet_sock_destruct+0x652/0x800 [ 326.027331][ C0] ? rcu_core+0x59d/0x10d0 [ 326.028912][ C0] ? __pfx_udp_destruct_sock+0x10/0x10 [ 326.030795][ C0] ? rcu_core+0x59d/0x10d0 [ 326.032407][ C0] __sk_destruct+0x85/0xbb0 [ 326.034273][ C0] ? rcu_core+0x59d/0x10d0 [ 326.036080][ C0] rcu_core+0x5a2/0x10d0 [ 326.037517][ C0] ? __pfx_rcu_core+0x10/0x10 [ 326.039059][ C0] ? ktime_get+0x1a7/0x300 [ 326.040487][ C0] handle_softirqs+0x1ea/0x910 [ 326.042051][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 326.043731][ C0] __irq_exit_rcu+0xef/0x150 [ 326.045212][ C0] irq_exit_rcu+0x9/0x30 [ 326.046585][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 326.048414][ C0] [ 326.049383][ C0] [ 326.050382][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 326.052285][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 326.054081][ C0] Code: 1e 75 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d a3 9d 10 00 fb f4 bc 33 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 326.060135][ C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000202 [ 326.062103][ C0] RAX: 0000000000365abf RBX: ffffffff8e2975c0 RCX: ffffffff8b7afc75 [ 326.064630][ C0] RDX: 0000000000000000 RSI: ffffffff8dc524c1 RDI: ffffffff8bfa9420 [ 326.067149][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100d486755 [ 326.069665][ C0] R10: ffff88806a433aab R11: 0000000000000000 R12: fffffbfff1c52eb8 [ 326.072190][ C0] R13: 0000000000000000 R14: ffffffff90b7d7d0 R15: 0000000000000000 [ 326.074681][ C0] ? ct_kernel_exit+0x125/0x180 [ 326.076271][ C0] default_idle+0x9/0x10 [ 326.077625][ C0] default_idle_call+0x6c/0xb0 [ 326.079189][ C0] do_idle+0x35b/0x4b0 [ 326.080567][ C0] ? __pfx_do_idle+0x10/0x10 [ 326.082105][ C0] cpu_startup_entry+0x4f/0x60 [ 326.083624][ C0] rest_init+0x251/0x260 [ 326.084969][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 326.086795][ C0] start_kernel+0x47a/0x480 [ 326.088246][ C0] x86_64_start_reservations+0x24/0x30 [ 326.089988][ C0] x86_64_start_kernel+0x122/0x130 [ 326.091617][ C0] common_startup_64+0x13e/0x148 [ 326.093228][ C0] [ 326.094921][ C0] Kernel Offset: disabled [ 326.096284][ C0] Rebooting in 86400 seconds..