last executing test programs: 3m12.022832307s ago: executing program 1 (id=217): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063514800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063514800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x843, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e21, 0x2, @empty, 0x7}}}, &(0x7f00000001c0)=0x84) 3m12.022382424s ago: executing program 1 (id=219): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000001580), &(0x7f00000015c0)=0x4) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000000240)={0x80}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$pppoe(0x18, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x41c}}}, 0x7) close(0xffffffffffffffff) syz_open_dev$dri(0x0, 0x80000001, 0x103300) connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x204, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bond0\x00'}}, 0x1e) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x8, @multicast, 'veth1_to_batadv\x00'}}, 0x1e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r6 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r7, 0x80106f53, &(0x7f00000016c0)={0x37, &(0x7f0000000040)=[{0x27, '\x00', @st={0x4, [{0x2, @uvalue=0x7fffffff}, {0x2, @svalue=0x2}, {0x1, @svalue=0xdf03}, {0x1, @uvalue=0x7c31}]}, 0x3}]}) recvmmsg(r6, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/137, 0x89}], 0x1}, 0x585}], 0x1, 0x100, 0x0) 3m11.813392574s ago: executing program 1 (id=222): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000140)={{0xffffffffffffffff, &(0x7f0000000000)='/\x00', 0x80, &(0x7f0000000040)={@align=0x3, {0x9, 0x2, 0x5}}, 0x8, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xfffffffc}, {[0x307, 0xe24, 0x4, 0x401]}, 0x7ff, 0x32, &(0x7f0000000100)=""/50}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000001c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x2, "ea1d6db4b6fe11"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000011c0)={r1, 0x0, "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", "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"}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000022c0)={&(0x7f00000021c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002240)=[0x0, 0x0], &(0x7f0000002280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000002300)={r2}) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000002340)) (async) write$P9_RATTACH(r0, &(0x7f0000002380)={0x14, 0x69, 0x2, {0x10, 0x3, 0x7}}, 0x14) (async) read$FUSE(r0, &(0x7f00000023c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000004400)={0x10, 0xfffffffffffffffe, r3}, 0x10) (async) io_setup(0x4, &(0x7f0000004440)=0x0) (async) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) (async) r6 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000004580), 0x2201, 0x0) (async) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000004600), 0x100, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000004840)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_submit(r4, 0x6, &(0x7f0000005a00)=[&(0x7f00000045c0)={0x0, 0x0, 0x0, 0x3, 0x9, r5, &(0x7f0000004480)="388dba97118aaa93dae2ad97cd79d288f7a456f790604e36c171dddf053cf05ae2d5135e86ef1e76b0d3cb363dc04f4852f9fa3cd64e1137675950aac40d3db8acc471be954a7214671d30920f1942de20577687753e520e12d4ef2a527eadd9ad9ca7a7ea62d1b72050ea5e6841c82a123f03fd989c2ce533f89a12bd0991fe2165fe8ae2fa90479dc9472f37564a04d0dcf2ca908a58bde5c8f8f846476176bbf76e8cd9892f1472784e83ce5ec015715bc6d0c4d555ae6718724d11630dd1ec0fdd1445154974d27cc14bd149c71492282f01", 0xd4, 0x2, 0x0, 0x0, r6}, &(0x7f0000004740)={0x0, 0x0, 0x0, 0x3, 0x0, r7, &(0x7f0000004640)="3427c6ec10ec47f0cbe7f57105e2e1c4c9434552af9a45c7a74e32ac2d39301c64dfb27fad42811e3b6f0f36260662f727309d8bdad93f6b1b5f179f8b3aeff64f6166656227f8b8008a932ad268177fe05ccc046d0600777a99f979f757ea9a176bfb6d5db853d83f6b78f7a0033c2ee1ca3adb4b7376027a3702d6a4ea3504f63fc586ef10d903b082e3469137c1eb5fbd2fdd8457533ceb98baf367448456c2fac936aebcbe0094c0228bb336e3bfe7e4d839ffc3607bc1af8197911db0b725a1d2a4a37d30fb6aec3367588fb353c9737a763ee05c8f8d96c9", 0xdb, 0xe0f, 0x0, 0x3, r0}, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000004780)="abb2b6385165cd0763e76e28d79271310246663b44b35a43d560e7cdd2df21e7da88ddb269ce1beff9aa435e392938c619065a8209db481a48f99fbdb7e8e43c359ff31cbe0942ab1e6e0c80ffe5f9b3e5c4a8c4fe91d7c9cfbaebd536efd708c5de437116dac75ee128ca6b397aee30138dd545b04c518b6e6a30f495fa1233f8714a61ce6e4d23974b64c1c9d004a19b4f35fadfc97a3ea7cdc7566fd7d570d376", 0xa2, 0x8000, 0x0, 0x1, r8}, &(0x7f0000004900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000048c0)="28043298d686807c59e9", 0xa, 0x1, 0x0, 0x2, r0}, &(0x7f0000005940)={0x0, 0x0, 0x0, 0x8, 0x63ee, r0, &(0x7f0000004940)="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", 0x1000, 0x6ef, 0x0, 0x2, r0}, &(0x7f00000059c0)={0x0, 0x0, 0x0, 0x0, 0x101, r0, &(0x7f0000005980)="14be6443", 0x4, 0x1}]) (async) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f0000005a40)={0x0, "67b3aa0e563d4474be8a8eede5f42d6b2a8825fee78cdd65869f0234d095cc7aaef7bd4b54e6ad44075b109095ae4fbb72f8da92b68ccb710923af5295a4df06"}) (async) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0xf) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f0000005ac0)) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000005b00)={0x0, 0x39, "a2fcb593f4f3ca97e475db74d46b993a52d8c37f841bf1d5f1d40cc56009da21d6e9e50ff30ada0ea6e695c8fd398f0067a6f3599301883537"}, &(0x7f0000005b80)=0x41) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000005bc0)={r9, 0x0, 0x24d}, 0x8) (async) close_range(r6, r6, 0x0) (async) ioctl$TIOCCONS(r7, 0x541d) (async) r10 = openat$mice(0xffffffffffffff9c, &(0x7f0000005c00), 0x480201) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005c80), r0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000005d40)={'ip6gre0\x00', &(0x7f0000005cc0)={'syztnl2\x00', 0x0, 0x29, 0xe, 0x8, 0x7, 0x8, @mcast1, @private1, 0x80, 0x7, 0x1, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000005e00)={'ip6_vti0\x00', &(0x7f0000005d80)={'ip6tnl0\x00', 0x0, 0x2f, 0xb, 0x17, 0x8, 0x13, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x7800, 0x1, 0x6, 0x1}}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000005e40)={@dev, 0x0}, &(0x7f0000005e80)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000005f40)={'syztnl0\x00', &(0x7f0000005ec0)={'tunl0\x00', 0x0, 0x20, 0x10, 0x8, 0x9, {{0xf, 0x4, 0x1, 0x0, 0x3c, 0x67, 0x0, 0x0, 0x29, 0x0, @broadcast, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x26, 0x1, 0x0, [{@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x2}, {@loopback, 0xc0000000}, {@multicast2, 0x9}]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r10, &(0x7f0000006580)={&(0x7f0000005c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000006540)={&(0x7f0000006300)={0x238, r11, 0x106, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xb4, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3928b541934e045a}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x4}, 0x10048840) 3m11.758632158s ago: executing program 1 (id=225): mkdir(&(0x7f0000000080)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x1, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4090) r2 = syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x1501) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x2, 0x30, 0x8a49, 0x1, 0x0, 0x6, 0x0}) mkdir(&(0x7f0000000080)='./file0\x00', 0x1cb) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) bind$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x1, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4090) (async) syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x1501) (async) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x2, 0x30, 0x8a49, 0x1, 0x0, 0x6, 0x0}) (async) 3m11.643895401s ago: executing program 1 (id=228): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001500)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 64) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000015c0)=""/4096) (rerun: 64) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r6, 0xb01}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x30}}, 0x0) (async, rerun: 32) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r7, 0x3, 0x0, 0x1, &(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0]}, 0x40) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) listen(r1, 0x2) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000480)={0x40, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x0, @local}}}, 0x108) (async, rerun: 64) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) (async) syz_usb_disconnect(r0) 3m11.172215008s ago: executing program 0 (id=238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r1, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockname(r2, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x58ee9e8a, 0x100) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f00000001c0)={0x2, r5, 0xd, 0x8, 0x27f, 0x607, 0x6}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040190}, 0x40) 3m11.171878549s ago: executing program 1 (id=239): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000340), &(0x7f0000000200)=0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev(r2, &(0x7f0000001380)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000000)='4', 0x1}], 0x2) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x6}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000043}, 0x0) write$dsp(r0, &(0x7f00000013c0)="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", 0x1000) 3m11.109493267s ago: executing program 32 (id=239): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000340), &(0x7f0000000200)=0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev(r2, &(0x7f0000001380)=[{&(0x7f0000000180)="b1ff5cc982d34010b7cd6e11c50b9bd27a09463daa6ac62502efcdab8967452391d69f6f05000000a20cdf63882deea50aab4ae728b88be047e9c1de4d3428835edfece01a907acbebb734022a8738c0733177cf2bc7d61a3a791ad3e0972faf52b29d3476b8aff7e79275ad61b36971c0d2d8e1e242261dc50464a134b1a2e36243c3b5bb93a2e7a7087c254e0b5089100624eb5b273a62e5798cb0a4b96845ef45e0238d22062a8d5f43c3875d773c45e426dc162914e26ae112c5dfdef60f2f274ac96a6c77b37799cd03dc1c8ad69d1fcad1be379ad212ea51e0f272a3ec7bf0bdda2c7a15b3fb018cb2ce53c99b0af09b5c874cf4d79e13c7580d4ebc0669bb048863f28e8f00ea67d87e92c6fc4bc31a4a06b7344519d72e9662309dd51a02a7d295972dd1f63431968d9f5212daa47d49d85bf08190aef758e842da69375269c5f33bb0e60bb98abb2a51e8a89d7b4680185b9665d5da6254cb15392332b0e850169d90ac1374cf5346092b47f682c2f22c8cdcf98718bfa0ca4c5b50ebf8d6c53afa3830233a3e486a0d73fed67851403f72492feec1528cac329dd11f82cf149ec049e71b979ad055053dcf654f470f780f32b22dd6567401f94a94c592265a2dbdd3c5c88cfde1a6cc112231a5797e092a5040be19bde03dc2d9dc0078b42f27e168810770cd5b4c0f2073037e9a57e8148392a3063ee55ad9449fa6265189337777d7a605bb7cf51d682ac7823207343fa7328ce207029e7e9818d7fcff9b9e7ac731dc502ce7471cab17108e5614fdec649d35a6638928931f110d4608a9cf22868dd3bf764d5b09a5325bcf987546e3edf1df9f1866fa89fb99a7f945c853586b4e3344eb286067e7b42d79ed93baddc3e5bd47ca613d654d4d54ece371b699ca7f05677c48cdb8f265fb35e0ff7ec5da801ae4198c7d9290d2ddc3586bd1ba3e34e722c47c14e4f310029751fbdc75da8461356b7a6784b490810284bdc727061944a283b7276b6a0b679d74089c54db98c92c2e329248b07365f45b3511ac11f8483a3f0bec8e4ceae324640f5762444efa94207115b5550fb8e4a1277aee3f11f2e6cac543d2168a83cd0367b24859e1b8b9cb9a5beb2d9851124b9c74acf21ecb5ae5e31e29543638a1cebdd2384dda1b2d301e59ea092707cd68838f12a05f9ec25832ddf22e2a01a8a28ff5c4f925a09b18849c180f0fed6057fc68d473eddb467796f8c086475dc1444c7f879d842662da4e59fd3c02b6d54c822ae8aeb91aefde57008f7728f1d236bbcda61a5b2dfdc0648ba72229b764fbd43a2eabe639a49f44de663b2e4e244370c7681f130e4a7790924e0826c0ebe768996d22edf83088b18492ccaa1344f5b14aa4218e3204434e0483bb56043e63ae02d584fed308759840064686ebb7349aa85adc00ba9ac6ec3e895f6b6cb33902cfa04a5fe6946475775284ba5f00f31a37aca06ce7485acbbf8e66db1daa273025860d216eb69a71666c0e5e3dcb9054c7c5edb138893b22a6f80655aeecd0f59f3bba544ae9897d2e795d0ca5a124519712a54366dca8b20c2191d5515231d5066c9c9f2b5b180da10542d7911f688c3b0f07ffcfe249161590d95d445c5ce2c647b97ad45249226a04144d900de9496f8f85e4607e7907eb20a1856efa7b06de5334ed1ba34b1c6e30da7df850da42b728208b85510b9acdd9ffe22806ec97c832b65257fa72d7f77a02359fad7ea2465c53df34c391c617d2e02197f6b5ab4a152327f6ae4d1107f6e8b68ce43de174dd559fe3ec95f32bd1d9244943230654e68fc3237e17dbd131996202beaf1578a925ab94510fccfa2be306bce3bdbb413ec6e50e6b0081362999ce7991b2c384001fd74e9de82dba16df74529800a201d8bd35eb789527b1f2e2ea7a12fb2858e389b4e96b5a9e32838916f147c99e3fd723972930a2eb8422ac15a254bae41e604e5459f6f573f9ce9d94e9dcbcdd392e2ed35ab5c6673f69c711ff121a2f1b1421d4a70571a20c732b1c1af990795c10ee23a6b8b056f91a4aa32d118a71cad879d5883327e7347d3fc7de504d42162a16fcd2fde8035a54205da46ce06c1f66b6ddb43248cbd5347cb80aec30a88af4166dcf131b92568ffad2f3cdb2835264705025b612d8b82920a01b87b9781020c38f438330735966ff27488db4ea6e74fa9d0e9a0fa929d9585a4de92648839a971edb1d03945fc7d6f64bb194085f63ccf8ea52b90505f2809d0ddc40b59909fff3e0c3362934019dca2b8733a8fdddd978d0b264d4b0105d4f9db315cbc8a2426f494de1d2f1b73de816e561004be0430be083fc6179ebfdc9bfca85df6b2c81bc0bf4685cdf072ddb5f7a3183a226df665c95d86c6046be75fdd008b96ad5696cbd3182a01c6a80d1bd3f4a288c015355004e6bbc788aef9bf65fe691dd6777a531a040c9ec7754d0e746dd89521d2ae6df1b13fd9433b164ba014fa7b3d8e08b30fe54b3d0ea810cc5f436a0370fd976eb481a07b3f81469cd6ed490d687528bf470d3800893a718f1f6c970a130ab49e04e1dfe4d594927bb34247d1c25c75197807206242b0ff807cb8c6ca4d67acce16de41a663fe86eec015dde1d828ac3a63763c0fbeda90c824abeb593efa9e2df76b761fa0d25e70e4e8d888f8ca1fcf7e88d35064a73600d4cc98e75ed4dd7c05919dcfdd4bdfaccd4a0a33e11c55276e105338b13ba765b728d0ae08a03cf59f3212373be7c7f74601c325c605ccbdff2bd895f43303888f9f8609df38a52d718cfb423a580711886de8affaf997d85a23af0de249f92f0b04305f12cbbd19c271339988a0c3eada32416b880f1859ba58353675b45b177d4306bbbd4ad8890a1a06126fb069b06566d92b026337f2f9c9f1321fd9b427a57df9e68505cdbbe1c5807fe485a85693e39e09bb72c7e46c95277526db6ee949ba143e4d3027c84df4c483aa0e419e438741661bb4349dffd003baa6112db3c9f84b0438ed3af79b90f1cea1b8ec4943bc3ced5567eec6510e910c8f9346e74c338fcfc892aaf970691b60f5ea4c04a33954c280c0c28f5c4ed79a3d4cb09ac60dc00060b09afa42fe60a250bb0c7529b282714df7de4938f1c56241189a707a7091a1035d82c7d43c66e9abd92ceec9ec5c102df63d4a0b8eac16b618e97567a87296a42bb7a018204b3dcdcee5e5c758faf3172e8c6c50483f341c5656cb8df27c63c98e74d1b7312e49926d143817f8e9b4125406ab91242bdcba7ccc3db507ff994047b33ce9a59179d119991a161e8bd06e0f58d7bffe6457f531942cc46c88bfec69e0b995ac7e7ab04d270efe443541bc55f327ad8921c32bcadaa0e1ad8ac263a312f92f904b333becbdf4a102f5b379619c8204c3a18af91347fbb5eab64ff81a05f3b83587050c2df0cece8faac8ef41e0f36691121f0a398405521c3dac1300a0db6e21e56ac8bd6a03923a3d8ed96d9df54b98b42b70a0a3ffa8291ceb0e607f0e2f8ce1832111051bb16bdc25d5a4af117634af898f5952f98a7b132cf140a79ccb80d1d9f1bb52c3aaf50b7232dba94e896295c5a6bf71ec63a2f95315b06b590c6965249d1ea7f7039344242bae628f7b1bd45d9ccd51183279863c640d8fd7127ca5e593d7ae02b8ecc77188389c766634b18e54ab9da7ea92e8101d6088a373c3da38941e566dae9c1b191b48f387ecf8b91c6e6f05c800cef4c39b11dad2e42f1b54a44204ffe29c84defd41a3ab9173957b3007cad89d259ba60cb320d26b1ce00453629af98ab9371d8e47854396009169ebef43f471c2b00e7298dfb61a42000b68c44dc2429233f5fa17c524856c6383ae4ffed02f566edb7eb961489b5cb677e568eba83885641486af623dafe8693ac6dd5df261294a9286e445bb91098b96d5b2e912c21d161c9d6a6c0882a5ccd68d3b0025546bb79ace81b3338bc613209bb48f725d144df39604111da9c775da5e5f911934fb719d5d2d73c4d083b644d81d5ef22b900c5e00a0646972fb9984bf8023be30af1a018d16e4a33c8f1e26f5fd1e344c164a88283dbbc66142b9cfffed194984dd288779638827a4435f749a50db79918f33d67adc4014754133437c9d2bb90246a33070216d80560e4fc33047f75418d4e8d88fb244aab374b60a2a71fe7b579a121edd7cabdd38c794ce3e486803d0eba379a41f074a7667790ef9acf99f7ea8856b9383498850404704655bdac133d26967fb1ef4a484780aab18e86e9f119a11e6195a40ed26b32054e0a1939dea8b2f3e5ab7d7bc5cb32895c069b84b2f0fc9291d4e35ca2a78108593e74ea25f81fa90f86c76fecc3fe193c13fb427ab6a0f5c540512309a9b4a96fb636b4275012157420c3efa09701d35ae2b06e96d4ebcfdaeb83d3ffa44c59b301243ceb33c115ced26656e15c244b4e677e981e7456950489396b83fd66746de97e41cecc8f14435ebe2f3437890fc31eb790df327cba7d40aa352911b36d71b2aafe495c9b82b790c97d3b5179ca47eddffe1f700f506491865c86e8dad4a2870efad0772b32d67d10498d5f1d4032d341078d2d5af3e9b7ef1fb7981cc1d50fe9cec2c037782ad472edb0be5cb870c203477e6df78762b1be15fb1648c6e1da3d1f95858b7a03dae9dd6fdc82d0c4434961550aa8991c73a6df1fe5cbe815a1e2c0add62f5b340e262bb369dfbced592b77df8ce5d694a59a5125b72a7d70cbcd7fcad1f8e85fbc632c21903c611744955dc7bcfa3a83b87c7dff38516e2e8974dd8f6835b5a681ab0cfe5b72b42d63047983a6ac6efeea069e12428f2d07965ea369635390f6459b1407fa5a0c5967fb119186e665e71b9b0b386f9cd690990eda4adff85cc484874265e2a9ff6573ee8d083bfdb45325dbfc452c33e92a19d024c0841892d43f4dec71b185dad3731ca647a2ffa2c80e008a8dc25667e63f8bda20806bc1a1adb93674cbcc548ba8ca7af22df43f7a41ad774e95bb8fbcf03845d5cdfb808387fc6a4d4676ea6e01c2f39836a77852ce97bd69e92865b54bc4876f0f4243db0de84d469676bb82e43bdaaa362ce99368a7ab30b8d92611ab053fb40523658884efe299a562dc0cf6b5bf996cf05a7e03ca369754968b6c317e740679b0dfe60133414932c1ae75ca0d26cd8cfbc78989de4eb37f64cbf3a14d2a72a24fbcf4c559f261115ccb4002d8d9590a5819d04869a5bebca4cac2901c2262a49b5a86ab0a3ba33942f7b94107a5ae35afd247485786e7b23c5d008ab0d9c1ca51cc86ba7bbc596a788251a8b1ef9817191c1c0dabd1e9d826f3c451b5ea73d6b74300873e34c216d21a869ed06a0d9c3be9024be3e24828393e0635a614d78eb0abcf44bfe8c8c860027c9cee58b5e41d5f1209e48253281b18727dfb926ac3687df56217241c872a5a39f65251b5ca032bfaca2c9fe662584bcb6cb3fe9be2ae57be0655586a8c704ae915f284adac8d85174799ebf9e16c43b74a154a4524e6f33467e13a121a255acfb592d47eaf13cd538de15327151ad74f578bbbfdfde82fd6afb592b7933b52241f182cb65778e3628f177eaa8c8ecc970e82a2aa52f3b7d534748b35fa1dbc0f58ede3df5ddf1f1202290a74f4a871802d1f970de3ea5553f35456e2596669c00404337f6d394fb68c588effe8987f18b04b1b52eca71062b722b2cc44e4805abf6347715a3c9e5e9b9376a45fed63b494781a4905f9ff6d898e48c5f1279fb2f4c3af50d54204d0ab410415fcb28a1b4dc0af", 0x1000}, {&(0x7f0000000000)='4', 0x1}], 0x2) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x6}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000043}, 0x0) write$dsp(r0, &(0x7f00000013c0)="fe40a1ff54d4ca004563b798563dcc5e1be6a78684dd4062469b378f675ec038f4c318e3523c79b5b662a8d6235143af651d1dd807bf48d59e9b62408e7206352df4d0f1a7a49cdc5172202515b16599f2f55d21b2e71dc770ae899374da170fa4b63c1464d098430865a02381423d57b3ec54372b4b006b124b53d4de38d572fd48695a36bcc33465a54cedb39a633c01d0c9d46a08af7f64d0f3f16390a84a035f15c67199e48b1fc23ec24f316dff1ba6ff2632c8900e22ac78d65474909c58c4d409aef3ee9f5f405306b37e201b85e77a64640c6e45aee7001a63ea307c9c745f5f274b1b1218fd2d424615f90eec0358f9af57b6349c80b2fcabb95e0ab300f3547cc6b9325400634066aa27cfe40ef1496761fb5797230bf6adf1fa82c95eb9dc00f8663c64d7a6c84b74904cc99db02f68d2bcb0861bbd720711da9f053e3299becb165ec6d61d74f712b387266348dee7f3962b370c3b5107d69a3010212b4bcf80247c018882b2f5081a0a3be7be6fc36b01458b6b9e1862ae182bdd58c9acda97d4368d2aa1d45a8769d5cf6b5fbbded83da46aaaa42e9c64483bad2a85f656372d84ed2b72bc6e4e49cd8d664f288211760e4dd6ac10fc72baa05c2ad2f2c726baab878c90d48714b83deba35ba269f0ac853732c89183945effb30102b4f41f2d119752ad6e935f50fda89026e40207fbc1238ca3d7909ade6d9291a47a633a64f9fcd5664c2a0d1a197715aee5a0207780c1ea377de06c6104c6e82e81998f732456dbf0812949a4aa20fa04649a3af5e112344c936da25b8135e523fc3138ba4f3bf11f701b12c5d9fffd62054374c2c8163525fb801a70b2c7c7629cb3b2f4db8feea5928ed435b616b7a8b0290fe26a183817e911b6410fce53cb10ac3d20b8a73442c269a65d7d48fb31d16c236c72d1f06b2f4760bc96c99f5d07607ab58f178bcfbae001fd3b300a4c37de74ff9e3377bfe696855ded83c97ab4f91b557f73edf92d533aca6e8db062fe3dc892cdf6db606e0d5d86b68555fd915e2d24112b83207c2ce7d060d07cd56dbca39f92e18a4410fe3ba9545cbe57987ee7931b83614ef308fe99fa1492b7d643f44987a574abbbc0bbaa72dd4c1f5cd88ec0d7c114f1eafb0188e6ec414c938e08d5220b57f6536b59c6401f7f5a2bb0b64c0ddf3f7793a966b048858edfd253e86d57cfeeedca29791c79d9f251decbfda716c87a768ca5a8ea55c0b911cafeae098cff9ae552838857ff15cf94a8a88f4b4742be01625ea1020bad7e8334e368eea7d465a649d4434563bb7b95ef9c82813249ee646341fae8e3f9127e45fbf6a6ec9b53dcd7917b320d5c5c561bb802f10126b52ab4efb19098d442393d1ffa60e1ea12065cdb6b65a7c7575d3c9511fe20f797b0baf576325622e510db6a9bd18fbccfb2bce074227d8b55732ca5ea288dbe5347b25f470936baabe6d9aaf4f5e0f12f724b65c39ef524e6857ffdfe9fd113354833cf79f8961539ee884c8514f70989a6747e5a003ce7eff541b3bc196c75b9c589b2bc566ed045635c33ac7770998216082d88d443d92909430db8e1692d363a18d84493948f88d8f1ff427d6801fff856f806acb03dee3baa5972d26068ef1b0e9c283378f919342fe29d715e7b8f526f05b92337f0d07bb56c9eb72a98f3d5c25c9a1d45601d80d8645e4b98686eeae57db2acb0ab5cae32f7efd235db40e56bacc63148c5040c7f2b9b6c093a3e9e3b6a31c15feca052e57b3fb308152dd5700239e8aea2f828ca5f0284cf1063c7f71bb20cfcf67fec71561f2ae91b8b8a92bedeaf5388d78d51a1a5885c047d3ade38bd358d00345fdff4ff7469ceeb5dc6852f312ca686e4c34790cb96ac74a3569056307eeb13cb4db671973f7b2a05d25c4fbad0b8bc5cb1e4534efaf7b9cac4c55c10b32c27dee243c6c7fbd2e8751f06c682e8d691004c37573f86ded9f1fbd382b671e1aee4b180bf193f7df2eaf45781ed98f28982cab22e94deb75e438768626852f85345e5e52fab509ef222fcd6b601a8c5cfa3cf9ddaf5871886beff3c7914f638b1fb4cd50b751312defb908e67076d69bc26ade0017cd1cfc09369f404c646185aacb40e77e2afc83ba1fddc6d3c6edd70d4364d69e6886dbc77a9b4489da42a37e7c44ce135cdbe75c608f10496060e75c4e767fc0bc63cf8631b0df0eb0cafdff3455392a6af122e312a90c9560acf39727eda54e05f7bd5483931ebd7f98303c379d545b0c32e5c2e99ccc3ac5263fcef35e88701530f2de7e6477ecd45262ce9019b0de00c4e3e6b290cce93ca5e130188d739a7b82a4433dbe2a5bba7ce5b10fd4ad62853bc270cc075cc19cbabd037313695b723c82467694e58bdd487e7ca3586cb9a0a987ce7f643bed039985bb079915d9f45d2b4fb4f84aafadbd2cf12b1877f4423bd539e9743d00ea37e10a3fb8f537476130a35f3963a18455ca5677f1fb361e4c1eacf2f91277cbf604c898f5280d55e3e1aaba6b6ffa42d3f592641d405947f7c427fd344d18dfec1aa104b2398799d3ca85b44bb9eb44162bda7bbd73931e60721630fe13e39b010bb5e1ee1c09be0eeb1699c5b512842aa221fedbe8e5df68c51454a721a9979f1accd237b5a15c126f5534a4bd8c0a2d14f6d455413711ddf99c0a6c4f7d2551db47e8aa7246ae489881ca4e6415b94ffbef3f5874ba275a4880bb90a14d1612db31f578d166dd5c75f7d9d17a54a04de761deda3cdd5334ecef7c3b809297691e499af88d5c692c36240ad525371fd61763ef43f5858712d48d401160792d06cd21b4a08c70622fcae4f711afa42ef5263c124bba892f169fdff8d7583d30acede6f1aaeb492194304723891fa797413a6326fbffdd073516017815db7a86afde228c31bca8cac053a42bb4c58c8c6afbdf7e65798ab8c7c3738e9acc30b1efe896a88bd530a00a79a8a5713a785510abd6f6d96c36f631c90ae460998bf06b37e586d57a516cab203fbfa9310bfc4b1d9701a04b028d337ecfe454ee2dece189637d4415fdaad1542b5cd97af04813510f9d11c4dd47c13bbb3ac6d3d4b2acd713dce4a68aa1e4aecc13da4e10d5565f12df49d3ed99b31f6f84960c4f8ad00ceab0675a420e56135b43f42854e50a37ae635bd69e214d02f8c4c7be61ed01162fe152ee61183b66123b6a7d1ae612c7cd06621311ac24a086fc43e33c5edbf8a95f7b972cc5b16d0674de533585bf29914f6e549be2a952bfab5f6623311d0c41fc3cc5e42a2284cb09b2b57927a391094af435fed4900a3d2868c5afc47d653b88639cb0fbf97b12bcf24c40867c365098a3c1e38cbeb77ca1c7e9067e59e944dc2ed6b21ad7ec7366445aec6ff5fd9bf2c72eb24920d31d63fcb210e816fc22594b27e4e647c9230b9e40223418cbf520e0d7346e1cf7851960cd060153d932fdb91b82ec32d7c580ffe9580f64ded5ffc5ca75f366f903734573e5bfe013214a84eb2ffff90854044222066cafd6d13ff1ae7c1007e21dc783614db6c0421058d59274d6c9cedd3738ed77a1d8f05588660d05cb50bc11b2dcb7833dc144bd45d7c8e06e221c7a6866a8837a463dd7838c58ea51b290d941f560fa9ea3f8b499dcbacdb818dd6d84d09686094870eb85e1c25d070eafc4ec6a2be27ff4c555a9c764981eaf74f15ec80ce4a4fab9777732fccbd78bd963ea153f7cfd746337fb73fce377bd05daf5b16f7047b8bd0030cbfbddf720e9648931ced19c3e2879ddbf6fe9829cd4fed239894e7be3e66a87c2c5e0aca9cb57cdc7def2122caf7470f621874ee7c59d0653e91216bd2ad01c59e011c4a53dcc362a7be9b3375a55ab7a17272123a6b8acb4417020dd8724d1959768636eb8ecb8f2601ef7f603442555ff494d74233ee73283b96107dfef222da2ea361284f9a40b0da02488fcdd3a3ef0befa7a2ccfec00fd8ce99cd423f729c562938d81a11064a623538720fe3eddde6730751dd4cd7a5a55f4c6525c00606adc0acb119235433283972f68623e7452da986d20db3f598511f547c1dbc7bce910bccf26613532046bc09d9408f31e6fc27d34824e324d4ab52c2715b296500fdf9cda6ca13a6be4a09d53fab93d06b026008bebe3274ebaf6853d37637e03ae44799cc9fd6797d94dbbd11f7ece1483b1da17cc784a0a18557e487d481832e9ae45f6546754ef5a677c000206fef31c0ae9b128a4108116dbdfa0d34d2cca3c5057f4411aa56ec539872cffd06ff98a8da02c91c48af924a437b3eb24350c8a6d6644f94cafb438950d4a4acd984da08f1d1de805e98d530d04f35eec92f4a4e425f37da0156ff6bd7cfcce2ea8e259b55b9be195f3327b12c33a6860efdd59ee6f2282d5583eb8112636d6ab21a2d541a5c9a848cb22bae46c8774f0c84b7a1e3b447ee3b7f6dcb2d349f517a3909d5732d9399ed7ddb57ea1fe7517854c08c1750e1dd433a347d95924dbaf8f511dc7f86a47f171c0e1ede90e3f80ab0f63b734b050d84d43212aeb5a92e12ae2abcce3fe8e18c5648c7e38655896b1bae06b3da37bb68d798715d9e18078bc1526616b4bd14a28c46fa220390042d2fad1133bd315b1d5df62b319f82aa10c9cb3beed2cf313443ead311d6d8777a325ea27377b745f8c59fb36d0d7286c1a6693c9452bd20f9098c65f52381a6727885f65344ada1e30656716345f490a56aa2bd607ccac2a5456d0278b04119fb4404abd2414889a8863417308c68e8db6ef26976282617a07ebe82928f62608c8d48d1b542ac35c43d8c2df7d5954af2fb8fa749858146ae4b583c65fa76dfc3168f320e4c48a49f38e011905d2eca3f553b3493682e2db4e9e093cafab70ec0ffa3d18830a0c8d34b454891d51707df4fdd9fc14658b8021c2652662ad265a9e13f3688c1a6fc35ac9c04d1bdc6e5ba5217d5dafcfe1bdf3d83eb33cef9426d8cbe4c34bd7ed0bb60d650cf61ae24d498310d19f27b63cf090c5f7e0515b98b4aad12d5ba72a5abb2d7c59123cec459c26e7b44ef3f3ce59a4bf698f5e2f40aef404d9cf999336fefb00425f543f095a439349165ceeeaaf474146c707ac75c482fa73da48d75189198057448ad471993eddfae9b5d90383bd178926f3eab39a314c8cdc6bdf112e4070e56373b3be566953aa293c20bce9a6d5c7c2dc45f7a3d49d107815f829cadb62f0b31dc616ee8b2e5eccc65a7d8c7e90c4536e43dc814f42126bc9683b0a06af2f738656928ee53bd2e23b52d7afefa8b100824238c97f1c1540934943870e85387067b4d9fb3b6b3641c5a937911048724b80f3f3a7bde2e26bbd9425613bb197d8188f2387f693ed2d83c96edc97fb5e1b25ab8d4cbd4a5581effff38021bbb1428332868b5077b52bd9cfefcf47abb4ce7ac3ae007c922567caba8147e0ba895b0fc6eb55d565702590e3bbfb5e9d207b6f9712042b56cf1c3c0ec4ca01fa5b3ee1b8a9027841d7a0cd6c2b80365aadc4cbf277a7736605666e05656d7ee3e8505f50051a2e0a81b8be6b6fb9f49fc31d8ddaeb46a5de97e5034a512240bd1a271bd69c91cfaaa4ed14305c80aaf2fe04d4ad8a67294842634560e2e0dde1a99ad1fbfacba7e6a4a4dd336026e22fc815999f1f771bf0900db58796a062cf260a652171f1b3f3b46d64fe2df90ac4d4efee63f642fe6c5ffacc0facb5a2394e553834e9575af729754e88d2c36a78514348f49f1dc50f26f73a010e23211108af8ba3a08b26a95ebb1d7011c5e5482e6e7", 