last executing test programs: 17m4.773022305s ago: executing program 32 (id=344): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000), 0x4) mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x3250418, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x48c, 0x0, 0x8000001}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r6, 0xc010644a, &(0x7f0000000100)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x29}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0/file3\x00') 15m24.065971223s ago: executing program 33 (id=1783): r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0xd, 0x4) (async) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) sendmmsg$inet6(r1, &(0x7f0000000380)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x10, @mcast2, 0x5}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000011c0)="c2fb8e95213f23e208cf81fbe16d", 0xe}], 0x1}}], 0x1, 0x4001c00) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x9, 0x6, 0x22eb, 'pimreg1\x00', 'veth1_to_bond\x00', 'bridge_slave_0\x00', 'vlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x1a6) 15m17.085017507s ago: executing program 34 (id=1873): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x1407, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x60}]}, 0x18}}, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000bc0)) fcntl$getownex(r5, 0x10, &(0x7f0000000380)) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) r9 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000380)={0x1d, r10, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) (async) bind$can_j1939(r9, &(0x7f0000000140)={0x1d, r10, 0x1, {0x1, 0x70182ed1d815a9da, 0x5}, 0x1}, 0x18) sendmsg(0xffffffffffffffff, 0x0, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async) r12 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x100005, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r13, r14, r15, &(0