0x1000) 3m11.063355542s ago: executing program 0 (id=240): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x40) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0xa, 0x200) close_range(r0, r1, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x40000) (async) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x40000) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x7}) (async) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x7}) read(r1, &(0x7f0000000140)=""/122, 0x7a) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3734}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x81}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000092}, 0x80) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)=@o_path={&(0x7f0000000380)='./file0\x00', r4, 0x4000, r3}, 0x18) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLERRORu(r5, &(0x7f00000004c0)={0xd, 0x7, 0x2, {{}, 0x5}}, 0xd) (async) write$P9_RLERRORu(r5, &(0x7f00000004c0)={0xd, 0x7, 0x2, {{}, 0x5}}, 0xd) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r6, 0x0, 0xcf, &(0x7f0000000500)=0x4, 0x4) fstatfs(r0, &(0x7f0000000540)=""/175) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000600)={0x4, "ae706787aae4a4485bdccdbc85aa66261cfa9a778e9985a994f51f2229813f3e", 0x3, 0x59, 0x2, 0xe0, 0x2000001, 0x2}) openat2(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x802, 0x11, 0xd}, 0x18) (async) r7 = openat2(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x802, 0x11, 0xd}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000002740)={0x50, 0xfffffffffffffff5, r8, {0x7, 0x2d, 0x5, 0x800000, 0x3, 0x8, 0x1ff, 0x7bff, 0x0, 0x0, 0xa, 0xb}}, 0x50) (async) write$FUSE_INIT(r7, &(0x7f0000002740)={0x50, 0xfffffffffffffff5, r8, {0x7, 0x2d, 0x5, 0x800000, 0x3, 0x8, 0x1ff, 0x7bff, 0x0, 0x0, 0xa, 0xb}}, 0x50) io_uring_register$IORING_REGISTER_CLOCK(r7, 0x1d, &(0x7f00000027c0)={0x3}, 0x0) io_uring_enter(r7, 0x4d52, 0x9ee6, 0x79, &(0x7f0000002800)={[0x7]}, 0x8) ioctl$EVIOCGSW(r7, 0x8040451b, &(0x7f0000002840)=""/138) (async) ioctl$EVIOCGSW(r7, 0x8040451b, &(0x7f0000002840)=""/138) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002900), 0x36fde5f1782635b7, 0x0) fdatasync(r9) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002940)={0x0, 0x2514}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000002b80)={'syztnl2\x00', &(0x7f0000002b00)={'ip6_vti0\x00', 0x0, 0x29, 0xa4, 0x1, 0x1, 0x41, @remote, @loopback, 0x7, 0x20, 0x2, 0xb4}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000002b80)={'syztnl2\x00', &(0x7f0000002b00)={'ip6_vti0\x00', 0x0, 0x29, 0xa4, 0x1, 0x1, 0x41, @remote, @loopback, 0x7, 0x20, 0x2, 0xb4}}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002c40)={0x0, 0x3, 0x18}, 0xc) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002c40)={0x0, 0x3, 0x18}, 0xc) openat$vsock(0xffffffffffffff9c, &(0x7f0000002c80), 0x14080, 0x0) (async) r13 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002c80), 0x14080, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002d40)={{r4}, &(0x7f0000002cc0), &(0x7f0000002d00)=r7}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002d40)={{r4, 0xffffffffffffffff}, &(0x7f0000002cc0), &(0x7f0000002d00)=r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002e80)={0x11, 0xa, &(0x7f0000002980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10001}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xd}, @map_fd={0x18, 0x2, 0x1, 0x0, r10}, @exit, @generic={0x2, 0x1, 0x4, 0x2, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000002a00)='GPL\x00', 0x401, 0xaf, &(0x7f0000002a40)=""/175, 0x41100, 0x50, '\x00', r11, 0x0, r7, 0x8, &(0x7f0000002bc0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000002c00)={0x2, 0xa, 0x18}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002e40)=[r12, r4, r7, r4, r13, r14, 0xffffffffffffffff, r9], 0x0, 0x10, 0x2}, 0x94) 3m10.953928935s ago: executing program 0 (id=241): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x20044004) 3m10.95231868s ago: executing program 0 (id=242): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m10.763871873s ago: executing program 0 (id=243): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r0, &(0x7f0000000040)="0d17c7cd647856732bc7e48314bf370cfc1ec8bd0e32276439c51982262c56", 0x1f) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6005, &(0x7f0000000540)=0xa, 0x6, 0x0) 3m10.363966107s ago: executing program 0 (id=244): read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) (async) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x14) (async) r0 = syz_open_dev$vim2m(0x0, 0x2000000000725, 0x2) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x8084) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x268, 0x300, 0x240, 0x268, 0x378, 0x460, 0x460, 0x378, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x220, 0x240, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x5, 0x9}}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xffffff00], [0x0, 0xff000000], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1e, 0x3, 0x10007fe, 0x6, 'pptp\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) (async) socket$nl_generic(0x10, 0x3, 0x10) 3m10.31727143s ago: executing program 33 (id=244): read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) (async) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x14) (async) r0 = syz_open_dev$vim2m(0x0, 0x2000000000725, 0x2) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x8084) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x268, 0x300, 0x240, 0x268, 0x378, 0x460, 0x460, 0x378, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x220, 0x240, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x5, 0x9}}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xffffff00], [0x0, 0xff000000], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1e, 0x3, 0x10007fe, 0x6, 'pptp\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) (async) socket$nl_generic(0x10, 0x3, 0x10) 2m59.083756638s ago: executing program 3 (id=404): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r1 = syz_io_uring_setup(0x830, &(0x7f0000000300)={0x0, 0x1000cd1d, 0x10100}, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x4000}, {0x0}, {0x0, 0x0, 0x1}, {0x0}]}, 0x4, 0x2}, 0x1) migrate_pages(0x0, 0x3, &(0x7f0000000100)=0x7f, &(0x7f0000000300)=0xa) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2m59.014050654s ago: executing program 3 (id=405): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0xd, r1}) 2m58.944188513s ago: executing program 3 (id=406): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/time\x00') recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 2m58.864030205s ago: executing program 3 (id=408): shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x463}]}}}]}, 0x3c}}, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1, 0x2) 2m58.68230358s ago: executing program 3 (id=411): r0 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0x5, 0x12, r0, 0x82000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x604c011}, 0x41) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000040), 0x0}, 0x20) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fc, &(0x7f00000000c0)="aa790dc23319e1f498ce7721e06acede160af7fa16a491066311fbf368968011e8a0c01f723a63013ffbd8511f0a6391b552ee2eab131f2a5f5ea2ef91d5095c509083fa09b5144ba135c87b37a663fb44d18867a0cef46bf821e96c4a1ca43907b7fc0e4d9a") r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x1180, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000010, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @empty}, 0x1c) ioctl$CDROM_NEXT_WRITABLE(r6, 0x5392, &(0x7f0000000080)) sendto$l2tp(r4, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) 2m57.804011645s ago: executing program 3 (id=414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) rt_sigprocmask(0x0, &(0x7f0000000040)={[0x456]}, &(0x7f0000000080), 0x8) r3 = socket(0x10, 0x803, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) ppoll(&(0x7f0000001500)=[{r4, 0x9}], 0x1, 0x0, 0x0, 0x0) pidfd_send_signal(r4, 0x1f, &(0x7f00000002c0)={0x2d, 0xc4c6, 0x80000001}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000240)={0x1, 'veth0_to_hsr\x00', {}, 0x4}) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01144e", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}}}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x8000) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x4) 2m42.803048114s ago: executing program 34 (id=414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) rt_sigprocmask(0x0, &(0x7f0000000040)={[0x456]}, &(0x7f0000000080), 0x8) r3 = socket(0x10, 0x803, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) ppoll(&(0x7f0000001500)=[{r4, 0x9}], 0x1, 0x0, 0x0, 0x0) pidfd_send_signal(r4, 0x1f, &(0x7f00000002c0)={0x2d, 0xc4c6, 0x80000001}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000240)={0x1, 'veth0_to_hsr\x00', {}, 0x4}) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01144e", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}}}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x8000) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x4) 1m51.240877962s ago: executing program 6 (id=923): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000400)={0x0, 0x81, [0x3, 0x5, 0x24ee3110, 0xa5e1, 0x8, 0x10]}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) shutdown(r1, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='omfs\x00', 0x208000, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x24}}, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000104010300000000000000000a0000051200010002000000d66087adc05967604e15605a152ddbc35fe2752b9d16558f5246cc1e97f29ce9bd56266a8425a2d4f94b29f3d1a9dadafa93ebe9e05ed74f40cfe2d8d4a7b09de25f03c4b817699f9c48233114ea89b84b1cb2aafca358"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c00000010000d042dbd7000fcffff1f00000000", @ANYRES32=0x0, @ANYBLOB="fc300600000100004c00127609a78408626f6e64000000003c000280050001000400000207001500000000000800080b0200000800050000f0ffff08000f000400000006bf9e00180004000000be2b22538af100000000974e74852cbcad73b34b4da865816b10441b07e53e8fa75efa31edf8ff22c35babf4f95ac3346645573056f980963bf68feb6e9381cf6327a434a5d5045347d269b10700000095e1597cf6f3eea6924f4eab4342c4ebf7af6d8bdf44141ad250555a8baf4912633eb4ac8257d2f3cfad"], 0x6c}, 0x1, 0x0, 0x0, 0x24088845}, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f00000000c0)=0xc, 0x9, 0x3) 1m51.161373501s ago: executing program 6 (id=928): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r1, 0x21b, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x14, r6, 0x0, r5}) (async) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0xd71, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000180)={0x0, 0x2, 0x2, "e4815826b1af9d911c9e181942f697619ff1bcb06be129cd593711aab0d1884a", 0x3234564e}) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x3c}}, 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c40)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffb35}, [@alu={0x7, 0x1, 0x2, 0x4, 0x8, 0xffffffffffffffff, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x1, 0x3, 0x4, 0x7, 0xfffffffffffffffe, 0x8}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x1fc, 0x1000, &(0x7f0000000b40)=""/4096, 0x41000, 0x24, '\x00', r8, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001b80)={0x4, 0x7, 0x4, 0x1}, 0x10, 0x26799, r10, 0x4, &(0x7f0000001bc0)=[0x1], &(0x7f0000001c00)=[{0x4, 0x4, 0x7, 0x3}, {0x1, 0x4, 0x1, 0xa}, {0x5, 0x3, 0x0, 0x8}, {0x2, 0x1, 0x4, 0x4}], 0x10, 0xc}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r10, r12, 0x25, 0x0, @val=@netkit={@void, @value=r13}}, 0x1c) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000300)={'filter\x00', 0x4}, 0x68) 1m50.972207315s ago: executing program 6 (id=931): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"00000500000000000000000100", 0x0, 0x0, {0xfffffffffffffffc, 0x10000}, {0x6, 0x80}, 0xab4, [0x5, 0x7a, 0x1, 0x4000000005, 0x40, 0x66, 0x1, 0x80000000, 0xa, 0x1, 0x10, 0x4, 0xfffffffffffffff8, 0xffdffffffffffff7, 0xf, 0xa]}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='5', 0x1}], 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000100}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close(0x3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x8, 0x1, 0x0, 0x7fffffff, {{0x25, 0x4, 0x1, 0x6, 0x94, 0x67, 0x0, 0x5, 0x29, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0xac, 0x0, 0xa, [0x49448a07, 0x0, 0x7, 0x400, 0x401, 0x91]}, @timestamp_addr={0x44, 0x4c, 0x66, 0x1, 0x3, [{@private=0xa010101, 0x1}, {@multicast2, 0x8}, {@private=0xa010100, 0xffffff24}, {@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x5}, {@multicast2, 0x47dfbbd0}, {@remote, 0x8}, {@multicast1, 0xc}, {@local, 0x16d}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0xc, 0x8e, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb2dd}]}, @noop]}}}}}) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1401000020000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', r3, 0xf000, 0x7, 0x0, 0xe46d, {{0x19, 0x4, 0x1, 0x7, 0x64, 0x67, 0x0, 0x3, 0x4, 0x0, @empty, @local, {[@lsrr={0x83, 0xf, 0x8d, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @lsrr={0x83, 0xf, 0x16, [@loopback, @dev={0xac, 0x14, 0x14, 0x1d}, @empty]}, @timestamp_prespec={0x44, 0xc, 0xf2, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x9}]}, @cipso={0x86, 0x1b, 0x2, [{0x0, 0x8, "49e2974d937c"}, {0x6, 0xd, "31d53eda04d5c522eb3ae2"}]}, @generic={0x94, 0x8, "be339b530c75"}]}}}}}) r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000180)) 1m50.921433709s ago: executing program 6 (id=934): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x8000000000000000, 0xb3f, 0x0, 0x40000000000001a, 0x6, 0x6, 0x7ff, 0x100fff}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc8, 0x7ff, 0x427, 0x0, 0x7}}}}, 0xe) chdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000900)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_emit_ethernet(0x12, &(0x7f0000000240)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@generic={0x4305}}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) (async) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f00000000c0)='./file1\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x8000000000000000, 0xb3f, 0x0, 0x40000000000001a, 0x6, 0x6, 0x7ff, 0x100fff}) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc8, 0x7ff, 0x427, 0x0, 0x7}}}}, 0xe) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000900)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) syz_emit_ethernet(0x12, &(0x7f0000000240)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@generic={0x4305}}}, 0x0) (async) 1m50.758710981s ago: executing program 6 (id=936): munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) (async) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) r0 = syz_pidfd_open(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000fef000/0xf000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000fef000/0xf000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x5c18398e38e63e22}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ip6erspan0\x00', 0x200}) brk(0x200000ffc000) 1m50.554990389s ago: executing program 6 (id=943): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff7ffffffd, 0x122862) sendfile(r1, r1, 0x0, 0x1b) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES32=r0], 0x24}}, 0x20000090) 1m50.465369654s ago: executing program 35 (id=943): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff7ffffffd, 0x122862) sendfile(r1, r1, 0x0, 0x1b) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES32=r0], 0x24}}, 0x20000090) 1m1.107857572s ago: executing program 4 (id=1785): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) read$dsp(r0, &(0x7f0000000040)=""/196, 0xc4) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)="fea5c462ad80a8939b683431a8d64ac281147625f4816fdb80c0d71379a31a0cc4fa8adf95c5c2d164bd73efa989f61b4419dc5ed964ea654acb0dfeadf7342a5a08fd79bc13c9fe4903da3f00c3926f3327998042c00359af3ccb63e4d2c0e7951e341575f45f29aefd30f4e4f2d1b8c03e274876fb423fdd599d899678770d435ab6820c4767bc3452a39da414273bbe7c1feda1b2b959b14de2ab5cee64e2c892970dd3", 0xa5, r0}, 0x68) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x101, 0x70bd2b, 0x0, {{@in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0xd, 0x400, 0x9, 0xa}, {0x2, 0x0, 0x0, 0xf, 0x0, 0x3}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x0, 0x6c}, 0xa, @in6=@local, 0x4000, 0x1, 0x0, 0x0, 0x4, 0x7f}]}]}, 0xfc}}, 0x4080) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1m0.959174837s ago: executing program 4 (id=1787): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "7ba743a97aac531b584f2e7583bbbfaaab74c1eed202653e09fd2247bf3f978b1c68d3dd705db1297cacae5fbb39a1c2385609facfb049eaa1f41e75241de197", 0x1f}, 0x48, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000100)=@chain={'key_or_keyring:', r0}) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e24, @broadcast}, 0x4, 0x0, 0x0, 0x0, 0x3ff, &(0x7f0000000140)='hsr0\x00', 0x7, 0x2, 0x4}) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="ca95d1b1828344ea3d721f25c6d92ec88f05be30373d1040e22a31922f9becf7382d87e9208e3da39a7af189e022113d699a7e1d75943f1ef997ad3cc9cace9a18eeb312b85aa4397d52571dc826550442ccabda9f58f9fe224586cb18c4e6a43bfa7b8b8811f399a16b5e22adfefe619551", 0x72, r0) keyctl$dh_compute(0x17, &(0x7f0000000300)={r0, r0, r1}, &(0x7f0000000340)=""/193, 0xc1, &(0x7f0000000500)={&(0x7f0000000440)={'hmac(sha1-neon)\x00'}, &(0x7f0000000480)="6f0d0493470e0a128dd5cbb99f6b40ba39467e6e8d508b0cc680bc7321418a207bc78a52f8c88ce445ea026accbe4d7f650840a4bfd29b3ad640edb6afef51ee693228b81bc72fc2ded09cda902d0734dd2298", 0x53}) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x9, r0, r2) r3 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)="80731ec1cfa2c6c342be1406927df425af4c29c0ec7d8ce724e454c49c113142dde94162f6ab4e0af414ad9156704e626d09c10d736fdc31ef91a79d2357e3da6233caf40154ff681580604487c29ff205cbe70c179084b8df4f15a7e90037381df8c446d81843fab76174cb6b081e39a001d9657f0fed36fe14772e74df53a75578e99f9a0f6be8e9640595747021e351053bb5fed7e9a8f54722ff3e4e97dfcde542d67ed9", 0xa6, r3) keyctl$clear(0x7, r3) keyctl$search(0xa, r2, &(0x7f0000000780)='ceph\x00', &(0x7f00000007c0)={'syz', 0x1}, r3) r5 = add_key$user(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, &(0x7f0000000880)="49a2e1195a796ecc091e83ccc14b1a5ba465ca27ebfb7f93d5319a28d7e4260d3a7cdc736db9017f21c6d0bb7c23908ff5ae62e65504af542ec3ea015642ccb19fff77d6d277", 0x46, r3) keyctl$join(0x1, &(0x7f0000000900)={'syz', 0x0}) add_key$fscrypt_provisioning(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, &(0x7f00000009c0)={0x3, 0x0, @d}, 0x18, 0x0) pipe2$watch_queue(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r6, 0x91) keyctl$dh_compute(0x17, &(0x7f0000000a40)={r4, r5, r4}, &(0x7f0000000a80)=""/175, 0xaf, &(0x7f0000000bc0)={&(0x7f0000000b40)={'sha384-avx\x00'}, &(0x7f0000000b80)="5a71c74f70dd111948a9417f6599006f66a2673cc7e4b68d3a1500f4c90c7542fe0fee3e59e6445aaf96852671c016bd172d01a998288a7b54d130520b", 0x3d}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000c00)=@secondary) keyctl$reject(0x13, r5, 0x6504, 0x7dce, r3) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000c40)={0x0, 0x80000001, 0x0, [0x1d7bb4ae, 0x4, 0xfffffffffffffff8, 0x2, 0x8], [0xaf, 0x3, 0x6, 0x5, 0x4, 0x8, 0x7, 0x1, 0x4961, 0x3, 0x4, 0x6, 0x100, 0x5, 0x7, 0x2, 0x200040000, 0x0, 0x4, 0x5, 0x4, 0x100000001, 0x9, 0x1000, 0x2, 0x81, 0x7, 0x74, 0x6, 0xffffffffffffff3f, 0x3, 0x0, 0x8c62, 0x4, 0x3, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0xc6c, 0x9, 0x6, 0xff, 0x6, 0xd, 0x7, 0x1, 0xd7c0, 0x1, 0x0, 0xffffffffffffffff, 0x7fffffffffffffff, 0xee, 0xafa, 0x52, 0x6, 0x80000001, 0x0, 0x7, 0x4, 0x6, 0x10001, 0x6, 0x5, 0x5, 0x9, 0xb87, 0x1, 0x78a, 0x4, 0x2, 0x5000000, 0x2, 0x3, 0x5, 0x80, 0x5, 0x5a, 0x4, 0x3, 0x6, 0x9, 0x213c, 0x8, 0x0, 0x0, 0x3, 0x9, 0x608, 0x2d, 0x8000000000000000, 0xac2, 0x2, 0xfffffffffffffff5, 0xfffffffffffffff9, 0x9, 0x0, 0x5, 0x6, 0x0, 0x81, 0x0, 0x5, 0x2, 0x9a66, 0x8000, 0x2, 0x7, 0xfffffffffffffff6, 0x2, 0x3, 0x8000, 0x3, 0xffffffff, 0x0, 0x6, 0x3, 0x6, 0x4, 0x9]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000001080)={r8, 0x7f, 0x9}) r9 = add_key$keyring(&(0x7f0000001480), &(0x7f00000014c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x4010, r6, 0x84c45000) add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x1}, 0x0, 0x0, r9) keyctl$unlink(0x9, r1, r2) ioctl$XFS_IOC_FSINUMBERS(r7, 0xc0205867, &(0x7f0000001780)={&(0x7f0000001580)=0x7, 0x6, &(0x7f00000015c0)=[{}, {}], &(0x7f0000001740)}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000018c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000017c0)="9a9082e9157c78d7741586728100c3007250ae99b6d7912b9028ca3957c94a6163e1e78038222041c979c8cd4018e1e3fd3e5b46703b050c91ffcb0c7d3038798a50977544ed43fdc321b50fbc3f432f81ac9776033c9c26112566c0f2dcd17a2d7f9c50eb07ca75a551f12427cd1560788835bc501219285de018b3d974ad58638c7a30becb362f570fc3ee18e05e4926928f8f78fa360312ef48b8b57cdd29cc404856bd9d6b36a3819f7694c6dbee7bd5ea43645056d69815a3188fb585987ef7aa9a13827a7ac0bc7442f3610076", 0xd0, r7}, 0x68) r10 = add_key$keyring(&(0x7f0000001a00), &(0x7f0000001a40)={'syz', 0x0}, 0x0, 0x0, r2) request_key(&(0x7f0000001940)='pkcs7_test\x00', &(0x7f0000001980)={'syz', 0x2}, &(0x7f00000019c0)='fscrypt:', r10) 1m0.886628257s ago: executing program 4 (id=1789): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x41) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x2, 0x2000) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x200000000) (async, rerun: 32) r4 = dup2(r3, r3) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000300)=""/107, 0x0, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x6) (async) read$FUSE(r4, &(0x7f00000016c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$vhost_msg_v2(r4, &(0x7f0000000200)={0x2, 0xff80, {&(0x7f0000000640)=""/142, 0x8e, 0x0, 0x1, 0x2}}, 0x48) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000500)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) (async) mkdirat(r2, &(0x7f0000000100)='./file0/file0\x00', 0x90) (async) prctl$PR_CAPBSET_DROP(0x18, 0xf) (async) setresuid(0x0, 0xee00, 0x0) (async, rerun: 32) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x5, @private1, 0x0, 0x2}, 0x20) (async, rerun: 32) r6 = fsopen(&(0x7f0000000140)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) capset(&(0x7f0000000500)={0x20071026, r5}, &(0x7f00000002c0)={0x204002, 0x200004, 0x802, 0xb23, 0x1, 0xfffffffa}) (async) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x59081, &(0x7f0000000380)={[{@uuid_on}, {@redirect_dir_nofollow}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) (async) write(r7, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) 1m0.801329977s ago: executing program 4 (id=1791): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000190001000000000010000000e0000002000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000002ee0000000000001910be1a000000000000000000000000000000000000000008000000000000000000000000000000fdfffffffffeffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e00000100010000000008001f000100"], 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000600)=""/1) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r4, &(0x7f0000000a40)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/47, 0x2f}}], 0x1, 0x140, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x262) r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x8, 0x7, 0x9, 0x6, {{0x1a, 0x4, 0x3, 0x4, 0x68, 0x64, 0x0, 0x0, 0x2f, 0x0, @multicast1, @multicast2, {[@noop, @end, @cipso={0x86, 0x2d, 0x0, [{0x1, 0xe, "c78f89c4c36b0fa9d11c4273"}, {0x0, 0x2}, {0x7, 0xf, "5d7ff6a4ca11a7f3015de6440d"}, {0x2, 0x8, "334aca21c8e1"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x86, 0xa, "31ab1418aea99fc0"}, @timestamp={0x44, 0x8, 0x62, 0x0, 0x0, [0x2]}, @ssrr={0x89, 0xf, 0xf2, [@rand_addr=0x64010100, @loopback, @multicast1]}]}}}}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250100000006000a004e24000014000900fa880000000000000060000000000100050002000a"], 0x38}, 0x1, 0x0, 0x0, 0x8000000}, 0x800) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x800000, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x7, 0x2, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0xfffffffffffffffd, 0xa8, 0x1, 0x2000000000000007, 0x9, 0x38c, 0x7, 0x7, 0xae8f, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r10, 0x3ba0, &(0x7f00000003c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000001c0), 0x4}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'ip6gre0\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000004c0)={0xec94, 0x4, 0x3, 0x7, 0x3, 0x0, [{0x0, 0x6, 0x2, '\x00', 0x20d}, {0x1ff, 0x0, 0x25, '\x00', 0x5}, {0x7f, 0x9, 0x7, '\x00', 0x2104}]}) recvfrom$packet(r6, &(0x7f0000000100)=""/105, 0x69, 0x20, &(0x7f0000000440)={0x11, 0x1, r7, 0x1, 0x2, 0x6, @random="26bea7c7fe18"}, 0x14) 59.951909655s ago: executing program 4 (id=1797): creat(&(0x7f0000000080)='./file0\x00', 0x6a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x2c0, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x80000001, 0x58, 0x4, 0x9000, 0x9, r2, r3, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}, {{0x20000003, 0x2, 0x401, 0x9, 0xbc88, 0x9, {0x4, 0x5, 0x5, 0x6, 0x3, 0x12e, 0x6af, 0x8, 0xf7fffffa, 0xc000, 0x4, r2, r3, 0x4, 0x8}}, {0xffffdfffffffffff, 0x401, 0xb, 0x4, '&+%*!\xeb(^-@\x00'}}, {{0x3, 0x3, 0x10001, 0x200, 0xfefffc5b, 0x8, {0x0, 0x400000000005, 0xedd, 0xff, 0x0, 0x4, 0xfff, 0x0, 0xb, 0xa000, 0xf8e9, 0x0, r3, 0x8}}, {0x1, 0x1, 0x1, 0x8, '\x00'}}, {{0x4, 0x0, 0x7fc, 0x3, 0x0, 0x96, {0x6, 0x1, 0x5, 0x8, 0x8000, 0x3, 0x7, 0x9, 0x9, 0x4000, 0x2, 0x0, r3, 0x5, 0x1}}, {0x4, 0x0, 0x2, 0x9, 'fd'}}]}, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x2001000, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x34, 0x30, 0x32, 0x31, 0x30, 0x65, 0x32, 0x63], 0x2d, [0xdd37d7ab3fa04255, 0x36, 0x34, 0x35], 0x2d, [0x32, 0x31, 0x31, 0x36], 0x2d, [0x62, 0x36, 0x65, 0x63], 0x2d, [0x3f, 0x30, 0x39, 0x34, 0x36, 0x66, 0x63, 0x37]}}}, {@uid_lt={'uid<', r2}}, {@subj_type={'subj_type', 0x3d, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}, {@subj_type={'subj_type', 0x3d, 'user_id'}}, {@smackfshat={'smackfshat', 0x3d, 'upperdir'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@uid_gt={'uid>', r2}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) 59.641706727s ago: executing program 4 (id=1801): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x14, 0xffffff87}]}}}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000000c0), 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000000c0), 0x0}, 0x20) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) 59.572461838s ago: executing program 36 (id=1801): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x14, 0xffffff87}]}}}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000000c0), 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000000c0), 0x0}, 0x20) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) 3.470117995s ago: executing program 8 (id=2606): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x30, r3, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20044005) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00'}, 0x48) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$ndb(&(0x7f0000002880), 0x0, 0x340) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000002980), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002a40)={0x1c, r5, 0x13, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x800) 3.320872452s ago: executing program 8 (id=2611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001300f5d10300"/20, @ANYRES32=r2, @ANYBLOB="000100000000000008000d00"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x10}, {0xffff}, {0x4, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x42e}]}}]}, 0x3c}}, 0x40014) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x6, 0x2}, {0x0, 0xfff1}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040851}, 0x4041080) 3.200161197s ago: executing program 8 (id=2613): r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r0, 0x10, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xe, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xc5, 0x0, 0x1}}, 0x40) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/softnet_stat\x00') read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000027c0)={0x2c, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 3.150398094s ago: executing program 8 (id=2614): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x35, 0x301, 0x70bd29, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44893}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r3, 0x81, 0xff08, &(0x7f0000000c40)="2318e78a8110b1c89f478f51e1a8dc6a90c8e40855f1484f523e935f5b4f4a225183bfd4ca317400"/49) read$char_usb(r4, &(0x7f0000000100)=""/242, 0xf2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001600)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000600)="ef3d2b2ab3", 0x5}, 0x68) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x702, 0xe80, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$rfkill(r6, &(0x7f00000000c0), 0x8) write$cgroup_type(r6, &(0x7f00000001c0), 0x9) setsockopt$sock_int(r2, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) 1.641280003s ago: executing program 2 (id=2632): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/53, 0x35}], 0x1) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x4040c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2, 0x3}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x5, 0x8, 0x200, 0xffffffff, 0x7}, 0x14) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143142, 0x103) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r4, 0x11}, 0xa) io_submit(r3, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r2, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) 1.590633649s ago: executing program 2 (id=2633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202) socket(0x1a, 0x1, 0xb577) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a85a056f5d759ded130e04d528539f3d328973747a75df8a69ea917deb7d6193b3e7772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}}) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x4000) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67b15cdf0311cfcf33a52a7d86bd1", 0x10) accept4$alg(r5, 0x0, 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="08f69e00800c0000dc9ff1ed60771bd20b369c21b4c6eaf75113fade21dfac345b1b662915170d3fc180f2cc8538ffe21f10b3bcfb7989a5328497b09c48e72dbead9e3c503e521d3b14a12ca7783d7ccb8594e67bf6f803f415aadd27192c87aa0ce7093d6aa392b4a7cf4508fccd5af73350cc72eecfba817edc22921d79b1036756540406e97137f8f8208268ebb37fc18046366acb254d1087a950341e89b4dfd94fb42fecf6d00bf853358702e91364c2b148dadafd50284b06505239"], 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x40084) 1.520122466s ago: executing program 2 (id=2635): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0x2287, &(0x7f0000000c00)={'\x00', 0x9, 0xfffffffc, 0xdbae, 0xffffffff80000000, 0x3}) listns(0x0, 0x0, 0x0, 0xf4240) r3 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f0000000280)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$pagemap(r3, &(0x7f0000000200)) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="49aa259e0312df8ac7f7a8", 0xb}, {&(0x7f0000000c00)="ebe3a0e9796cf91647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfeb55b5bb9fa6935849e6098ed880500000000000000b37b4fe035bbb0958730487e49f48456d3fa99da6e0509aecc95aa0812ac33246a8be0ce726af2c958d59e8aa97c70151375a467", 0x75}], 0x2, 0x0, 0x0, 0x40001}], 0x1, 0x40810) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/85, 0x55}, {&(0x7f0000000400)=""/81, 0x8e}], 0x2}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @private=0xa010106}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x20008000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) recvmsg(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) 910.336721ms ago: executing program 5 (id=2647): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x2006004) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = socket$inet6(0xa, 0x80802, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) (async) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100881}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xa, 0x8, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100881}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xa, 0x8, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000500)={&(0x7f0000000380), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7fffffff, 0x74}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4880) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000500)={&(0x7f0000000380), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7fffffff, 0x74}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4880) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="11002a00dd0b6162636465666760696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r7, 0xc03064b7, &(0x7f0000000200)={r8, 0x0, 0x0, 0x80000003, 0x1000a2a, 0xfffffffc, 0x0, 0x200, 0x3, 0xc, 0x3000040, 0x31e}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r7, 0xc03064b7, &(0x7f0000000200)={r8, 0x0, 0x0, 0x80000003, 0x1000a2a, 0xfffffffc, 0x0, 0x200, 0x3, 0xc, 0x3000040, 0x31e}) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) (async) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r6, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 829.257377ms ago: executing program 7 (id=2649): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x2e8, 0xa, 0xd0e0000, 0x2e8, 0x100, 0x3c0, 0x1d8, 0x1d8, 0x3c0, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2c8, 0x2e8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x35, 0x0, [{0xe, 0x5}, {0x7, 0xae, 0xe, 0x3}, {0x5, 0x6, 0x1, 0x8}, {0x50, 0xc0, 0x0, 0x9}, {0x8, 0x7, 0x3, 0x91}, {0xd, 0x10, 0x21, 0x6}, {0x8001, 0x1, 0xff, 0x401}, {0x0, 0x8d, 0x9, 0x9fc}, {0xfffe, 0x0, 0xc1, 0xfffffff7}, {0x10, 0x59, 0x6, 0x2}, {0x400, 0x7, 0x6a, 0x2}, {0x8, 0xb6, 0xf, 0x6}, {0x6, 0x9, 0x4, 0xc}, {0x7, 0x80, 0x1, 0x3}, {0x1ff, 0xe, 0x5}, {0x100, 0x0, 0x4}, {0x1, 0x3, 0x6e, 0xc}, {0x2ff, 0x8, 0x80, 0x3}, {0xcc, 0x3, 0x10, 0x80}, {0x401, 0xfe, 0xfb, 0xfffff386}, {0x5, 0x9, 0x4, 0x8001}, {0x584, 0xfc, 0x6, 0x3}, {0x4695, 0xa, 0xc5, 0x3}, {0x2, 0x8, 0x80, 0x4}, {0x7, 0x23, 0x6, 0x400}, {0x2, 0x7, 0x0, 0xfffffffd}, {0x3, 0xf, 0x0, 0x8b}, {0xa36c, 0x9, 0x8, 0x2}, {0x5, 0x56, 0x0, 0x8}, {0x1, 0x4, 0x10, 0xbe6}, {0x3, 0xea, 0x1c, 0x6}, {0xf8, 0x4, 0x0, 0x200}, {0x2, 0x40, 0x5, 0xac6}, {0x1, 0x4, 0x4, 0x80000001}, {0x7, 0x2, 0x0, 0x6ffb}, {0xa, 0xf0, 0x7a, 0xc}, {0x5, 0x2, 0x70, 0x7f}, {0x8, 0x5, 0x4, 0x3}, {0x1, 0x2c, 0x9, 0x1}, {0x3ff, 0x97, 0x2, 0x9}, {0xff, 0x2, 0x2, 0x4}, {0x9, 0x4, 0xf, 0xf5}, {0x9, 0x8, 0x1, 0x9}, {0xf, 0x6, 0x7f, 0x80000000}, {0x1ff, 0x1, 0x8, 0x3}, {0x5, 0x4, 0x0, 0x5}, {0x6, 0x4, 0x3, 0x400}, {0x8, 0x2, 0x10, 0x1}, {0xfff9, 0x9, 0x5, 0x80}, {0xfffc, 0x0, 0x6, 0x7}, {0xa4, 0x7, 0x1, 0x10}, {0x8, 0xd, 0x1, 0xfffff40b}, {0xfff, 0x46, 0xf5, 0x8}, {0xd4d4, 0x1, 0x1, 0x8}, {0xfff8, 0x4, 0x9, 0x5}, {0x3, 0x8, 0x1, 0x7}, {0x2, 0x4, 0xd5, 0xaf0}, {0x0, 0x3, 0x3, 0x5}, {0x8, 0x4, 0xb, 0x200}, {0x9b5, 0x4, 0x8, 0x1000}, {0x8001, 0x7, 0x4, 0x3}, {0x1, 0xe, 0xf9, 0xde7}, {0xd, 0x4, 0xe5}, {0x8001, 0x5, 0x80, 0xa4}], {0x2}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'veth1_to_hsr\x00', 'syzkaller0\x00', {}, {0xff}, 0xc, 0x2, 0x1}, 0x3202, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x68f, 0x6, 0x101, '\x00', 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x40025b0c, &(0x7f0000000140)) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x80, 0x40000000, r1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/164, 0xa4}], 0x1, &(0x7f0000001d80), 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r8, 0x0, 0x33, 0x0, &(0x7f0000000540)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x6}, 0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chmod(&(0x7f00000002c0)='./file0\x00', 0x2603562a802e6683) r9 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x100) fremovexattr(r9, &(0x7f0000000040)=@known='system.posix_acl_access\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x1a, @void}, 0x10) 619.269649ms ago: executing program 2 (id=2650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) syz_emit_ethernet(0xc3, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000b5000000000001907864010100ace414aa0b009078032c000046000000000000000089000000000000ac1414aa862a00000002060d5e000000ff000000f5870000054eb8a600129606053d0006ff00800000b61af93a93071f57640101010a010100ac1e010100000000640101027f0000010a01010286380000000000074b6cefc500000cdf61168c24ac88ad078c00112189ea43e2149b8444a30300505c09000802a20948fd7400061c12ddfd000000a8"], 0x0) 521.04263ms ago: executing program 2 (id=2651): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x26, 0x9, 0x70bd26, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4004046}, 0x4000000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x24000) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$afs(&(0x7f0000000000)=@cell={0x25, 'syz0:', 'syz0'}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x80000, &(0x7f0000000300)={[{@dyn}], [{@audit}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, '{'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@obj_type={'obj_type', 0x3d, '#-$#/-/^@/,'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 471.193669ms ago: executing program 2 (id=2652): socket$kcm(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800, 0x8, &(0x7f00000004c0)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x8, 0x9, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20008800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = dup2(r6, r7) sendmmsg$inet6(r7, &(0x7f0000001280)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xfc1, @rand_addr=' \x01\x00', 0xc09}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000180)=' ', 0x1}], 0x1}}], 0x1, 0x5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000080)=ANY=[], 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80080, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) r10 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r10, 0x29, 0x16, &(0x7f0000fcb000), 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000480)=0x5, 0x4) 311.110156ms ago: executing program 5 (id=2653): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$netlink(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x579b, &(0x7f0000000b80)={0x0, 0x94ce, 0x1000, 0x2, 0x269}, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004041) r1 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xc272, 0x200, 0x0, 0x20002fb}) r2 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x3, {0x11, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0xf602, 0x6, 0xfffffff3, 0x0, 0x0, 0x0, '\x00', 0xfffffffffffffffe, 0x0, 0x1ff, 0x0, {}, {0x5, 0x2}, {0x7, 0x4}, {0x5}, 0x60, 0x0, 0x7fff}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f00000001c0)=0xb, 0x4) modify_ldt$write2(0x11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="01012abd7000000008002b00000008000300", @ANYRES32=r5, @ANYBLOB="040046000a0034000202020202020000080026006c0900004c0051802c0000800800030005ac0f00040005000500020003000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4804) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000200)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000280)="d5c955bc7639f042aed374ce6b35b9fae04a268c98fc2ce1ca5f56e03524b4b56174b8ceac548dbc485563875240fb15468d46b49eb482528865bdbf93bbe326c6eceab5702cd05ecea8116a83ad42f5b4", 0x51}, {&(0x7f0000000340)="364c3d2823cf85b009e8d154ef04288f49ad3bfb72336be430765972e526f51af6de7b8d693f36baa2465c45185fe2e4d08f789a5a7cfbebe5e5f90927966f08453973121fbcff0a6fc9e522d985868cb47b7e9662c2ac0b057781d6df79543b9dae2827c9bdd6a0a3b20c3203759a5f0a45f1f585", 0x75}, {&(0x7f00000003c0)="c382e6044f86236909fcd7bf903e95f32b0d13900e440e9b639da43722aa078e8b5de2da55dc1c4b9308eead0a588753f8dc8a4c0ba904dc6770528c2b8f7388e714c5f77a7f2cafe2dadd3860d40c5986a0c56dd82d25b5d18216b9651d7b35cac909eeb26993a4ae1e9928be0eea85e6d70db34680d03af5ddc6e9f194211ffefefc22885cdbf491c90ecaffd15ec8dd7977289821f91a", 0x98}, {&(0x7f0000000480)="dadc91e0e66b8601580897304334956386c9036793f65cb2fcae413a52a23f71568dd8ebdb6f1265befac92329dc655e6a4431ae010fad14e28eb6f91e8d90bc4d9952cf8d08c55697d27dd59d07b95fd6b38bc3c8fbb88c932e352a40dd5cff9e4ca0a86fc81697a36671be2911ef430d9f20dc81deea460c3dd8a28a7753eeef95c6f77b12cb6f4361a6ddad1357f8b73b37ac", 0x94}, {&(0x7f00000005c0)="31ffc78730f5b3885eb1e1eb19fab0bd460b4fc40ffa0e65f0f532d6dcbe3983f5f8f092e5a84e5994a1a1c9130e171f5011a80c884141ea5e6ebdc013efc0720a00dbe9749c6e88d10d33ca9eeb1a8853d5ff952a15437067e0505f3b206e4e50d2ecde19512d820bbd9e739fc9fd97735772beae91166b6c5f393372160b1f3b63ccc166dd97c151abdb2d8bb9d4f272f989f5f6d8072591fabc4a987f9753382bab", 0xa3}, {&(0x7f0000000680)="56adc42d13559c32af51a3c957632c2f6acab9e01c1e03d875d919459bfb0c1f4b42b5d2091e70f33e542b72ba244f201e59ea68de835b4bb6255bb00249568fb989899e8a9b0cc266d7f36da2ace1e8c3ea650dac94d06744f8ee49c9e732922892ed5a79e743b244007a10781cc2cda4dcb0276fb78cbcacbdef4980e9231a40ff5b769c226fa0411f88447e14fcefa52518", 0x93}, {&(0x7f00000007c0)="bd3f1c2bb05e56b6a8ebdfe6218118c54f9f4da34c5fdcf83508a45d35dc65bb1d97c7a5d55e7e0372928695fc926fc3e722343345ca51", 0x37}], 0x7, &(0x7f0000000c00)=[{0xc8, 0x1a4, 0x1, "7191e1a5b8795a30ebb6ce0e828ede6a977e9475c18887d8105c6578c3fe721d7aac277a3bea507e6abaffa59571fd056f5f773222dccc3f41b5aec97fd570b16650f051dab4f577f25f90b07741ca5eca5d1ce4567a267332f517f4ced0399c1b707bba82249cca6e788037fe607c21d82c9a90c1c69f853a4c8868a0e63db03e6bd194a846a35ca02aa37afdc8182755d3446156bb3f13350a830dfa9679a44d8a872cc51d219e73429315adead8b2d00b"}, {0xb0, 0x111, 0x5, "5db9c593cf427fa214e70cede891030e17c77fb5ce540eb025238efe80f7778b2f694c8121a62a2c365d37c1db54c0ad5c36a5b8e445bad5ad590ddab56a739be29291a529afe915ead842fcd59ccd3f1eda58b1ccfae4b6a54da46f735c1eae5ee2cafed8e5ce66619fa1d80692682216379d3c1b11207eedfa99e294d6275fdfc8e413108f9bdafee443a9d602065aa4ac602a8659c2e9dbcfaace7f"}, {0x108, 0x10c, 0x93e1, "bac9e0ba4408236c6b4c6d134411e650cc35393260541d635597b246e02bbcd3bfd07d015a72bf5631ee9396434fcd95c37bf9140c59802363de7b2ff563a011cfccbf93229795a23c0b257ef5ce72fe0a625ea7a1c242bb3ff7c8fad438f936c68c4e30331645fc78d7d0bc901b30a9da92c4412a7dcf543c628b4357300f47a83e7f53ed2752d8ecc3412f6eaa4a5a2666016de58d93f3e5d50ff5182b6301f8b99c8cf5b3a8e130f2ccfb48f1e20d4aa132d2a9a5d9f8ef7872cf4335a8bf36f50959b01e22caec330c2a99b87a2c9d05124dd5b4c004c3a6df176c04866e19f6c1fbf8dc953120f2249d8aa75e4a57a408ec17146b5e"}, {0x98, 0x11, 0x8, "4d2673194b2c71c88b9357d0171309172f587d437b41e61773e84f2f6264ba8634dfc7d15122d2b50ee469bdf8fc14747e46802fe371bd81dfe470f7444488230baa8b4d24dfeec1fa5f856f8a1344c4e3b461f2d032beac86df00196b3d6d83e295a5013e63936c9258bb9bd77e711214b7d11953f53be3a86465d6bf8d4a04363f3ff2"}], 0x318}, 0x8000) 253.571172ms ago: executing program 5 (id=2654): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5423, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x5, 0x3, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 252.305178ms ago: executing program 5 (id=2655): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x1ff, "6f75dd", 0xff, 0xff}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0xe5) 171.49958ms ago: executing program 7 (id=2656): munlock(&(0x7f0000cb5000/0x3000)=nil, 0x3000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') mount$fuse(0x0, 0x0, 0x0, 0x10004, &(0x7f0000002140)=ANY=[]) read$FUSE(r1, &(0x7f0000006200)={0x2020}, 0xffe8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=@newlink={0xb4, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x70, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x1}}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5e6a6330}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x204}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc07, 0xa39}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x83c}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 165.496688ms ago: executing program 5 (id=2657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x2}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x5c, r5, 0x917, 0x70bd29, 0xfffffffc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffc}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x100008c5}, 0x20000810) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000054d0a54432e91aeb0a1860e7cfdde293dc9edf293b10fc01a664d6c438261008a2f59d45014608000f8131a42df7a47e68244083d431e2f629a5f23d231e3028a5713e5035b1ef89b3a616c271305ef15c073cbe40f66e1e2400000000000000000000b5d251a975190867eff1f4923e0000000000000800f7d5", @ANYRES16=r6, @ANYBLOB="010029bd700000000000030000004c0001800d0001007564703a73797a320000000038000400ebfd01000a004e240000bfa6ff010000000000000000000000000001f00200001400020002004e23ffffffff0000000000000000"], 0x60}}, 0x4004090) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x2}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x5c, r5, 0x917, 0x70bd29, 0xfffffffc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffc}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x100008c5}, 0x20000810) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000054d0a54432e91aeb0a1860e7cfdde293dc9edf293b10fc01a664d6c438261008a2f59d45014608000f8131a42df7a47e68244083d431e2f629a5f23d231e3028a5713e5035b1ef89b3a616c271305ef15c073cbe40f66e1e2400000000000000000000b5d251a975190867eff1f4923e0000000000000800f7d5", @ANYRES16=r6, @ANYBLOB="010029bd700000000000030000004c0001800d0001007564703a73797a320000000038000400ebfd01000a004e240000bfa6ff010000000000000000000000000001f00200001400020002004e23ffffffff0000000000000000"], 0x60}}, 0x4004090) (async) 165.221569ms ago: executing program 7 (id=2658): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_APDU={0x1c, 0x19, "8e6a4df80362ac596c0bf4964db695c004d4ce74a7392fbf"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x800, 0x70bd29, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e00)={{0x14}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x4c}}, 0xc040) 163.100851ms ago: executing program 5 (id=2659): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000a000085000000ad0000009500000000000000b3cd91115eb8e652f2de1652464abeffe45ea5d02a47dd0af49d3cbdb819ac0afe07341685ca0461afbead16a3e9cb460665223ffb26b9fd6339402d71f59771e951e6ffa0e9c6c9a7352c6b"], &(0x7f0000000340)='GPL\x00', 0x3}, 0x94) r0 = add_key(&(0x7f0000000440)='trusted\x00', 0x0, &(0x7f00000004c0)="a079394a04954e2d1523cd274d954f18a7b1235d2023e670955c12e7265fa97c2cfb7ba5f67d4a0f06d00c089c2dbb7034ddf203c4f50b4d19d6ab0b49d345571461f3c9bc2be016252397574e61cd9b5fc6337f92b077112e9d69d5f0d761e584bd5f7a22aa334740193d174c89a6670c1c0a98533ebffcb043f72e876d30dc59b400", 0x83, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000000)=@secondary) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x0, 0x1c8, 0x130, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x110) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r2, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xff}, {0x10000, 0x5000, 0x3, 0xfc, 0x8, 0x0, 0x0, 0x64, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x4, 0x2}, {0xffff1000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x3, 0x7}, {0x6000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x6, 0xfd}, {0x4000, 0x1000, 0x0, 0x3, 0x9b, 0xfd, 0xfc, 0x4, 0x0, 0x5, 0xc0, 0x10}, {0x3000, 0x100000, 0x10, 0x0, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x6f, 0x1, 0xfd, 0x0, 0x9, 0x3, 0x5}, {0x2000, 0xb}, {}, 0x9df9ffdf, 0x0, 0xeeee0000, 0x20, 0xe, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000a000085000000ad0000009500000000000000b3cd91115eb8e652f2de1652464abeffe45ea5d02a47dd0af49d3cbdb819ac0afe07341685ca0461afbead16a3e9cb460665223ffb26b9fd6339402d71f59771e951e6ffa0e9c6c9a7352c6b"], &(0x7f0000000340)='GPL\x00', 0x3}, 0x94) (async) add_key(&(0x7f0000000440)='trusted\x00', 0x0, &(0x7f00000004c0)="a079394a04954e2d1523cd274d954f18a7b1235d2023e670955c12e7265fa97c2cfb7ba5f67d4a0f06d00c089c2dbb7034ddf203c4f50b4d19d6ab0b49d345571461f3c9bc2be016252397574e61cd9b5fc6337f92b077112e9d69d5f0d761e584bd5f7a22aa334740193d174c89a6670c1c0a98533ebffcb043f72e876d30dc59b400", 0x83, 0xffffffffffffffff) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000000)=@secondary) (async) socket$l2tp(0x2, 0x2, 0x73) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x0, 0x1c8, 0x130, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x110) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') (async) write$binfmt_script(r2, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) lsetxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xff}, {0x10000, 0x5000, 0x3, 0xfc, 0x8, 0x0, 0x0, 0x64, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x4, 0x2}, {0xffff1000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x3, 0x7}, {0x6000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x6, 0xfd}, {0x4000, 0x1000, 0x0, 0x3, 0x9b, 0xfd, 0xfc, 0x4, 0x0, 0x5, 0xc0, 0x10}, {0x3000, 0x100000, 0x10, 0x0, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x6f, 0x1, 0xfd, 0x0, 0x9, 0x3, 0x5}, {0x2000, 0xb}, {}, 0x9df9ffdf, 0x0, 0xeeee0000, 0x20, 0xe, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) 86.017252ms ago: executing program 7 (id=2660): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00000525", @ANYRES16=r2, @ANYBLOB="0100280570913b2836e9253b000000080003", @ANYBLOB="0d50a98d0d95a13aab932edec90d681884fcf1361026d5644ac5325570a9334626c3c30690a4bd79345093fd43c62804f23c24e3cce74b75c47f2161442dad0a3687218cd957a3f0150b48663fa5be8537", @ANYBLOB="04008ed0080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 85.749676ms ago: executing program 8 (id=2661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001300f5d10300"/20, @ANYRES32=r2, @ANYBLOB="000100000000000008000d00"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x10}, {0xffff}, {0x4, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x42e}]}}]}, 0x3c}}, 0x40014) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x8}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8849}, 0x448c4) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x6, 0x2}, {0x0, 0xfff1}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040851}, 0x4041080) 84.81393ms ago: executing program 7 (id=2662): r0 = semget$private(0x0, 0x207, 0x53) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x5a, 0x1000}, {0x1, 0xc3, 0x800}, {0x2, 0x6}, {0x3, 0x50, 0x800}, {0x2, 0x3, 0x1800}, {0x1, 0x9, 0x1c00}], 0x2aaaacf7, &(0x7f0000000040)={r1, r2+60000000}) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000002c0)=""/119) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff041800000071f0d3fe13be", "3dfab029e1ff03000000000000e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x9}) preadv(r4, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="c1e05000f0ffffff9500000000000000b7080000000000007b8af8ff00000000b7080000010000000800f0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0b5b52921b8d060c8a3bc6a6bf7ffffdd047d2ff912890600d549b9efcae820a2a8c8eea1312986ef882525ff285aa23ac6e6515b99abe9227d2e4e286878116b21d8e5b76a0e6faff1dd72b07a03706d194b2a4d3877c0bd33cedfd823a2ab1ee99ce18a6b470122b66a", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000025a5060004000000"], &(0x7f00000000c0)='GPL\x00', 0xa}, 0x94) 1.349179ms ago: executing program 7 (id=2663): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r0, 0x31f, &(0x7f0000000080)={0x22, 0x1, 0xde, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x2, 0x3, 0x1, 0x10402}, {0x80001, 0x2, 0x8, 0xda1e}, {0xa47, 0x5}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000280)) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000300)=""/221) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, &(0x7f00000004c0)}, 0x880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) close(0x3) fsopen(&(0x7f0000000240)='sysfs\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x30010, 0x100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r6}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x24000840) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) setuid(0xee01) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x30) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, 0x0) fcntl$setlease(r7, 0x400, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@deltaction={0xc0, 0x31, 0x300, 0x170bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4a}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb70}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 8 (id=2664): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004680)=[@rdma_dest={0x18, 0x114, 0x2, {0x5}}], 0x18}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async, rerun: 64) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x10dd, @local, 0xff}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000001200)={r4}, &(0x7f0000002240)=0x8) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r4, 0xab8e}, &(0x7f0000000140)=0x8) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x54, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x8000) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) (async, rerun: 64) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_REJECT(r8, &(0x7f0000001700)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x81, '\x00', "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"}}, 0x110) (async) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) 0s ago: executing program 8 (id=2665): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)=[{0x15, '\x00', @data=0x3, 0x9}]}) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)}], 0x1}, 0x7101}], 0x1, 0x4001c00) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x8000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) kernel console output (not intermixed with test programs): ][T12263] veth0_to_team: entered promiscuous mode [ 203.950335][ T40] audit: type=1400 audit(1780433133.399:4470): avc: denied { open } for pid=12258 comm="syz.7.1794" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 203.962387][ T40] audit: type=1400 audit(1780433133.399:4471): avc: denied { ioctl } for pid=12258 comm="syz.7.1794" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 203.962416][T12263] veth0_to_team: left promiscuous mode [ 203.974463][ T40] audit: type=1400 audit(1780433133.399:4472): avc: denied { set_context_mgr } for pid=12258 comm="syz.7.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 203.984076][ T40] audit: type=1400 audit(1780433133.399:4473): avc: denied { write } for pid=12258 comm="syz.7.1794" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.994216][ T40] audit: type=1400 audit(1780433133.409:4474): avc: denied { ioctl } for pid=12257 comm="syz.2.1796" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.004888][ T40] audit: type=1400 audit(1780433133.409:4475): avc: denied { map_create } for pid=12257 comm="syz.2.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 204.013216][ T40] audit: type=1400 audit(1780433133.419:4476): avc: denied { bpf } for pid=12257 comm="syz.2.1796" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 204.149458][ T5837] usb 12-1: new full-speed USB device number 11 using dummy_hcd [ 204.321607][ T5837] usb 12-1: unable to get BOS descriptor or descriptor too short [ 204.325449][ T5837] usb 12-1: not running at top speed; connect to a high speed hub [ 204.330133][ T5837] usb 12-1: config 14 has an invalid interface number: 57 but max is 1 [ 204.333648][ T5837] usb 12-1: config 14 has an invalid interface number: 228 but max is 1 [ 204.337035][ T5837] usb 12-1: config 14 has no interface number 0 [ 204.339761][ T5837] usb 12-1: config 14 has no interface number 1 [ 204.342404][ T5837] usb 12-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 204.346808][ T5837] usb 12-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 204.351680][ T5837] usb 12-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 204.356200][ T5837] usb 12-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.361599][ T5837] usb 12-1: config 14 interface 57 has no altsetting 0 [ 204.364347][ T5837] usb 12-1: config 14 interface 228 has no altsetting 0 [ 204.369724][ T5837] usb 12-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 204.373469][ T5837] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.376655][ T5837] usb 12-1: Product: syz [ 204.378395][ T5837] usb 12-1: Manufacturer: syz [ 204.380968][ T5837] usb 12-1: SerialNumber: syz [ 204.721700][T12272] __nla_validate_parse: 18 callbacks suppressed [ 204.721711][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1799'. [ 204.727093][T12272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1799'. [ 204.801720][ T5837] legousbtower 12-1:14.57: interrupt endpoints not found [ 204.813050][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.818087][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 204.942141][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.948659][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 204.985066][T12278] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1802'. [ 205.026977][ T5098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.034711][ T5098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.035814][T12279] tmpfs: Bad value for 'mpol' [ 205.039470][ T5098] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.062900][ T5098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.068269][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.071768][ T5098] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.084519][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 205.154505][T12291] loop7: detected capacity change from 0 to 16384 [ 205.203602][ T5837] legousbtower 12-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 205.209517][ T5837] legousbtower 12-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 205.280561][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.288265][T12295] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1807'. [ 205.288555][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 205.311724][T12298] netlink: 'syz.2.1806': attribute type 2 has an invalid length. [ 205.318933][T12298] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1806'. [ 205.437354][ C1] blk_print_req_error: 10 callbacks suppressed [ 205.437375][ C1] I/O error, dev loop7, sector 13312 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 1 [ 205.444557][ C1] I/O error, dev loop7, sector 13568 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 1 [ 205.447887][T12294] loop7: detected capacity change from 16384 to 0 [ 205.592191][T12281] lo speed is unknown, defaulting to 1000 [ 205.618469][T12306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1810'. [ 205.688049][ T46] bridge_slave_1: left allmulticast mode [ 205.694611][ T46] bridge_slave_1: left promiscuous mode [ 205.699259][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.702356][T12310] fuse: fd is not a fuse device [ 205.710267][ T46] bridge_slave_0: left allmulticast mode [ 205.723621][ T46] bridge_slave_0: left promiscuous mode [ 205.731705][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.819595][ T7576] SELinux: failure in sel_netif_sid_slow(), invalid network interface (95) [ 206.094768][ T46] gretap0 (unregistering): left promiscuous mode [ 206.163683][T12335] fuse: fd is not a fuse device [ 206.214571][T12337] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1819'. [ 206.218695][T12337] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1819'. [ 206.270811][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.274505][ T46] bond_slave_0: left promiscuous mode [ 206.281425][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.284989][ T46] bond_slave_1: left promiscuous mode [ 206.287316][ T46] bond0 (unregistering): Released all slaves [ 206.300695][ T46] bond1 (unregistering): Released all slaves [ 206.312529][ T46] bond2 (unregistering): Released all slaves [ 206.319622][ T46] bond3 (unregistering): Released all slaves [ 206.336610][ T5451] 8021q: adding VLAN 0 to HW filter on device eth10 [ 206.357415][T12325] 8021q: adding VLAN 0 to HW filter on device bond7 [ 206.466892][ T46] tipc: Left network mode [ 206.491403][T12350] f2fs: Unknown parameter 'usrquotah' [ 206.544974][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'. [ 206.574851][T12359] fuse: fd is not a fuse device [ 206.748089][ T5451] 8021q: adding VLAN 0 to HW filter on device eth11 [ 206.786047][T12281] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.789079][T12281] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.794316][T12281] bridge_slave_0: entered allmulticast mode [ 206.798020][T12281] bridge_slave_0: entered promiscuous mode [ 206.803266][T12281] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.806279][T12281] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.809326][T12281] bridge_slave_1: entered allmulticast mode [ 206.813012][T12281] bridge_slave_1: entered promiscuous mode [ 206.820621][ T46] hsr_slave_0: left promiscuous mode [ 206.823084][ T46] hsr_slave_1: left promiscuous mode [ 206.825474][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.828758][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.979945][ T46] team_slave_1 (unregistering): left promiscuous mode [ 206.983781][ T46] team0 (unregistering): Port device team_slave_1 removed [ 207.001307][ T46] team_slave_0 (unregistering): left promiscuous mode [ 207.004971][ T46] team0 (unregistering): Port device team_slave_0 removed [ 207.011412][ T5837] usb 12-1: USB disconnect, device number 11 [ 207.038648][ T5837] legousbtower 12-1:14.228: LEGO USB Tower #-160 now disconnected [ 207.047626][T12373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pid=12373 comm=syz.7.1828 [ 207.150222][T12281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.162664][T12281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.169834][ T62] Bluetooth: hci3: command tx timeout [ 207.212545][T12281] team0: Port device team_slave_0 added [ 207.217564][T12281] team0: Port device team_slave_1 added [ 207.235018][T12281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.237230][T12281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.237837][T12377] can: request_module (can-proto-0) failed. [ 207.245248][T12281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.252961][T12281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.255149][T12281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.264561][T12281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.299311][T12281] hsr_slave_0: entered promiscuous mode [ 207.301704][T12281] hsr_slave_1: entered promiscuous mode [ 207.303853][T12281] debugfs: 'hsr0' already exists in 'hsr' [ 207.305658][T12281] Cannot create hsr debugfs directory [ 207.358539][T12385] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 207.416530][ T5451] 8021q: adding VLAN 0 to HW filter on device eth12 [ 207.507256][ T46] IPVS: stop unused estimator thread 0... [ 207.641299][T12281] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 207.654870][T12281] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 207.658924][T12281] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 207.674196][T12281] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 207.682396][T12281] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 207.704978][T12281] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 207.708147][T12281] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 207.729274][T12281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 207.734444][ T5451] 8021q: adding VLAN 0 to HW filter on device eth13 [ 207.827738][T12281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.848208][T12281] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.861632][ T8571] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.864646][ T8571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.876912][ T8567] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.880160][ T8567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.234432][T12451] 9pnet: Found fid 0 not clunked [ 208.238008][T12281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.288994][T12455] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1843'. [ 208.407057][T12281] veth0_vlan: entered promiscuous mode [ 208.413555][T12281] veth1_vlan: entered promiscuous mode [ 208.432516][T12281] veth0_macvtap: entered promiscuous mode [ 208.439520][T12281] veth1_macvtap: entered promiscuous mode [ 208.448999][T12281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.459780][T12281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.471087][ T8568] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.474432][ T8568] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.481890][ T8568] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.485826][ T8568] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.498939][T12465] xt_hashlimit: size too large, truncated to 1048576 [ 208.640404][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.646704][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.668123][ T8567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.673940][ T8567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.745622][T12481] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 209.031135][ T40] kauditd_printk_skb: 435 callbacks suppressed [ 209.031151][ T40] audit: type=1400 audit(1780433138.519:4912): avc: denied { recv } for pid=5661 comm="syz-executor" saddr=127.0.0.1 src=46594 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 209.070815][ T40] audit: type=1400 audit(1780433138.559:4913): avc: denied { watch watch_reads } for pid=12501 comm="syz.8.1854" path="/2" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 209.338880][ T40] audit: type=1400 audit(1780433138.819:4914): avc: denied { create } for pid=12509 comm="syz.7.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.345439][ T40] audit: type=1400 audit(1780433138.819:4915): avc: denied { getopt } for pid=12509 comm="syz.7.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.352862][ T40] audit: type=1400 audit(1780433138.819:4916): avc: denied { sendto } for pid=8571 comm="kworker/u32:49" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 209.361937][ T40] audit: type=1400 audit(1780433138.829:4917): avc: denied { recv } for pid=12500 comm="syz.5.1853" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46594 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 209.394355][ T40] audit: type=1400 audit(1780433138.879:4918): avc: denied { prog_load } for pid=12509 comm="syz.7.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 209.396255][T12511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=12511 comm=syz.7.1857 [ 209.396746][ T62] Bluetooth: hci1: SCO packet for unknown connection handle 1824 [ 209.436149][ T40] audit: type=1400 audit(1780433138.919:4919): avc: denied { read } for pid=12513 comm="syz.7.1858" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 209.446056][ T40] audit: type=1400 audit(1780433138.919:4920): avc: denied { open } for pid=12513 comm="syz.7.1858" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 209.458210][ T40] audit: type=1400 audit(1780433138.939:4921): avc: denied { ioctl } for pid=12513 comm="syz.7.1858" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 209.573556][T12517] netlink: 'syz.7.1859': attribute type 1 has an invalid length. [ 209.595612][T12517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.611818][T12517] vlan3: entered allmulticast mode [ 209.613437][T12517] team_slave_0: entered allmulticast mode [ 209.659331][T12520] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 209.661465][T12520] overlayfs: failed to set xattr on upper [ 209.663241][T12520] overlayfs: ...falling back to redirect_dir=nofollow. [ 209.665307][T12520] overlayfs: ...falling back to index=off. [ 209.667089][T12520] overlayfs: ...falling back to uuid=null. [ 209.668943][T12520] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 209.671731][T12520] overlayfs: maximum fs stacking depth exceeded [ 209.756893][T12524] bond0: option ad_select: unable to set because the bond device is up [ 209.927643][T12534] __nla_validate_parse: 6 callbacks suppressed [ 209.927657][T12534] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.1865'. [ 211.169644][ T62] Bluetooth: hci3: command tx timeout [ 211.738723][T12485] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.835894][T12543] netlink: 'syz.8.1866': attribute type 1 has an invalid length. [ 211.838700][T12543] netlink: 272 bytes leftover after parsing attributes in process `syz.8.1866'. [ 211.846748][T12543] netlink: 'syz.8.1866': attribute type 1 has an invalid length. [ 212.058956][T12570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12570 comm=syz.5.1868 [ 212.082445][T12577] netlink: 'syz.8.1877': attribute type 39 has an invalid length. [ 212.095352][T12577] hsr_slave_0 (unregistering): left promiscuous mode [ 212.115415][T12582] netlink: 'syz.2.1879': attribute type 1 has an invalid length. [ 212.147134][T12582] 8021q: adding VLAN 0 to HW filter on device bond8 [ 212.162585][T12582] bond8: (slave veth0_to_bond): making interface the new active one [ 212.167557][T12582] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 212.312530][T12605] netlink: 'syz.8.1887': attribute type 1 has an invalid length. [ 212.374876][T12612] geneve4: entered promiscuous mode [ 212.377173][T12614] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1887'. [ 212.382196][T12612] geneve4: entered allmulticast mode [ 212.389029][T12614] xfrm0: entered promiscuous mode [ 212.398221][T12605] netlink: 'syz.8.1887': attribute type 15 has an invalid length. [ 212.401202][T12605] netlink: 'syz.8.1887': attribute type 7 has an invalid length. [ 212.403763][T12605] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1887'. [ 212.510344][T12623] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1895'. [ 212.761578][T12640] loop4: detected capacity change from 0 to 2640 [ 212.764851][T12640] buffer_io_error: 10 callbacks suppressed [ 212.764866][T12640] Buffer I/O error on dev loop4, logical block 0, async page read [ 212.771296][T12640] Buffer I/O error on dev loop4, logical block 0, async page read [ 212.779012][T12640] Buffer I/O error on dev loop4, logical block 0, async page read [ 212.785732][T12640] Buffer I/O error on dev loop4, logical block 0, async page read [ 212.791459][T12640] Buffer I/O error on dev loop4, logical block 0, async page read [ 212.797609][T12640] Buffer I/O error on dev loop4, logical block 0, async page read [ 212.801936][T12640] Buffer I/O error on dev loop4, logical block 0, async page read [ 212.807646][T12640] Buffer I/O error on dev loop4, logical block 0, async page read [ 212.811503][T12639] Buffer I/O error on dev loop4, logical block 0, async page read [ 212.816472][T12640] ldm_validate_partition_table(): Disk read failed. [ 212.816677][T12639] Buffer I/O error on dev loop4, logical block 0, async page read [ 212.824226][T12640] Dev loop4: unable to read RDB block 0 [ 212.826675][T12640] loop4: unable to read partition table [ 212.828523][T12640] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 212.914521][T12649] netlink: 'syz.8.1902': attribute type 4 has an invalid length. [ 212.982933][T12651] SELinux: policydb version 0 does not match my version range 15-35 [ 212.993206][T12651] SELinux: failed to load policy [ 213.023692][T12653] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1905'. [ 213.079907][T12660] xt_hashlimit: size too large, truncated to 1048576 [ 213.134060][T12667] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 213.140799][T12667] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 213.151591][T12665] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1908'. [ 213.226600][T12671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.261724][ T62] Bluetooth: hci3: command tx timeout [ 213.631981][T12691] erspan2: entered promiscuous mode [ 213.798805][T12701] netlink: 'syz.7.1919': attribute type 1 has an invalid length. [ 213.813022][T12701] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.838534][T12701] veth5: entered promiscuous mode [ 213.850441][T12701] bond3: (slave veth5): Enslaving as an active interface with a down link [ 213.863703][T12701] bond3: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 213.891459][T12704] fuse: fd is not a fuse device [ 213.895601][T12704] fuse: fd is not a fuse device [ 213.913100][T12705] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1919'. [ 213.917359][T12705] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 213.973280][T12709] netlink: 45 bytes leftover after parsing attributes in process `syz.7.1922'. [ 213.993343][T12710] overlayfs: failed to clone upperpath [ 214.015358][T12712] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1923'. [ 214.095326][ T40] kauditd_printk_skb: 221 callbacks suppressed [ 214.095341][ T40] audit: type=1400 audit(1780433143.579:5143): avc: denied { create } for pid=12716 comm="syz.8.1925" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 214.107575][ T40] audit: type=1400 audit(1780433143.589:5144): avc: denied { create } for pid=12716 comm="syz.8.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 214.115680][ T40] audit: type=1400 audit(1780433143.589:5145): avc: denied { getopt } for pid=12716 comm="syz.8.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 214.152789][ T40] audit: type=1400 audit(1780433143.639:5146): avc: denied { ioctl } for pid=12719 comm="syz.2.1927" path="socket:[50112]" dev="sockfs" ino=50112 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 214.167431][ T40] audit: type=1400 audit(1780433143.649:5147): avc: denied { create } for pid=12719 comm="syz.2.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 214.176371][ T40] audit: type=1400 audit(1780433143.649:5148): avc: denied { setopt } for pid=12719 comm="syz.2.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 214.184000][ T40] audit: type=1400 audit(1780433143.659:5150): avc: denied { bind } for pid=12719 comm="syz.2.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 214.191924][ T40] audit: type=1400 audit(1780433143.659:5149): avc: denied { read write } for pid=9357 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.202002][ T40] audit: type=1400 audit(1780433143.659:5151): avc: denied { open } for pid=9357 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.211700][ T40] audit: type=1400 audit(1780433143.659:5152): avc: denied { write } for pid=12719 comm="syz.2.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 214.223941][T12707] A link change request failed with some changes committed already. Interface sit2 may have been left with an inconsistent configuration, please check. [ 214.395221][T12733] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 214.410830][T12733] ip6erspan0: entered promiscuous mode [ 214.538403][T12738] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=12738 comm=syz.7.1932 [ 214.568205][T12738] lo speed is unknown, defaulting to 1000 [ 214.591946][T12742] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 214.605611][T12742] tipc: Started in network mode [ 214.607285][T12742] tipc: Node identity 4004, cluster identity 4711 [ 214.610557][T12742] tipc: Node number set to 16388 [ 214.666806][T12749] validate_nla: 2 callbacks suppressed [ 214.666819][T12749] netlink: 'syz.8.1935': attribute type 8 has an invalid length. [ 214.695778][T12751] ip6t_srh: unknown srh match flags 4000 [ 214.736476][T12728] syz.2.1927 (12728): drop_caches: 1 [ 214.757881][T12756] xt_TCPMSS: Only works on TCP SYN packets [ 214.803922][T12759] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 214.870897][ T5885] IPVS: starting estimator thread 0... [ 214.908087][T12772] comedi comedi1: c6xdigio: I/O port conflict (0x100,3) [ 214.914518][T12773] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 214.959684][T12770] IPVS: using max 45 ests per chain, 108000 per kthread [ 215.025729][T12782] bridge1: entered promiscuous mode [ 215.040944][T12788] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 215.044282][T12788] exFAT-fs (nullb0): invalid boot record signature [ 215.048732][T12788] exFAT-fs (nullb0): failed to read boot sector [ 215.052363][T12788] exFAT-fs (nullb0): failed to recognize exfat type [ 215.123907][T12800] __nla_validate_parse: 5 callbacks suppressed [ 215.123924][T12800] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1949'. [ 215.239705][T12798] syz.5.1950 (12798) used greatest stack depth: 18952 bytes left [ 215.309823][T12805] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 215.370007][T12810] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1955'. [ 215.685486][T12841] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1965'. [ 215.689567][T12843] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1965'. [ 215.759207][ T5885] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 215.792636][T12855] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 215.812091][T12854] evm: overlay not supported [ 215.852705][T12861] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1970'. [ 215.885910][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1971'. [ 215.888849][T12867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1971'. [ 215.894671][T12867] geneve4: entered promiscuous mode [ 215.896291][T12867] geneve4: entered allmulticast mode [ 215.914999][ T5885] usb 13-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 215.929367][ T5885] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.932286][ T5885] usb 13-1: Product: syz [ 215.933606][ T5885] usb 13-1: Manufacturer: syz [ 215.938360][ T5885] usb 13-1: SerialNumber: syz [ 215.941761][T12873] netlink: 'syz.5.1973': attribute type 39 has an invalid length. [ 215.967467][ T5885] usb 13-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 215.993030][ T7794] usb 13-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 215.997020][T12875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12875 comm=syz.2.1975 [ 216.001557][T12875] netlink: 'syz.2.1975': attribute type 1 has an invalid length. [ 216.030937][T12875] 8021q: adding VLAN 0 to HW filter on device bond9 [ 216.035895][T12875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12875 comm=syz.2.1975 [ 216.041791][T12876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=12876 comm=syz.2.1975 [ 216.053537][T12875] bond9: (slave geneve5): making interface the new active one [ 216.060391][T12875] bond9: (slave geneve5): Enslaving as an active interface with an up link [ 216.244206][T12906] netlink: 'syz.5.1984': attribute type 7 has an invalid length. [ 216.313031][T12906] netlink: 'syz.5.1984': attribute type 7 has an invalid length. [ 216.439622][T12915] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1987'. [ 216.440487][T12919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.443227][T12915] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.620285][T12831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.623851][T12831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.645017][ T5885] usb 13-1: USB disconnect, device number 2 [ 216.781785][T12930] tipc: New replicast peer: 224.0.0.1 [ 216.866088][T12933] netlink: 'syz.2.1993': attribute type 14 has an invalid length. [ 217.087153][T12938] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1995'. [ 217.090791][T12938] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 217.092593][T12938] PKCS7: Only support pkcs7_signedData type [ 217.248704][T12951] macsec0: entered promiscuous mode [ 217.249160][ T7794] usb 13-1: Service connection timeout for: 256 [ 217.250507][T12951] macsec0: entered allmulticast mode [ 217.252697][ T7794] ath9k_htc 13-1:1.0: ath9k_htc: Unable to initialize HTC services [ 217.254515][T12951] veth1_macvtap: entered allmulticast mode [ 217.258092][ T7794] ath9k_htc: Failed to initialize the device [ 217.266023][ T5885] usb 13-1: ath9k_htc: USB layer deinitialized [ 217.270399][T12951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12951 comm=syz.8.1999 [ 217.338994][T12955] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 217.403530][ T62] Bluetooth: hci3: unexpected cc 0x200c length: 3 > 1 [ 217.470407][T12968] syzkaller1: entered promiscuous mode [ 217.472920][T12968] syzkaller1: entered allmulticast mode [ 217.478293][T12968] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2002'. [ 217.507164][T12971] wg1: entered promiscuous mode [ 217.509894][T12971] team0: Device wg1 is up. Set it down before adding it as a team port [ 217.520111][T12973] binder: 12967:12973 unknown command 0 [ 217.521948][T12973] binder: 12967:12973 ioctl c0306201 200000000480 returned -22 [ 217.531232][ T59] kernel write not supported for file /audio1 (pid: 59 comm: kworker/3:1) [ 217.615206][T12986] overlayfs: failed to clone lowerpath [ 217.622166][T12986] overlayfs: failed to clone lowerpath [ 217.633581][T12989] netlink: 'syz.2.2012': attribute type 4 has an invalid length. [ 217.749461][T13007] lo speed is unknown, defaulting to 1000 [ 217.757093][T13011] netlink: 'syz.5.2018': attribute type 29 has an invalid length. [ 217.919199][ T59] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 218.071841][ T59] usb 7-1: Using ep0 maxpacket: 32 [ 218.078313][ T59] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 218.083580][ T59] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 218.087035][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 218.090995][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 218.095082][ T59] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 218.098889][ T59] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 218.105810][ T59] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 218.109449][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.114120][ T59] usb 7-1: config 0 descriptor?? [ 218.320715][ T59] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 218.326959][ T59] usb 7-1: USB disconnect, device number 17 [ 218.332677][ T59] usblp0: removed [ 218.530809][T13045] batman_adv: batadv0: Adding interface: dummy0 [ 218.533805][T13045] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.536937][T13037] overlayfs: failed to clone upperpath [ 218.545084][T13045] batman_adv: batadv0: Interface activated: dummy0 [ 218.566850][T13045] batadv0: mtu less than device minimum [ 218.570956][T13045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.574984][T13045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.578814][T13045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.582588][T13045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.586182][T13045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.589950][T13045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.593731][T13045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.597337][T13045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.601293][T13045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.759412][ T59] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 218.909242][ T59] usb 7-1: Using ep0 maxpacket: 32 [ 218.916739][ T59] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 218.919794][ T59] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 218.923391][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 218.926290][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 218.931650][ T59] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 218.935276][ T59] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 218.940475][ T59] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 218.945613][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.952133][ T59] usb 7-1: config 0 descriptor?? [ 219.013407][T13090] netlink: 'syz.7.2038': attribute type 15 has an invalid length. [ 219.015882][T13090] netlink: 'syz.7.2038': attribute type 7 has an invalid length. [ 219.136139][ T40] kauditd_printk_skb: 461 callbacks suppressed [ 219.136157][ T40] audit: type=1400 audit(1780433148.619:5614): avc: denied { kexec_image_load } for pid=13100 comm="syz.5.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 219.159473][ T59] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 219.186066][ T40] audit: type=1400 audit(1780433148.669:5615): avc: denied { read write } for pid=9357 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.196553][ T40] audit: type=1400 audit(1780433148.669:5616): avc: denied { open } for pid=9357 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.206506][ T40] audit: type=1400 audit(1780433148.669:5617): avc: denied { ioctl } for pid=9357 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.217609][ T40] audit: type=1400 audit(1780433148.689:5618): avc: denied { write } for pid=13100 comm="syz.5.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 219.226537][ T40] audit: type=1400 audit(1780433148.689:5619): avc: denied { mounton } for pid=13103 comm="syz.7.2043" path="/237/file0" dev="tmpfs" ino=1281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 219.236603][ T40] audit: type=1400 audit(1780433148.689:5620): avc: denied { mount } for pid=13103 comm="syz.7.2043" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 219.245571][ T40] audit: type=1400 audit(1780433148.709:5621): avc: denied { unmount } for pid=9357 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 219.249754][T13108] autofs4:pid:13108:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 219.254323][ T40] audit: type=1400 audit(1780433148.729:5622): avc: denied { create } for pid=13107 comm="syz.7.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.257549][T13108] autofs4:pid:13108:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 219.266210][ T40] audit: type=1400 audit(1780433148.729:5623): avc: denied { write } for pid=13107 comm="syz.7.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.385866][ T8570] Bluetooth: hci4: Frame reassembly failed (-84) [ 219.411799][T13119] bridge_slave_1: default FDB implementation only supports local addresses [ 219.645572][ T46] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 219.652064][T13144] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 219.654483][T13144] overlayfs: failed to set xattr on upper [ 219.656361][T13144] overlayfs: ...falling back to redirect_dir=nofollow. [ 219.658689][T13144] overlayfs: ...falling back to index=off. [ 219.660928][T13144] overlayfs: ...falling back to uuid=null. [ 219.668112][T13144] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 220.099421][ T53] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 220.262095][ T53] usb 12-1: Using ep0 maxpacket: 32 [ 220.268504][ T53] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.289328][ T53] usb 12-1: config 0 has no interfaces? [ 220.299782][ T53] usb 12-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 220.305252][ T53] usb 12-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 220.309308][ T53] usb 12-1: Product: syz [ 220.310907][ T53] usb 12-1: Manufacturer: syz [ 220.319443][ T53] usb 12-1: SerialNumber: syz [ 220.328523][ T53] usb 12-1: config 0 descriptor?? [ 220.366734][T13192] overlayfs: regular lower layers cannot follow data lower layers [ 220.428209][T13192] sd 0:0:0:0: PR command failed: 1026 [ 220.428905][ T39] usb 7-1: USB disconnect, device number 18 [ 220.430865][T13192] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 220.435510][T13192] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 220.436140][ T39] usblp0: removed [ 220.563800][ T53] usb 12-1: USB disconnect, device number 12 [ 220.652918][T13213] netlink: 'syz.5.2068': attribute type 1 has an invalid length. [ 220.667550][T13213] 8021q: adding VLAN 0 to HW filter on device bond9 [ 220.676444][T13213] macvlan4: entered promiscuous mode [ 220.678178][T13213] macvlan4: entered allmulticast mode [ 220.690590][T13213] bond9: (slave ip6gretap1): making interface the new active one [ 220.693955][T13213] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 220.738308][T13220] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 220.747245][T13220] overlayfs: failed to set xattr on upper [ 220.749843][T13220] overlayfs: ...falling back to redirect_dir=nofollow. [ 220.754856][T13220] overlayfs: ...falling back to index=off. [ 220.757013][T13220] overlayfs: ...falling back to uuid=null. [ 220.763913][T13220] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 220.794132][T13222] __nla_validate_parse: 10 callbacks suppressed [ 220.794143][T13222] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2069'. [ 220.866106][T13237] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2073'. [ 221.032427][T13251] kvm: kvm [13250]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 221.224055][T13273] overlayfs: missing 'lowerdir' [ 221.320296][T13284] netlink: 'syz.2.2082': attribute type 11 has an invalid length. [ 221.325371][T13285] netlink: 'syz.2.2082': attribute type 11 has an invalid length. [ 221.419255][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 221.423911][ T5098] Bluetooth: hci4: command 0x1003 tx timeout [ 221.465417][T13301] overlayfs: failed to resolve './file3': -2 [ 221.533708][T13306] kernel read not supported for file /file1 (pid: 13306 comm: syz.7.2095) [ 221.723071][T13324] bond10: (slave bond_slave_1): Device is not bonding slave [ 221.726181][T13324] bond10: option active_slave: invalid value (bond_slave_1) [ 221.733238][T13324] bond10 (unregistering): Released all slaves [ 222.057079][T13347] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2107'. [ 222.060902][T13347] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2107'. [ 222.076691][T13347] erspan0: entered promiscuous mode [ 222.086659][T13347] erspan0: left promiscuous mode [ 222.201235][T13352] vlan1: entered promiscuous mode [ 222.212460][T13352] vlan1: entered allmulticast mode [ 222.214727][T13352] veth0_vlan: entered allmulticast mode [ 222.240237][T13352] loop2: detected capacity change from 0 to 1 [ 222.247374][T13352] Dev loop2: unable to read RDB block 1 [ 222.249243][T13352] loop2: AHDI p1 p2 p3 [ 222.250975][T13352] loop2: partition table partially beyond EOD, truncated [ 222.253705][T13352] loop2: p1 start 1601398130 is beyond EOD, truncated [ 222.256019][T13352] loop2: p2 start 1702059890 is beyond EOD, truncated [ 222.539558][T13381] trusted_key: encrypted_key: hex blob is missing [ 222.592132][T13386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57990 sclass=netlink_route_socket pid=13386 comm=syz.7.2119 [ 222.773433][T13405] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.2125'. [ 222.872315][T13415] lo speed is unknown, defaulting to 1000 [ 222.875824][T13413] kvm: Disabled LAPIC found during irq injection [ 222.966316][T13415] /dev/nullb0: Can't lookup blockdev [ 223.209674][T13423] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 223.263188][T13426] netlink: 'syz.5.2130': attribute type 21 has an invalid length. [ 223.265759][T13426] IPv6: NLM_F_CREATE should be specified when creating new route [ 223.268248][T13426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 223.270874][T13426] IPv6: NLM_F_CREATE should be set when creating new route [ 223.274052][T13426] IPv6: NLM_F_CREATE should be set when creating new route [ 223.276921][T13426] IPv6: NLM_F_CREATE should be set when creating new route [ 223.282072][T13426] netlink: 'syz.5.2130': attribute type 21 has an invalid length. [ 223.285537][T13426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 223.493782][T13438] binder: 13437:13438 ioctl c0306201 200000000080 returned -14 [ 223.518112][T13440] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2137'. [ 223.522369][T13440] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2137'. [ 223.525340][T13440] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2137'. [ 223.528324][T13440] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2137'. [ 223.529053][T13438] binder_alloc: 13437: binder_alloc_buf, no vma [ 223.532749][T13440] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2137'. [ 223.602699][T13452] netlink: 'syz.5.2139': attribute type 4 has an invalid length. [ 223.603108][T13453] netlink: 'syz.5.2139': attribute type 4 has an invalid length. [ 223.614333][T13452] netlink: 'syz.5.2139': attribute type 17 has an invalid length. [ 223.653293][T13457] netlink: 'syz.5.2140': attribute type 1 has an invalid length. [ 223.779064][T13469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13469 comm=syz.7.2144 [ 223.841957][T13462] ip6gretap2: entered promiscuous mode [ 223.844368][T13462] ip6gretap2: entered allmulticast mode [ 223.916983][T13486] netlink: 'syz.5.2149': attribute type 4 has an invalid length. [ 223.925086][T13488] netlink: 'syz.5.2149': attribute type 4 has an invalid length. [ 224.001222][T13491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.007438][T13491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.188909][ T40] kauditd_printk_skb: 412 callbacks suppressed [ 224.188920][ T40] audit: type=1400 audit(1780433153.669:6036): avc: denied { create } for pid=13500 comm="syz.7.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 224.197323][ T40] audit: type=1400 audit(1780433153.669:6037): avc: denied { setopt } for pid=13500 comm="syz.7.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 224.203523][ T40] audit: type=1400 audit(1780433153.679:6038): avc: denied { prog_run } for pid=13500 comm="syz.7.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 224.246114][ T40] audit: type=1400 audit(1780433153.729:6039): avc: denied { map_read map_write } for pid=13500 comm="syz.7.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 224.247554][T13501] Cannot find set identified by id 4 to match [ 224.257266][ T40] audit: type=1400 audit(1780433153.739:6040): avc: denied { name_bind } for pid=13500 comm="syz.7.2154" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 224.269610][ T40] audit: type=1400 audit(1780433153.749:6041): avc: denied { recv } for pid=5661 comm="syz-executor" saddr=127.0.0.1 src=46594 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 224.293005][ T40] audit: type=1400 audit(1780433153.779:6042): avc: denied { create } for pid=13502 comm="syz.7.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 224.300657][ T40] audit: type=1400 audit(1780433153.789:6043): avc: denied { write } for pid=13502 comm="syz.7.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 224.307114][ T40] audit: type=1400 audit(1780433153.789:6044): avc: denied { read } for pid=13502 comm="syz.7.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 224.322996][ T40] audit: type=1400 audit(1780433153.809:6045): avc: denied { write } for pid=13502 comm="syz.7.2155" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 224.359713][T13503] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13503 comm=syz.7.2155 [ 224.436011][T13515] fuse: fd is not a fuse device [ 224.706174][T13531] 9pnet_virtio: no channels available for device syz [ 224.708678][T13531] 9pnet_virtio: no channels available for device syz [ 224.711167][T13531] 9pnet_virtio: no channels available for device syz [ 224.713346][T13531] 9pnet_virtio: no channels available for device syz [ 224.715468][T13531] 9pnet_virtio: no channels available for device syz [ 224.718641][T13531] 9pnet_virtio: no channels available for device syz [ 224.722144][T13531] 9pnet_virtio: no channels available for device syz [ 224.725191][T13531] 9pnet_virtio: no channels available for device syz [ 224.728294][T13531] 9pnet_virtio: no channels available for device syz [ 224.732096][T13531] 9pnet_virtio: no channels available for device syz [ 224.735724][T13531] 9pnet_virtio: no channels available for device syz [ 224.739244][T13531] 9pnet_virtio: no channels available for device syz [ 224.742427][T13531] 9pnet_virtio: no channels available for device syz [ 224.745707][T13531] 9pnet_virtio: no channels available for device syz [ 224.748965][T13531] 9pnet_virtio: no channels available for device syz [ 225.169407][ T7576] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 225.339234][ T7576] usb 12-1: Using ep0 maxpacket: 8 [ 225.342935][ T7576] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 225.345826][ T7576] usb 12-1: config 0 has no interface number 0 [ 225.347846][ T7576] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.352193][ T7576] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 225.355422][ T7576] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.361220][ T7576] usb 12-1: config 0 descriptor?? [ 225.367803][ T7576] iowarrior 12-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 225.880353][T13557] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 225.885031][T13557] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.888511][T13557] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 225.892195][T13557] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 225.901182][T13557] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 225.957161][T13576] netlink: 'syz.2.2178': attribute type 20 has an invalid length. [ 226.205605][ T62] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 226.692150][T13605] bond10: entered allmulticast mode [ 227.134161][ T5098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 227.142065][ T5098] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 227.145719][ T5098] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 227.153056][ T5098] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 227.157178][ T5098] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 227.169628][ T5098] Bluetooth: hci0: command 0x0c1a tx timeout [ 227.377117][T13639] __nla_validate_parse: 31 callbacks suppressed [ 227.377134][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2195'. [ 227.410190][T13636] lo speed is unknown, defaulting to 1000 [ 227.704901][ T8567] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.708224][ T8567] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.714578][ T8567] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 227.739205][T13636] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.741484][T13636] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.743826][T13636] bridge_slave_0: entered allmulticast mode [ 227.746449][T13636] bridge_slave_0: entered promiscuous mode [ 227.749929][T13636] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.752249][T13636] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.754606][T13636] bridge_slave_1: entered allmulticast mode [ 227.757195][T13636] bridge_slave_1: entered promiscuous mode [ 227.783872][T13636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.790691][T13636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.817681][T13636] team0: Port device team_slave_0 added [ 227.823437][T13636] team0: Port device team_slave_1 added [ 227.853657][T13636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.854290][ T59] usb 12-1: USB disconnect, device number 13 [ 227.856646][T13636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.881466][T13636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.900267][T13636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.900492][ T62] Bluetooth: hci3: command 0x0c1a tx timeout [ 227.904648][ T5098] Bluetooth: hci1: command 0x0c1a tx timeout [ 227.911192][T13636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.930106][T13636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.934564][T13676] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 227.941031][T13676] qnx6: wrong signature (magic) in superblock #1. [ 227.945062][T13676] qnx6: unable to read the first superblock [ 228.051355][ T8567] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.055900][ T8567] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.062779][ T8567] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 228.106096][T13636] hsr_slave_0: entered promiscuous mode [ 228.108417][T13636] hsr_slave_1: entered promiscuous mode [ 228.110872][T13636] debugfs: 'hsr0' already exists in 'hsr' [ 228.112812][T13636] Cannot create hsr debugfs directory [ 228.166248][ T8567] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.170629][ T8567] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.174248][ T8567] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 228.243521][ T8567] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.246756][ T8567] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.250313][ T8567] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 228.501073][ T8567] bond9 (unregistering): (slave ip6gretap1): Releasing active interface [ 228.869283][ T5837] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 228.950846][ T8567] bond0 (unregistering): Released all slaves [ 228.960894][ T8567] bond1 (unregistering): Released all slaves [ 228.973234][ T8567] bond2 (unregistering): Released all slaves [ 228.985890][ T8567] bond3 (unregistering): Released all slaves [ 228.998401][ T8567] bond4 (unregistering): (slave vlan2): Releasing active interface [ 229.002058][ T8567] bond4 (unregistering): Released all slaves [ 229.012042][ T8567] bond5 (unregistering): Released all slaves [ 229.023723][ T8567] bond6 (unregistering): Released all slaves [ 229.031145][ T5837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 229.035063][ T5837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 229.036944][ T8567] bond7 (unregistering): Released all slaves [ 229.039215][ T5837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 229.045936][ T5837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8240, setting to 1024 [ 229.053828][ T5837] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 229.057659][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.061857][ T5837] usb 7-1: Product: syz [ 229.063694][ T5837] usb 7-1: Manufacturer: syz [ 229.065749][ T5837] usb 7-1: SerialNumber: syz [ 229.069032][ T8567] bond8 (unregistering): Released all slaves [ 229.070209][ T5837] usb 7-1: config 0 descriptor?? [ 229.088695][ T8567] bond9 (unregistering): Released all slaves [ 229.103223][ T8567] bond10 (unregistering): Released all slaves [ 229.123365][ T5451] 8021q: adding VLAN 0 to HW filter on device eth14 [ 229.261410][ T62] Bluetooth: hci4: command tx timeout [ 229.288146][ T40] kauditd_printk_skb: 211 callbacks suppressed [ 229.288165][ T40] audit: type=1400 audit(1780433158.749:6257): avc: denied { write } for pid=13699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.301613][ T40] audit: type=1400 audit(1780433158.749:6258): avc: denied { create } for pid=13699 comm="dhcpcd-run-hook" name="resolv.conf.eth15.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 229.325758][ T40] audit: type=1400 audit(1780433158.749:6259): avc: denied { write open } for pid=13699 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth15.link" dev="tmpfs" ino=10208 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 229.348159][ T40] audit: type=1400 audit(1780433158.769:6260): avc: denied { append } for pid=13699 comm="dhcpcd-run-hook" name="resolv.conf.eth15.link" dev="tmpfs" ino=10208 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 229.348729][ T5837] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 229.357164][ T40] audit: type=1400 audit(1780433158.769:6261): avc: denied { getattr } for pid=13699 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 229.373328][ T40] audit: type=1400 audit(1780433158.799:6262): avc: denied { read } for pid=13701 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 229.381787][ T40] audit: type=1400 audit(1780433158.799:6263): avc: denied { ioctl } for pid=13691 comm="syz.2.2200" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.392018][ T40] audit: type=1400 audit(1780433158.859:6264): avc: denied { write } for pid=13702 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.401342][ T40] audit: type=1400 audit(1780433158.859:6265): avc: denied { unlink } for pid=13702 comm="rm" name="resolv.conf.eth15.link" dev="tmpfs" ino=10208 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 229.412318][ T8567] tipc: Disabling bearer [ 229.421134][ T8567] tipc: Left network mode [ 229.438781][ T5451] 8021q: adding VLAN 0 to HW filter on device eth15 [ 229.441247][ T40] audit: type=1400 audit(1780433158.909:6266): avc: denied { read } for pid=5451 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 229.631215][T13692] comedi comedi0: Minor 660 is invalid! [ 229.656955][ T39] usb 7-1: USB disconnect, device number 19 [ 229.723540][T13714] FAT-fs (nullb0): bogus number of reserved sectors [ 229.728086][T13714] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 229.969353][ T62] Bluetooth: hci3: command 0x0c1a tx timeout [ 230.234188][ T8567] veth1_macvtap: left promiscuous mode [ 230.242145][ T8567] veth0_macvtap: left promiscuous mode [ 230.250567][ T8567] veth1_vlan: left promiscuous mode [ 230.281805][T13739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2210'. [ 230.688259][T13636] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.693336][T13636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.699296][T13636] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.704075][T13636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.707416][T13636] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.719904][T13636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.726055][T13636] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 230.735505][T13636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.761188][T13771] netlink: 'syz.2.2217': attribute type 64 has an invalid length. [ 230.770551][T13774] veth1_macvtap: left promiscuous mode [ 230.773066][T13774] macsec0: entered promiscuous mode [ 230.930437][T13636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.944023][T13636] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.953153][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.955474][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.976177][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.979249][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.014026][T13786] netlink: 'syz.2.2221': attribute type 20 has an invalid length. [ 231.024786][T13786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2221'. [ 231.276554][T13798] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 231.329416][ T62] Bluetooth: hci4: command tx timeout [ 231.487309][T13819] ufs: You didn't specify the type of your ufs filesystem [ 231.487309][T13819] [ 231.487309][T13819] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 231.487309][T13819] [ 231.487309][T13819] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 231.518172][T13819] ufs: ufstype=old is supported read-only [ 231.530285][T13819] ufs: ufs_fill_super(): bad magic number [ 231.605789][T13636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.610980][T13827] Falling back ldisc for ttyS3. [ 231.716561][T13832] syzkaller0: entered promiscuous mode [ 231.723164][T13832] syzkaller0: entered allmulticast mode [ 231.915584][T13636] veth0_vlan: entered promiscuous mode [ 231.937188][T13636] veth1_vlan: entered promiscuous mode [ 232.005030][T13636] veth0_macvtap: entered promiscuous mode [ 232.031129][T13636] veth1_macvtap: entered promiscuous mode [ 232.049211][ T62] Bluetooth: hci3: command 0x0c1a tx timeout [ 232.090418][T13636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.104909][T13636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.135860][ C3] Unknown status report in ack skb [ 232.146792][ T8558] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.155823][ T8558] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.162548][ T8558] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.169361][ T8558] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.465996][ T8558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.474367][ T8558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.564486][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.577882][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.926421][T13856] netlink: 'syz.5.2236': attribute type 3 has an invalid length. [ 233.006343][T13861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2237'. [ 233.013326][T13848] infiniband syz1: set active [ 233.016511][T13848] infiniband syz1: added bond0 [ 233.026863][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2237'. [ 233.037642][T13848] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 233.042640][T13848] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 233.044606][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2237'. [ 233.047982][T13848] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 233.060427][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2237'. [ 233.071185][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2237'. [ 233.079237][T13861] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2237'. [ 233.162703][T13848] RDS/IB: syz1: added [ 233.167321][T13848] smc: adding ib device syz1 with port count 1 [ 233.175578][T13848] smc: ib device syz1 port 1 has no pnetid [ 233.409592][ T62] Bluetooth: hci4: command tx timeout [ 234.092075][T13881] fuse: blksize only supported for fuseblk [ 234.294397][ T40] kauditd_printk_skb: 209 callbacks suppressed [ 234.294412][ T40] audit: type=1400 audit(1780433163.779:6476): avc: denied { recv } for pid=5660 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46594 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 234.499450][ T5896] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 234.609391][ T40] audit: type=1400 audit(1780433164.089:6477): avc: denied { unmount } for pid=12281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 234.665593][ T40] audit: type=1400 audit(1780433164.149:6478): avc: denied { create } for pid=13835 comm="syz.7.2232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 234.672248][ T5896] usb 10-1: Using ep0 maxpacket: 8 [ 234.677162][ T5896] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 234.687788][ T5896] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.703285][ T5896] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.714140][ T5896] usb 10-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 234.721159][ T40] audit: type=1400 audit(1780433164.209:6479): avc: denied { setopt } for pid=13885 comm="syz.8.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.721222][ T5896] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.736284][ T40] audit: type=1400 audit(1780433164.219:6480): avc: denied { getopt } for pid=13885 comm="syz.8.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.741195][ T5896] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 234.751071][ T5896] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.763047][ T5896] usbtmc 10-1:16.0: bulk endpoints not found [ 234.772550][ T40] audit: type=1400 audit(1780433164.249:6481): avc: denied { read write } for pid=5737 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.792694][ T40] audit: type=1400 audit(1780433164.259:6482): avc: denied { open } for pid=5737 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.820232][ T40] audit: type=1400 audit(1780433164.259:6483): avc: denied { ioctl } for pid=5737 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.843745][ T40] audit: type=1400 audit(1780433164.289:6484): avc: denied { execute } for pid=13888 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 234.862997][ T40] audit: type=1400 audit(1780433164.289:6485): avc: denied { execute_no_trans } for pid=13888 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 235.026978][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.038790][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.045206][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.055878][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.064342][ T5098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.378531][T13904] lo speed is unknown, defaulting to 1000 [ 235.490944][ T62] Bluetooth: hci4: command tx timeout [ 235.732223][T11424] bridge0: port 3(syz_tun) entered disabled state [ 235.745446][T11424] syz_tun (unregistering): left allmulticast mode [ 235.747506][T11424] syz_tun (unregistering): left promiscuous mode [ 235.749588][T11424] bridge0: port 3(syz_tun) entered disabled state [ 235.759536][ T7511] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 235.912003][ T7511] usb 12-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 235.918070][ T7511] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.928048][ T7511] usb 12-1: Product: syz [ 235.930406][ T7511] usb 12-1: Manufacturer: syz [ 235.932068][T13933] netlink: 220 bytes leftover after parsing attributes in process `syz.8.2254'. [ 235.932892][ T7511] usb 12-1: SerialNumber: syz [ 235.992356][T13904] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.995010][T13904] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.997789][T13904] bridge_slave_0: entered allmulticast mode [ 236.001871][T13904] bridge_slave_0: entered promiscuous mode [ 236.005209][T13904] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.007531][T13904] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.009950][T13904] bridge_slave_1: entered allmulticast mode [ 236.012553][T13904] bridge_slave_1: entered promiscuous mode [ 236.036411][T13904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.041275][T13904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.056480][T13904] team0: Port device team_slave_0 added [ 236.060392][T13904] team0: Port device team_slave_1 added [ 236.074098][T13904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.076245][T13904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.084223][T13904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.088422][T13904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.091349][T13904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.099303][T13904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.122523][T13904] hsr_slave_0: entered promiscuous mode [ 236.124851][T13904] hsr_slave_1: entered promiscuous mode [ 236.127490][T13904] debugfs: 'hsr0' already exists in 'hsr' [ 236.129762][T13904] Cannot create hsr debugfs directory [ 236.155462][ T7511] net_ratelimit: 14 callbacks suppressed [ 236.155482][ T7511] lan78xx 12-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 236.163243][ T7511] lan78xx 12-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 236.167841][ T7511] lan78xx 12-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 236.178382][ T7511] lan78xx 12-1:1.0: probe with driver lan78xx failed with error -71 [ 236.190358][ T7511] usb 12-1: USB disconnect, device number 14 [ 236.315320][T13904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.320102][T13904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.326159][T13904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 236.389406][ T59] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 236.481324][T13904] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.486047][T13904] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.491030][T13904] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 236.551734][ T59] usb 13-1: Using ep0 maxpacket: 8 [ 236.557811][ T59] usb 13-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 236.561914][ T59] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.565105][ T59] usb 13-1: Product: syz [ 236.566931][ T59] usb 13-1: Manufacturer: syz [ 236.568938][ T59] usb 13-1: SerialNumber: syz [ 236.573473][ T59] usb 13-1: config 0 descriptor?? [ 236.737711][T13904] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.744208][T13904] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.748640][T13904] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 236.790457][ T59] usb 13-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 236.792520][T13938] usb usb9: usbfs: process 13938 (syz.7.2256) did not claim interface 10 before use [ 236.802059][T13938] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2256'. [ 236.859364][T13940] tmpfs: Bad value for 'mpol' [ 236.911940][T13904] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.915151][T13904] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.918121][T13904] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 236.983392][T13944] netlink: 'syz.7.2259': attribute type 8 has an invalid length. [ 237.070549][T13949] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=13949 comm=syz.7.2261 [ 237.074806][T13949] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 237.077668][T13949] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 237.089291][ T62] Bluetooth: hci2: command tx timeout [ 237.173525][T13904] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 237.177102][ T3268] usb 10-1: USB disconnect, device number 13 [ 237.186944][T13904] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 237.190883][T13904] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 237.201178][T13904] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 237.201850][ T59] dvb_usb_rtl28xxu 13-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 237.207244][T13904] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 237.218408][ T59] usb 13-1: USB disconnect, device number 3 [ 237.236508][T13904] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 237.245089][T13904] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 237.271944][T13904] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 237.321740][T13904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.353711][T13904] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.371639][ T8561] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.374598][ T8561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.384814][ T8567] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.387731][ T8567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.601341][T13989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.610241][T13989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.623099][T13989] bond0 (unregistering): Released all slaves [ 237.768410][T13996] sctp: [Deprecated]: syz.5.2269 (pid 13996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.768410][T13996] Use struct sctp_sack_info instead [ 237.779029][T13996] nfs4: Bad value for 'source' [ 237.781960][T13996] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2269'. [ 237.785743][T13996] bridge_slave_0: left allmulticast mode [ 237.787930][T13996] bridge_slave_0: left promiscuous mode [ 237.792343][T13996] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.808313][T13904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.866101][T13904] veth0_vlan: entered promiscuous mode [ 237.877417][T13904] veth1_vlan: entered promiscuous mode [ 237.911425][T13904] veth0_macvtap: entered promiscuous mode [ 237.918204][T13904] veth1_macvtap: entered promiscuous mode [ 237.959745][T13904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.974231][T13904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.983105][ T7417] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.985925][ T7417] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.989848][ T7417] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.996624][ T7417] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.107069][ T8567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.118311][ T8567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.138538][ T8567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.145913][ T8567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.236522][T14015] syz.2.2245 (14015): attempted to duplicate a private mapping with mremap. This is not supported. [ 238.255424][T14015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2245'. [ 238.286753][T14015] ªªªªªª: renamed from vlan0 (while UP) [ 238.417275][T14022] bridge0: port 3(vlan2) entered blocking state [ 238.422645][T14022] bridge0: port 3(vlan2) entered disabled state [ 238.427235][T14022] vlan2: entered allmulticast mode [ 238.433336][T14022] vlan2: entered promiscuous mode [ 238.445448][T14022] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.465890][T14022] bridge_slave_1: left allmulticast mode [ 238.470894][T14022] bridge_slave_1: left promiscuous mode [ 238.472913][T14022] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.503453][T14022] bond0: (slave bond_slave_0): Releasing backup interface [ 238.509861][T14022] bond0: (slave bond_slave_1): Releasing backup interface [ 238.543079][T14022] team0: Port device team_slave_0 removed [ 238.553503][T14022] team0: Port device team_slave_1 removed [ 238.556880][T14022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.561936][T14022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.566666][T14022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.570233][T14022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.574773][T14022] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 238.661405][T14030] program syz.2.2279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.687992][T14032] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 238.692026][T14032] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 238.705063][T14032] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2280'. [ 238.742832][ T53] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 238.912534][ T53] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.927356][ T53] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 238.941654][ T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.959873][ T53] usb 10-1: Product: syz [ 238.961706][ T53] usb 10-1: Manufacturer: syz [ 238.976243][ T53] usb 10-1: SerialNumber: syz [ 239.009242][T14056] xt_hashlimit: size too large, truncated to 1048576 [ 239.179185][ T62] Bluetooth: hci2: command tx timeout [ 239.284469][T14068] Cannot find set identified by id 65534 to match [ 239.302749][ T40] kauditd_printk_skb: 270 callbacks suppressed [ 239.302766][ T40] audit: type=1400 audit(1780433168.789:6756): avc: denied { connect } for pid=14067 comm="syz.7.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 239.336406][ T40] audit: type=1400 audit(1780433168.789:6757): avc: denied { write } for pid=14067 comm="syz.7.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 239.351376][ T40] audit: type=1400 audit(1780433168.839:6758): avc: denied { read } for pid=14070 comm="syz.7.2290" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 239.362662][ T40] audit: type=1400 audit(1780433168.839:6759): avc: denied { open } for pid=14070 comm="syz.7.2290" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 239.373172][ T40] audit: type=1400 audit(1780433168.849:6760): avc: denied { write } for pid=14070 comm="syz.7.2290" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 239.389780][ T40] audit: type=1400 audit(1780433168.849:6761): avc: denied { ioctl } for pid=14070 comm="syz.7.2290" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 239.402554][ T53] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 239.454084][ T40] audit: type=1400 audit(1780433168.939:6762): avc: denied { write } for pid=14063 comm="syz.2.2288" name="001" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 239.462597][ T40] audit: type=1400 audit(1780433168.939:6763): avc: denied { create } for pid=14063 comm="syz.2.2288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 239.470780][ T40] audit: type=1400 audit(1780433168.939:6764): avc: denied { setopt } for pid=14063 comm="syz.2.2288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 239.472517][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2288'. [ 239.483276][ T40] audit: type=1400 audit(1780433168.969:6765): avc: denied { ioctl } for pid=14063 comm="syz.2.2288" path="/dev/ppp" dev="devtmpfs" ino=731 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 239.526797][T14073] 8021q: VLANs not supported on ip6tnl0 [ 239.530340][T14073] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2291'. [ 239.728558][T14090] xt_hashlimit: size too large, truncated to 1048576 [ 239.841239][T14096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.844591][T14096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.968770][T14102] netlink: 'syz.7.2300': attribute type 15 has an invalid length. [ 239.972247][T14102] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2300'. [ 239.980204][ T6327] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 239.980228][T14102] netlink: 'syz.7.2300': attribute type 15 has an invalid length. [ 239.983586][ T6327] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 239.986852][T14102] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2300'. [ 239.990143][ T6327] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 239.990178][ T6327] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 240.526127][T14118] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 240.535698][T14118] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 240.577418][T14123] fuse: Bad value for 'user_id' [ 240.579679][T14123] fuse: Bad value for 'user_id' [ 240.963992][T14127] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14127 comm=syz.2.2307 [ 240.972600][ T59] IPVS: starting estimator thread 0... [ 240.973095][T14127] IPVS: sed: FWM 3 0x00000003 - no destination available [ 241.037222][T14135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.069718][T14128] IPVS: using max 45 ests per chain, 108000 per kthread [ 241.262016][ T62] Bluetooth: hci2: command tx timeout [ 241.506121][T14145] netlink: 236 bytes leftover after parsing attributes in process `syz.7.2314'. [ 241.508076][ T39] usb 10-1: USB disconnect, device number 14 [ 241.512777][T14145] netlink: 236 bytes leftover after parsing attributes in process `syz.7.2314'. [ 241.525095][ T39] usblp0: removed [ 241.578153][T14152] i2c i2c-1: dvb_frontend_start: failed to start kthread (-4) [ 241.661724][T14171] lo speed is unknown, defaulting to 1000 [ 241.774378][ T62] Bluetooth: hci4: unexpected subevent 0x01 length: 71 > 18 [ 241.884622][T14193] sch_fq: defrate 11 ignored. [ 242.103934][T14209] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2331'. [ 242.107700][T14209] netlink: 'syz.8.2331': attribute type 19 has an invalid length. [ 242.111515][T14209] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2331'. [ 242.126792][T14209] netlink: 'syz.8.2331': attribute type 19 has an invalid length. [ 242.130525][ T46] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.135253][ T46] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.139446][ T39] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 242.140147][ T46] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.146009][ T46] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.289353][ T39] usb 12-1: Using ep0 maxpacket: 8 [ 242.293349][ T39] usb 12-1: config 179 has an invalid interface number: 65 but max is 0 [ 242.296382][ T39] usb 12-1: config 179 has no interface number 0 [ 242.298791][ T39] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 242.303987][ T39] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 242.307862][ T39] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 242.312368][ T39] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 242.316007][ T39] usb 12-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 242.320318][ T39] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 242.323288][ T39] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.335373][T14193] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 242.377880][T14212] binder_alloc: 14211: binder_alloc_buf, no vma [ 242.379950][ T59] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 242.421346][T14218] syzkaller1: entered promiscuous mode [ 242.423685][T14218] syzkaller1: entered allmulticast mode [ 242.433861][T14219] ip6gre1: entered promiscuous mode [ 242.436160][T14219] ip6gre1: entered allmulticast mode [ 242.529343][ T59] usb 13-1: Using ep0 maxpacket: 32 [ 242.533160][ T59] usb 13-1: unable to get BOS descriptor or descriptor too short [ 242.537218][ T59] usb 13-1: config 8 has an invalid interface number: 188 but max is 0 [ 242.543635][ T59] usb 13-1: config 8 has no interface number 0 [ 242.548338][ T59] usb 13-1: config 8 interface 188 has no altsetting 0 [ 242.553371][ T5896] usb 12-1: USB disconnect, device number 15 [ 242.553450][ C2] xpad 12-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 242.554615][ T59] usb 13-1: string descriptor 0 read error: -22 [ 242.554705][ T59] usb 13-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 242.554723][ T59] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.565509][ C2] xpad 12-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 242.594363][ T59] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 242.597247][ T59] dw2102: su3000_power_ctrl: 1, initialized 0 [ 242.601299][ T59] dvb-usb: bulk message failed: -22 (2/0) [ 242.630070][ T59] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 242.642324][ T59] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 242.648526][ T59] usb 13-1: media controller created [ 242.652825][ T59] dvb-usb: bulk message failed: -22 (6/0) [ 242.656615][ T59] dw2102: i2c transfer failed. [ 242.660056][ T59] dvb-usb: bulk message failed: -22 (6/0) [ 242.661895][ T59] dw2102: i2c transfer failed. [ 242.663437][ T59] dvb-usb: bulk message failed: -22 (6/0) [ 242.665207][ T59] dw2102: i2c transfer failed. [ 242.666753][ T59] dvb-usb: bulk message failed: -22 (6/0) [ 242.668589][ T59] dw2102: i2c transfer failed. [ 242.671143][ T59] dvb-usb: bulk message failed: -22 (6/0) [ 242.672966][ T59] dw2102: i2c transfer failed. [ 242.674481][ T59] dvb-usb: bulk message failed: -22 (6/0) [ 242.676232][ T59] dw2102: i2c transfer failed. [ 242.677682][ T59] dvb-usb: MAC address: 02:02:02:02:02:02 [ 242.699898][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.740699][ T59] dvb-usb: bulk message failed: -22 (3/0) [ 242.742496][ T59] dw2102: command 0x0e transfer failed. [ 242.744396][ T59] dvb-usb: bulk message failed: -22 (3/0) [ 242.746170][ T59] dw2102: command 0x0e transfer failed. [ 243.049560][ T59] dvb-usb: bulk message failed: -22 (3/0) [ 243.054590][ T59] dw2102: command 0x0e transfer failed. [ 243.058204][ T59] dvb-usb: bulk message failed: -22 (3/0) [ 243.060194][ T59] dw2102: command 0x0e transfer failed. [ 243.061869][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 243.063680][ T59] dw2102: command 0x51 transfer failed. [ 243.067269][T14209] dvb-usb: bulk message failed: -22 (5/0) [ 243.072033][T14209] dw2102: i2c transfer failed. [ 243.097324][ T59] DVB: Unable to find symbol ds3000_attach() [ 243.099484][ T59] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 243.150418][ T59] rc_core: IR keymap rc-su3000 not found [ 243.152504][ T59] Registered IR keymap rc-empty [ 243.157280][ T59] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0 [ 243.165521][ T59] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0/input24 [ 243.174641][ T59] dvb-usb: schedule remote query interval to 150 msecs. [ 243.179794][ T59] dw2102: su3000_power_ctrl: 0, initialized 1 [ 243.181629][ T59] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 243.340423][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 243.342432][ T59] dw2102: i2c transfer failed. [ 243.509241][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 243.513889][ T59] dw2102: i2c transfer failed. [ 243.669340][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 243.671701][ T59] dw2102: i2c transfer failed. [ 243.819172][ T62] Bluetooth: hci4: command 0x2016 tx timeout [ 243.829337][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 243.831937][ T59] dw2102: i2c transfer failed. [ 243.989331][ T7794] dvb-usb: bulk message failed: -22 (1/0) [ 243.991799][ T7794] dw2102: i2c transfer failed. [ 244.149197][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 244.151254][ T59] dw2102: i2c transfer failed. [ 244.309331][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 244.311797][ T59] dw2102: i2c transfer failed. [ 244.469228][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 244.471048][ T59] dw2102: i2c transfer failed. [ 244.629319][ T7794] dvb-usb: bulk message failed: -22 (1/0) [ 244.635301][ T7794] dw2102: i2c transfer failed. [ 244.789331][ T7794] dvb-usb: bulk message failed: -22 (1/0) [ 244.791973][ T7794] dw2102: i2c transfer failed. [ 244.949265][ T7794] dvb-usb: bulk message failed: -22 (1/0) [ 244.951235][ T7794] dw2102: i2c transfer failed. [ 245.053920][ T5896] usb 13-1: USB disconnect, device number 4 [ 245.085260][ T40] kauditd_printk_skb: 197 callbacks suppressed [ 245.085272][ T40] audit: type=1400 audit(1780433174.569:6963): avc: denied { create } for pid=14250 comm="syz.8.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 245.103648][ T40] audit: type=1400 audit(1780433174.569:6964): avc: denied { bind } for pid=14250 comm="syz.8.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 245.113107][ T40] audit: type=1400 audit(1780433174.569:6965): avc: denied { kexec_image_load } for pid=14250 comm="syz.8.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 245.120202][ T40] audit: type=1400 audit(1780433174.569:6966): avc: denied { read write } for pid=14250 comm="syz.8.2340" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 245.123776][ T5896] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 245.129493][ T40] audit: type=1400 audit(1780433174.569:6967): avc: denied { open } for pid=14250 comm="syz.8.2340" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 245.142315][ T40] audit: type=1400 audit(1780433174.569:6968): avc: denied { ioctl } for pid=14250 comm="syz.8.2340" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 245.150448][ T40] audit: type=1400 audit(1780433174.589:6969): avc: denied { create } for pid=14250 comm="syz.8.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.156719][ T40] audit: type=1400 audit(1780433174.589:6970): avc: denied { create } for pid=14250 comm="syz.8.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 245.163016][ T40] audit: type=1400 audit(1780433174.589:6971): avc: denied { execmem } for pid=14250 comm="syz.8.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 245.168962][ T40] audit: type=1400 audit(1780433174.589:6972): avc: denied { bind } for pid=14250 comm="syz.8.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 245.550588][T14256] /dev/sr0: Can't open blockdev [ 245.642937][T14232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 245.646178][T14235] tipc: Started in network mode [ 245.648061][T14235] tipc: Node identity ac141441, cluster identity 4711 [ 245.664743][T14235] tipc: Enabled bearer , priority 10 [ 245.792660][T14274] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 245.899286][ T5098] Bluetooth: hci4: command 0x2016 tx timeout [ 246.009673][ T53] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 246.149279][ T53] usb 13-1: device descriptor read/64, error -71 [ 246.389257][ T53] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 246.519376][ T53] usb 13-1: device descriptor read/64, error -71 [ 246.629518][ T53] usb usb13-port1: attempt power cycle [ 246.680566][ T39] tipc: Node number set to 2886997057 [ 246.950409][T14307] overlayfs: workdir and upperdir must be separate subtrees [ 246.980280][ T53] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 247.000842][ T53] usb 13-1: device descriptor read/8, error -71 [ 247.249388][ T53] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 247.279868][ T53] usb 13-1: device descriptor read/8, error -71 [ 247.390392][ T53] usb usb13-port1: unable to enumerate USB device [ 247.873385][T14328] fuse: Bad value for 'user_id' [ 247.875228][T14328] fuse: Bad value for 'user_id' [ 248.044889][T14332] __nla_validate_parse: 3 callbacks suppressed [ 248.044901][T14332] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2365'. [ 248.050427][T14332] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2365'. [ 248.364673][T14355] syz_tun: entered allmulticast mode [ 248.375202][T14355] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 248.379132][T14355] mroute: pending queue full, dropping entries [ 248.469797][T14364] netdevsim netdevsim7: Direct firmware load for  failed with error -2 [ 248.474857][T14364] netdevsim netdevsim7: Falling back to sysfs fallback for:  [ 248.758875][T14381] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2380'. [ 248.762389][T14381] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2380'. [ 248.795118][T14382] cgroup: Name too long [ 248.910381][T14393] netlink: 'syz.2.2384': attribute type 1 has an invalid length. [ 248.942966][T14393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.956695][T14393] bond1: (slave geneve2): making interface the new active one [ 248.961261][T14393] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 249.096311][T14398] usb usb1: usbfs: process 14398 (syz.2.2385) did not claim interface 0 before use [ 249.586759][T14424] i2c i2c-1: dvb_frontend_start: failed to start kthread (-4) [ 249.624768][T14431] syzkaller0: entered promiscuous mode [ 249.626480][T14431] syzkaller0: entered allmulticast mode [ 249.639337][T14431] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2395'. [ 249.643477][T14431] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2395'. [ 249.651272][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2395'. [ 249.655605][T14422] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2393'. [ 249.844502][T14440] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2399'. [ 249.905023][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2403'. [ 249.906113][T14450] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 250.036466][T14469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=14469 comm=syz.2.2407 [ 250.092451][ T40] kauditd_printk_skb: 285 callbacks suppressed [ 250.092472][ T40] audit: type=1400 audit(1780433179.579:7258): avc: denied { read } for pid=5451 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 250.109283][ T40] audit: type=1400 audit(1780433179.589:7259): avc: denied { create } for pid=14483 comm="syz.7.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 250.121478][ T40] audit: type=1400 audit(1780433179.589:7260): avc: denied { write } for pid=14483 comm="syz.7.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 250.136899][ T40] audit: type=1400 audit(1780433179.599:7261): avc: denied { read write } for pid=14486 comm="syz.2.2412" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 250.144244][ T40] audit: type=1400 audit(1780433179.599:7262): avc: denied { open } for pid=14486 comm="syz.2.2412" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 250.151639][ T40] audit: type=1400 audit(1780433179.609:7263): avc: denied { read write } for pid=14486 comm="syz.2.2412" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 250.161191][ T40] audit: type=1400 audit(1780433179.609:7264): avc: denied { open } for pid=14486 comm="syz.2.2412" path="/dev/raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 250.168848][ T40] audit: type=1400 audit(1780433179.609:7265): avc: denied { ioctl } for pid=14486 comm="syz.2.2412" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 250.178959][T14490] fuse: Bad value for 'fd' [ 250.179437][ T40] audit: type=1400 audit(1780433179.619:7266): avc: denied { search } for pid=14484 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.187402][ T40] audit: type=1400 audit(1780433179.619:7267): avc: denied { search } for pid=14484 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.369228][ T5837] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 250.531671][ T5837] usb 7-1: unable to get BOS descriptor or descriptor too short [ 250.535502][ T5837] usb 7-1: not running at top speed; connect to a high speed hub [ 250.540035][ T5837] usb 7-1: config 1 interface 0 altsetting 43 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.545461][ T5837] usb 7-1: config 1 interface 0 has no altsetting 0 [ 250.550563][ T5837] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.554453][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.557816][ T5837] usb 7-1: Product: syz [ 250.559723][ T5837] usb 7-1: Manufacturer: syz [ 250.561723][ T5837] usb 7-1: SerialNumber: syz [ 250.873256][T14497] Bluetooth: MGMT ver 1.23 [ 251.609365][ T5830] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 251.759665][ T5830] usb 10-1: Using ep0 maxpacket: 16 [ 251.766152][ T5830] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 251.772803][ T5830] usb 10-1: New USB device found, idVendor=0e41, idProduct=4150, bcdDevice= 0.40 [ 251.776394][ T5830] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.779390][ T5830] usb 10-1: Product: syz [ 251.781080][ T5830] usb 10-1: Manufacturer: Ñ„ [ 251.782940][ T5830] usb 10-1: SerialNumber: syz [ 251.821927][T14545] tmpfs: Bad value for 'huge' [ 252.066366][ T5830] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 252.071838][ T5830] usb 10-1: MIDIStreaming interface descriptor not found [ 252.151818][ T5830] usb 10-1: USB disconnect, device number 15 [ 252.217587][ T9958] udevd[9958]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.242471][T14568] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 252.436404][T14589] syz_tun: entered promiscuous mode [ 252.443646][T14589] syz_tun: refused to change device tx_queue_len [ 252.487150][T14595] /dev/sg0: Can't lookup blockdev [ 252.665116][T14624] kvm: emulating exchange as write [ 252.741330][T14629] x_tables: duplicate underflow at hook 1 [ 252.779579][T14635] overlayfs: failed to clone upperpath [ 252.784425][T14635] overlayfs: failed to clone upperpath [ 252.933314][T14644] netlink: 'syz.8.2449': attribute type 2 has an invalid length. [ 253.018030][T14647] fuse: fd is not a fuse device [ 253.138630][ T5837] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 253.138933][T14655] __nla_validate_parse: 17 callbacks suppressed [ 253.138944][T14655] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2452'. [ 253.161794][ T5837] usb 7-1: USB disconnect, device number 20 [ 254.062353][T14708] 9p: Invalid uid '0x00000000ffffffff' [ 254.214509][T14718] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 254.217872][T14718] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 254.327811][T14727] binder: 14716:14727 ioctl c02064cc 200000000100 returned -22 [ 254.351662][ T5830] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 254.480102][ T5830] usb 10-1: device descriptor read/64, error -71 [ 254.700428][T14757] overlayfs: failed to clone upperpath [ 254.716804][T14757] syz_tun: entered allmulticast mode [ 254.719602][ T5830] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 254.859170][ T5830] usb 10-1: device descriptor read/64, error -71 [ 254.931203][ T5098] Bluetooth: hci2: unexpected subevent 0x01 length: 71 > 18 [ 254.979972][ T5830] usb usb10-port1: attempt power cycle [ 255.140094][ T40] kauditd_printk_skb: 275 callbacks suppressed [ 255.140107][ T40] audit: type=1400 audit(1780433184.629:7543): avc: denied { write } for pid=14766 comm="syz.2.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 255.329444][ T5830] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 255.350278][ T5830] usb 10-1: device descriptor read/8, error -71 [ 255.360866][T14746] syz_tun: left allmulticast mode [ 255.390245][ T40] audit: type=1400 audit(1780433184.879:7544): avc: denied { create } for pid=14770 comm="syz.7.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 255.393781][T14771] sctp: [Deprecated]: syz.7.2485 (pid 14771) Use of int in maxseg socket option. [ 255.393781][T14771] Use struct sctp_assoc_value instead [ 255.396266][ T40] audit: type=1400 audit(1780433184.879:7545): avc: denied { setopt } for pid=14770 comm="syz.7.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 255.408504][ T40] audit: type=1400 audit(1780433184.879:7546): avc: denied { shutdown } for pid=14770 comm="syz.7.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 255.414849][ T40] audit: type=1400 audit(1780433184.879:7547): avc: denied { getopt } for pid=14770 comm="syz.7.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 255.422489][ T40] audit: type=1400 audit(1780433184.879:7548): avc: denied { connect } for pid=14770 comm="syz.7.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 255.428796][ T40] audit: type=1400 audit(1780433184.879:7549): avc: denied { name_connect } for pid=14770 comm="syz.7.2485" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 255.435544][T14774] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2486'. [ 255.435944][ T40] audit: type=1400 audit(1780433184.879:7550): avc: denied { getopt } for pid=14770 comm="syz.7.2485" lport=52250 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 255.445759][ T40] audit: type=1400 audit(1780433184.889:7551): avc: denied { create } for pid=14770 comm="syz.7.2485" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 255.452710][ T40] audit: type=1400 audit(1780433184.889:7552): avc: denied { ioctl } for pid=14770 comm="syz.7.2485" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=63861 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 255.611409][ T5830] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 255.652684][ T5830] usb 10-1: device descriptor read/8, error -71 [ 255.704949][T14791] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2491'. [ 255.759383][ T5830] usb usb10-port1: unable to enumerate USB device [ 256.064212][T14812] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 256.074064][T14812] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1 sclass=netlink_xfrm_socket pid=14812 comm=syz.2.2496 [ 256.082875][T14814] erspan0: entered promiscuous mode [ 256.086962][T14814] macsec1: entered promiscuous mode [ 256.093472][T14814] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2500'. [ 256.097137][T14814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=14814 comm=syz.7.2500 [ 256.103063][T14814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=14814 comm=syz.7.2500 [ 256.108232][T14814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=14814 comm=syz.7.2500 [ 256.113809][T14814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=14814 comm=syz.7.2500 [ 256.119035][T14814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14814 comm=syz.7.2500 [ 256.123447][T14814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=14814 comm=syz.7.2500 [ 256.127318][T14814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=14814 comm=syz.7.2500 [ 256.131451][T14814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=14814 comm=syz.7.2500 [ 256.136235][T14814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=14814 comm=syz.7.2500 [ 256.173327][T14816] overlayfs: failed to clone upperpath [ 256.201970][T14820] macsec2: entered promiscuous mode [ 256.204066][T14820] macsec2: entered allmulticast mode [ 256.236899][T14824] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2505'. [ 256.336193][T14832] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2507'. [ 256.339188][T14832] netlink: 'syz.2.2507': attribute type 7 has an invalid length. [ 256.341894][T14832] netlink: 'syz.2.2507': attribute type 8 has an invalid length. [ 256.344249][T14832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2507'. [ 256.532903][T14847] netlink: 'syz.2.2511': attribute type 1 has an invalid length. [ 256.810847][T14853] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2513'. [ 256.814437][T14853] syz_tun: entered promiscuous mode [ 256.817515][T14853] syz_tun: refused to change device tx_queue_len [ 256.968870][T14855] batman_adv: batadv0: Adding interface: geneve2 [ 256.971901][T14855] batman_adv: batadv0: Interface activated: geneve2 [ 257.009532][ T62] Bluetooth: hci2: command 0x2016 tx timeout [ 257.122129][ T24] IPVS: starting estimator thread 0... [ 257.155224][T14872] netlink: 'syz.5.2520': attribute type 10 has an invalid length. [ 257.157888][T14872] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2520'. [ 257.229774][T14867] IPVS: using max 45 ests per chain, 108000 per kthread [ 257.281666][ T5098] Bluetooth: hci3: unexpected event for opcode 0x0c7a [ 257.322835][T14896] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2526'. [ 257.396860][T14901] fuse: Unknown parameter '0x00000000000000050x0000000000000005' [ 257.599304][T14924] program syz.2.2535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.607785][T14919] orangefs_mount: mount request failed with -4 [ 257.607924][T14920] orangefs_mount: mount request failed with -4 [ 257.693731][T14927] openvswitch: netlink: IP tunnel dst address not specified [ 257.735486][T14929] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.015723][T14948] usb 2-1: USB disconnect, device number 2 [ 258.018879][T14950] netlink: 'syz.5.2543': attribute type 39 has an invalid length. [ 258.031535][T14950] hsr_slave_0 (unregistering): left promiscuous mode [ 258.107807][T14945] hub 2-0:1.0: USB hub found [ 258.111389][T14945] hub 2-0:1.0: 6 ports detected [ 258.173493][T14957] binder: BINDER_SET_CONTEXT_MGR already set [ 258.177278][T14957] binder: 14955:14957 ioctl 4018620d 200000004a80 returned -16 [ 258.218220][T14954] __nla_validate_parse: 1 callbacks suppressed [ 258.218231][T14954] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2544'. [ 258.224082][T14954] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2544'. [ 258.299679][ T29] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 258.304274][T14967] 9p: Bad value for 'rfdno' [ 258.363946][T14969] VFS: Mount too revealing [ 258.427128][T14978] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2554'. [ 258.506408][ T29] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 258.509760][ T29] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 258.512642][ T29] usb 2-1: Product: QEMU USB Tablet [ 258.514350][ T29] usb 2-1: Manufacturer: QEMU [ 258.517076][ T29] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 258.547515][ T29] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0008/input/input26 [ 258.591630][T14977] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 258.594056][T14977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.633509][ T29] hid-generic 0003:0627:0001.0008: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 258.633842][T14999] netlink: 'syz.5.2558': attribute type 1 has an invalid length. [ 258.641377][T14999] netlink: 'syz.5.2558': attribute type 1 has an invalid length. [ 258.816100][T15016] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2565'. [ 258.819004][T15016] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2565'. [ 259.051226][T15030] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2571'. [ 259.089273][ T5098] Bluetooth: hci2: command 0x2016 tx timeout [ 259.714200][T15046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2575'. [ 259.717706][T15046] netlink: 'syz.5.2575': attribute type 32 has an invalid length. [ 259.733637][T15046] bond0: Setting coupled_control to off (0) [ 259.735461][T15046] bond0: entered promiscuous mode [ 260.154845][ T40] kauditd_printk_skb: 295 callbacks suppressed [ 260.154857][ T40] audit: type=1400 audit(1780433189.639:7848): avc: denied { write } for pid=15076 comm="syz.5.2586" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 260.342762][ T40] audit: type=1400 audit(1780433189.829:7849): avc: denied { unmount } for pid=13904 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 260.374804][ T40] audit: type=1400 audit(1780433189.859:7850): avc: denied { read append } for pid=15087 comm="syz.5.2590" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 260.382159][ T40] audit: type=1400 audit(1780433189.859:7851): avc: denied { open } for pid=15087 comm="syz.5.2590" path="/dev/ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 260.389408][ T40] audit: type=1400 audit(1780433189.859:7852): avc: denied { setattr } for pid=15087 comm="syz.5.2590" path="/dev/vcsu4" dev="devtmpfs" ino=2843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 260.397142][ T40] audit: type=1400 audit(1780433189.869:7853): avc: denied { create } for pid=15090 comm="syz.8.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 260.407889][ T40] audit: type=1400 audit(1780433189.869:7854): avc: denied { bind } for pid=15090 comm="syz.8.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 260.416052][ T40] audit: type=1400 audit(1780433189.899:7855): avc: denied { prog_load } for pid=15093 comm="syz.2.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 260.422413][ T40] audit: type=1400 audit(1780433189.899:7856): avc: denied { bpf } for pid=15093 comm="syz.2.2591" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 260.428739][ T40] audit: type=1400 audit(1780433189.899:7857): avc: denied { perfmon } for pid=15093 comm="syz.2.2591" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 260.468248][T15099] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2593'. [ 260.532256][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.536465][T15107] Bluetooth: hci0: Frame reassembly failed (-84) [ 260.542662][ T8561] Bluetooth: hci0: Frame reassembly failed (-84) [ 260.609385][ T7794] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 260.773940][T15125] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2602'. [ 260.777975][ T7794] usb 10-1: not running at top speed; connect to a high speed hub [ 260.778104][T15125] syz_tun: refused to change device tx_queue_len [ 260.786575][ T7794] usb 10-1: config 1 interface 0 altsetting 147 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 260.799385][ T7794] usb 10-1: config 1 interface 0 altsetting 147 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.804627][ T7794] usb 10-1: config 1 interface 0 has no altsetting 0 [ 260.811321][ T7794] usb 10-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.40 [ 260.815708][ T7794] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.829764][ T7794] usb 10-1: Product: syz [ 260.832161][ T7794] usb 10-1: Manufacturer: syz [ 260.836528][ T7794] usb 10-1: SerialNumber: syz [ 260.856437][T15089] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 260.861675][T15089] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 260.998948][T15137] block nbd8: not configured, cannot reconfigure [ 261.045330][T15148] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2609'. [ 261.075763][ T7794] appletouch 10-1:1.0: Failed to read mode from device. [ 261.078033][ T7794] appletouch 10-1:1.0: probe with driver appletouch failed with error -5 [ 261.085617][ T7794] usb 10-1: USB disconnect, device number 21 [ 261.130965][T15156] syz_tun: refused to change device tx_queue_len [ 261.219005][T15158] af_packet: tpacket_rcv: packet too big, clamped from 64332 to 4294967272. macoff=96 [ 261.255637][T15161] openvswitch: netlink: Duplicate key (type 6). [ 261.549264][ T3268] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 261.660675][T15169] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 261.679925][ T3268] usb 13-1: device descriptor read/64, error -71 [ 261.680853][T15169] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 261.939258][ T3268] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 262.067578][T15183] syz_tun: refused to change device tx_queue_len [ 262.069490][ T3268] usb 13-1: device descriptor read/64, error -71 [ 262.179894][ T3268] usb usb13-port1: attempt power cycle [ 262.226033][T15197] fuse: fd is not a fuse device [ 262.533326][ T62] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 262.549411][ T3268] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 262.569770][ T3268] usb 13-1: device descriptor read/8, error -71 [ 262.613516][T15210] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.810250][ T3268] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 262.829722][ T3268] usb 13-1: device descriptor read/8, error -71 [ 262.861130][T15219] loop4: detected capacity change from 0 to 2640 [ 262.864733][T15219] buffer_io_error: 209 callbacks suppressed [ 262.864748][T15219] Buffer I/O error on dev loop4, logical block 0, async page read [ 262.871679][T15219] Buffer I/O error on dev loop4, logical block 0, async page read [ 262.874305][T15219] Buffer I/O error on dev loop4, logical block 0, async page read [ 262.876988][T15219] Buffer I/O error on dev loop4, logical block 0, async page read [ 262.880913][T15219] Buffer I/O error on dev loop4, logical block 0, async page read [ 262.884103][T15219] Buffer I/O error on dev loop4, logical block 0, async page read [ 262.887350][T15219] Buffer I/O error on dev loop4, logical block 0, async page read [ 262.891125][T15219] Buffer I/O error on dev loop4, logical block 0, async page read [ 262.893639][T15219] ldm_validate_partition_table(): Disk read failed. [ 262.895605][T15219] Buffer I/O error on dev loop4, logical block 0, async page read [ 262.898014][T15219] Buffer I/O error on dev loop4, logical block 0, async page read [ 262.901134][T15219] Dev loop4: unable to read RDB block 0 [ 262.903341][T15219] loop4: unable to read partition table [ 262.905141][T15219] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 262.940918][ T3268] usb usb13-port1: unable to enumerate USB device [ 263.037666][T15229] netlink: 'syz.7.2636': attribute type 10 has an invalid length. [ 263.040405][T15229] batman_adv: batadv0: Interface deactivated: dummy0 [ 263.043996][T15229] batman_adv: batadv0: Removing interface: dummy0 [ 263.053698][T15229] team0: Port device dummy0 added [ 263.206047][T15240] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 263.208587][T15240] tipc: Enabled bearer , priority 10 [ 263.339518][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 263.453919][T15257] __nla_validate_parse: 3 callbacks suppressed [ 263.453931][T15257] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2645'. [ 263.461428][T15257] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2645'. [ 263.479534][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 263.493146][T15257] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 263.497985][T15257] block device autoloading is deprecated and will be removed. [ 263.601299][T15276] xt_bpf: check failed: parse error [ 263.629279][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 263.779276][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 263.929462][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 263.938147][T15282] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 263.942939][T15282] overlayfs: overlapping lowerdir path [ 264.069401][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 264.209482][ T3268] tipc: Node number set to 16777216 [ 264.264601][T15292] vlan0: entered promiscuous mode [ 264.349051][T15303] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 264.349458][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 264.391231][T15306] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2661'. [ 264.394192][T15306] syz_tun: refused to change device tx_queue_len [ 264.407050][T15303] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 264.527488][T15321] ================================================================== [ 264.530765][T15321] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 264.533889][T15321] Read of size 8 at addr ffff88802e7e8618 by task syz.8.2665/15321 [ 264.538948][T15321] [ 264.539955][T15321] CPU: 0 UID: 0 PID: 15321 Comm: syz.8.2665 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.539983][T15321] Tainted: [L]=SOFTLOCKUP [ 264.539991][T15321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 264.540002][T15321] Call Trace: [ 264.540010][T15321] [ 264.540018][T15321] dump_stack_lvl+0x100/0x190 [ 264.540050][T15321] print_report+0x13d/0x4b0 [ 264.540074][T15321] ? __virt_addr_valid+0x239/0x430 [ 264.540094][T15321] ? dvb_device_open+0x33f/0x3b0 [ 264.540121][T15321] kasan_report+0xdf/0x1d0 [ 264.540141][T15321] ? dvb_device_open+0x33f/0x3b0 [ 264.540167][T15321] ? __pfx_dvb_device_open+0x10/0x10 [ 264.540191][T15321] dvb_device_open+0x33f/0x3b0 [ 264.540227][T15321] ? __pfx_dvb_device_open+0x10/0x10 [ 264.540253][T15321] chrdev_open+0x234/0x6a0 [ 264.540279][T15321] ? __pfx_chrdev_open+0x10/0x10 [ 264.540303][T15321] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 264.540333][T15321] do_dentry_open+0x6ab/0x14d0 [ 264.540354][T15321] ? __pfx_chrdev_open+0x10/0x10 [ 264.540379][T15321] vfs_open+0x82/0x3f0 [ 264.540406][T15321] path_openat+0x208c/0x31a0 [ 264.540434][T15321] ? __pfx_path_openat+0x10/0x10 [ 264.540463][T15321] do_file_open+0x20e/0x430 [ 264.540488][T15321] ? __pfx_do_file_open+0x10/0x10 [ 264.540520][T15321] ? alloc_fd+0x476/0x790 [ 264.540545][T15321] ? do_getname+0x191/0x390 [ 264.540573][T15321] do_sys_openat2+0x10d/0x1e0 [ 264.540598][T15321] ? __pfx_do_sys_openat2+0x10/0x10 [ 264.540629][T15321] __x64_sys_openat+0x12d/0x210 [ 264.540657][T15321] ? __pfx___x64_sys_openat+0x10/0x10 [ 264.540687][T15321] ? rcu_is_watching+0x12/0xc0 [ 264.540713][T15321] do_syscall_64+0x115/0x870 [ 264.540752][T15321] ? clear_bhb_loop+0x40/0x90 [ 264.540774][T15321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.540794][T15321] RIP: 0033:0x7f6ed2f5d68e [ 264.540810][T15321] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 264.540827][T15321] RSP: 002b:00007f6ed3ec2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 264.540846][T15321] RAX: ffffffffffffffda RBX: 00007f6ed3ec36c0 RCX: 00007f6ed2f5d68e [ 264.540860][T15321] RDX: 0000000000000002 RSI: 00007f6ed3ec2c00 RDI: ffffffffffffff9c [ 264.540872][T15321] RBP: 00007f6ed3ec2c00 R08: 0000000000000000 R09: 0000000000000000 [ 264.540884][T15321] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 264.540897][T15321] R13: 00007f6ed3216038 R14: 00007f6ed3215fa0 R15: 00007ffe15793b88 [ 264.540916][T15321] [ 264.540923][T15321] [ 264.587587][T15324] smc: net device vcan0 applied user defined pnetid SYZ1 [ 264.589055][T15321] Allocated by task 15209: [ 264.589069][T15321] kasan_save_stack+0x30/0x50 [ 264.589091][T15321] kasan_save_track+0x14/0x30 [ 264.589108][T15321] __kasan_kmalloc+0xaa/0xb0 [ 264.589124][T15321] __kmalloc_noprof+0x301/0x850 [ 264.589151][T15321] security_inode_init_security+0x113/0x370 [ 264.629255][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 264.629540][T15321] shmem_symlink+0x163/0xa00 [ 264.629558][T15321] vfs_symlink+0x178/0x4d0 [ 264.629569][T15321] filename_symlinkat+0x2a6/0x560 [ 264.656859][T15321] __x64_sys_symlinkat+0x9c/0xe0 [ 264.658350][T15321] do_syscall_64+0x115/0x870 [ 264.658368][T15321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.658379][T15321] [ 264.658382][T15321] Freed by task 15209: [ 264.658388][T15321] kasan_save_stack+0x30/0x50 [ 264.658399][T15321] kasan_save_track+0x14/0x30 [ 264.658409][T15321] kasan_save_free_info+0x3b/0x70 [ 264.658423][T15321] __kasan_slab_free+0x5f/0x80 [ 264.658434][T15321] kfree+0x223/0x6c0 [ 264.658447][T15321] security_inode_init_security+0x2bf/0x370 [ 264.658459][T15321] shmem_symlink+0x163/0xa00 [ 264.658469][T15321] vfs_symlink+0x178/0x4d0 [ 264.658478][T15321] filename_symlinkat+0x2a6/0x560 [ 264.658494][T15321] __x64_sys_symlinkat+0x9c/0xe0 [ 264.658507][T15321] do_syscall_64+0x115/0x870 [ 264.658520][T15321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.658529][T15321] [ 264.658532][T15321] The buggy address belongs to the object at ffff88802e7e8600 [ 264.658532][T15321] which belongs to the cache kmalloc-256 of size 256 [ 264.658541][T15321] The buggy address is located 24 bytes inside of [ 264.658541][T15321] freed 256-byte region [ffff88802e7e8600, ffff88802e7e8700) [ 264.658551][T15321] [ 264.658554][T15321] The buggy address belongs to the physical page: [ 264.658559][T15321] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e7e8 [ 264.658569][T15321] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 264.658577][T15321] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 264.658587][T15321] page_type: f5(slab) [ 264.658596][T15321] raw: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 264.658606][T15321] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 264.658615][T15321] head: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 264.658624][T15321] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 264.658633][T15321] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 264.658643][T15321] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 264.658648][T15321] page dumped because: kasan: bad access detected [ 264.658654][T15321] page_owner tracks the page as allocated [ 264.658657][T15321] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 36, tgid 36 (kdevtmpfs), ts 18755466766, free_ts 0 [ 264.658675][T15321] post_alloc_hook+0xfd/0x120 [ 264.658689][T15321] get_page_from_freelist+0x11a6/0x3410 [ 264.658706][T15321] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 264.658721][T15321] new_slab+0xa6/0x6c0 [ 264.658733][T15321] refill_objects+0x277/0x420 [ 264.658747][T15321] __pcs_replace_empty_main+0x375/0x650 [ 264.658762][T15321] __kmalloc_noprof+0x688/0x850 [ 264.658776][T15321] security_inode_init_security+0x113/0x370 [ 264.658787][T15321] shmem_mknod+0x2ce/0x480 [ 264.658799][T15321] vfs_mknod+0x3a5/0x7f0 [ 264.658807][T15321] devtmpfs_work_loop+0x48d/0xae4 [ 264.658823][T15321] devtmpfsd+0x3f/0x50 [ 264.658833][T15321] kthread+0x370/0x450 [ 264.658845][T15321] ret_from_fork+0x72b/0xd50 [ 264.658857][T15321] ret_from_fork_asm+0x1a/0x30 [ 264.658871][T15321] page_owner free stack trace missing [ 264.658874][T15321] [ 264.658877][T15321] Memory state around the buggy address: [ 264.658882][T15321] ffff88802e7e8500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 264.658889][T15321] ffff88802e7e8580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 264.658896][T15321] >ffff88802e7e8600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 264.658902][T15321] ^ [ 264.658907][T15321] ffff88802e7e8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 264.658914][T15321] ffff88802e7e8700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 264.658919][T15321] ================================================================== [ 264.660353][T15321] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 264.660367][T15321] CPU: 0 UID: 0 PID: 15321 Comm: syz.8.2665 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.660384][T15321] Tainted: [L]=SOFTLOCKUP [ 264.660388][T15321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 264.660396][T15321] Call Trace: [ 264.660400][T15321] [ 264.660405][T15321] dump_stack_lvl+0x100/0x190 [ 264.660420][T15321] vpanic+0x552/0x970 [ 264.660431][T15321] ? __pfx_vpanic+0x10/0x10 [ 264.660442][T15321] ? mark_held_locks+0x40/0x70 [ 264.660457][T15321] ? dvb_device_open+0x33f/0x3b0 [ 264.660472][T15321] panic+0xd1/0xe0 [ 264.660482][T15321] ? __pfx_panic+0x10/0x10 [ 264.660492][T15321] ? dvb_device_open+0x33f/0x3b0 [ 264.660506][T15321] ? preempt_schedule_common+0x42/0xc0 [ 264.660521][T15321] check_panic_on_warn.cold+0x19/0x34 [ 264.660533][T15321] end_report.part.0+0x3a/0x90 [ 264.660549][T15321] kasan_report.cold+0xe/0x18 [ 264.660564][T15321] ? dvb_device_open+0x33f/0x3b0 [ 264.660580][T15321] ? __pfx_dvb_device_open+0x10/0x10 [ 264.660594][T15321] dvb_device_open+0x33f/0x3b0 [ 264.660608][T15321] ? __pfx_dvb_device_open+0x10/0x10 [ 264.660624][T15321] chrdev_open+0x234/0x6a0 [ 264.660638][T15321] ? __pfx_chrdev_open+0x10/0x10 [ 264.660652][T15321] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 264.660669][T15321] do_dentry_open+0x6ab/0x14d0 [ 264.660681][T15321] ? __pfx_chrdev_open+0x10/0x10 [ 264.660696][T15321] vfs_open+0x82/0x3f0 [ 264.660711][T15321] path_openat+0x208c/0x31a0 [ 264.660727][T15321] ? __pfx_path_openat+0x10/0x10 [ 264.660743][T15321] do_file_open+0x20e/0x430 [ 264.660757][T15321] ? __pfx_do_file_open+0x10/0x10 [ 264.660775][T15321] ? alloc_fd+0x476/0x790 [ 264.660790][T15321] ? do_getname+0x191/0x390 [ 264.660806][T15321] do_sys_openat2+0x10d/0x1e0 [ 264.660821][T15321] ? __pfx_do_sys_openat2+0x10/0x10 [ 264.660839][T15321] __x64_sys_openat+0x12d/0x210 [ 264.660856][T15321] ? __pfx___x64_sys_openat+0x10/0x10 [ 264.660872][T15321] ? rcu_is_watching+0x12/0xc0 [ 264.660888][T15321] do_syscall_64+0x115/0x870 [ 264.660901][T15321] ? clear_bhb_loop+0x40/0x90 [ 264.660913][T15321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.660924][T15321] RIP: 0033:0x7f6ed2f5d68e [ 264.660933][T15321] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 264.660944][T15321] RSP: 002b:00007f6ed3ec2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 264.660955][T15321] RAX: ffffffffffffffda RBX: 00007f6ed3ec36c0 RCX: 00007f6ed2f5d68e [ 264.660962][T15321] RDX: 0000000000000002 RSI: 00007f6ed3ec2c00 RDI: ffffffffffffff9c [ 264.660968][T15321] RBP: 00007f6ed3ec2c00 R08: 0000000000000000 R09: 0000000000000000 [ 264.660975][T15321] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 264.660981][T15321] R13: 00007f6ed3216038 R14: 00007f6ed3215fa0 R15: 00007ffe15793b88 [ 264.660991][T15321] [ 264.661589][T15321] Kernel Offset: disabled VM DIAGNOSIS: 20:46:34 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857e8665 RDI=ffffffff9b460ca0 RBP=ffffffff9b460c60 RSP=ffffc9000e0e72f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000066 R14=0000000000000010 R15=ffffffff857e8600 RIP=ffffffff857e868f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6ed3ec36c0 ffffffff 00c00000 GS =0000 ffff8880d6383000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6ed2f86480 CR3=0000000036567000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000000000000 Opmask02=000000000b02fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe15794076 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe15794076 00007ffe1579407c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ed3033352 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ed3033392 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ed30334f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ed3033384 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ed31ed5f8 00007f6ed31ed5c8 00007f6ed31ed600 00007f6ed31ed5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000078 RCX=ffffffff84fa1e64 RDX=0000000000000004 RSI=ffffffff84fa1df5 RDI=ffff888053157014 RBP=ffff888053157015 RSP=ffffc90003327198 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000fec R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000feb R14=00000000e88ffa00 R15=0000000000000000 RIP=ffffffff84fa1e20 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4a74419300 ffffffff 00c00000 GS =0000 ffff8880d6483000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055c52fcea000 CR3=0000000036ae4000 CR4=00352ef0 DR0=0000000000000000 DR1=0155c67b927cf73e DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000a6f 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 747269762f766564 2f01ffffffffffff ffffdd0802800320 000002bf00000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000006080606 011abc0ed8999c9a 100002e810001810 00060677f0048004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002808008000004 01c7100008044ddc 686374616d5f7665 645f65636172745f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d702f7265776f70 2f7379732f01ffff ffffffffffffc508 0003201000061000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 201000060276e800 0400040800028004 01c7100008004cc6 0069636e5f6c6175 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000002000000024 000000280000002c 0000003000000034 000000380000003c ZMM25=89fa0b8289fa0b82 89fa0b8289fa0b82 89fa0b8289fa0b82 89fa0b8289fa0b82 89fa0b8289fa0b82 89fa0b8289fa0b82 89fa0b8289fa0b82 89fa0b8289fa0b82 ZMM26=4226982e4226982e 4226982e4226982e 4226982e4226982e 4226982e4226982e 4226982e4226982e 4226982e4226982e 4226982e4226982e 4226982e4226982e ZMM27=dfdff5dadfdff5da dfdff5dadfdff5da dfdff5dadfdff5da dfdff5dadfdff5da dfdff5dadfdff5da dfdff5dadfdff5da dfdff5dadfdff5da dfdff5dadfdff5da ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0a0c00000a0c0000 0a0c00000a0c0000 0a0c00000a0c0000 0a0c00000a0c0000 0a0c00000a0c0000 0a0c00000a0c0000 0a0c00000a0c0000 0a0c00000a0c0000 info registers vcpu 2 CPU#2 RAX=0000000000000046 RBX=0000000000000002 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8e000656 RDI=ffffffff8c1c4480 RBP=ffff8880592f2540 RSP=ffffc9000ceeee00 R8 =0000000000000005 R9 =0000000000000007 R10=0000000000000004 R11=0000000000000000 R12=00000000ffffffff R13=0000000000000246 R14=ffff888041456c40 R15=ffffffff82502d60 RIP=ffffffff8b8979bc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2e1e3f66c0 ffffffff 00c00000 GS =0000 ffff8880d6583000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd24a54da08 CR3=000000003656b000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=0000000002fefce0 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7372656c6c6f7274 6e6f632e70756f72 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9dc1f5b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9dc1f5b6 00007ffe9dc1f5bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd249833352 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd249833392 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2498334f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd249833384 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffc90006cdfc90 RCX=0000000000000000 RDX=ffff888030978000 RSI=ffffffff84bb1a8e RDI=ffffc90006cdfce0 RBP=0000000000000000 RSP=ffffc90006cdfbe8 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90006cdfc90 R11=0000000000000000 R12=0000000000000012 R13=ffff88803c34fc80 R14=0000000000000004 R15=ffffc90006cdfc70 RIP=ffffffff84bad6c9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f8832dbb880 ffffffff 00c00000 GS =0000 ffff8880d6683000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc21d920f8 CR3=0000000045cde000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040008000 Opmask01=0000000000000001 Opmask02=000000000000ffdf Opmask03=0000000002000000 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005584dc3a45d0 00005584dc3a45d0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005584dc3a45c0 00005584dc3a45c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 00000000000000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2c7e 2f2f2f2f4a5c5a40 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 42021e0218014b1e 151f1f151f1f1f1f ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d305b705d392d00 5d392d305b746f6f 625d392d305b6b6c 62630064696b6c62 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d105b505d190d00 5d190d105b544f4f 425d190d105b4b4c 42430044494b4c42 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a72737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bd8fc9c7ab3b4900 00005584dc3a8cf0 0000000000000006 00005584dc3d8200 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005584dc399210 00005584dc4af350 00005584dc4af2d0 00005584dc4af250 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005584dc39b260 00005584dc39b1e0 00005584dc39b2e0 00005584dc39a2a0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005584dc39a220 00005584dc39a180 00005584dc39a100 00005584dc39a080 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554500484e2d4945 2f45524144004449 0053242d5457452d 484e2d4953242d54 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000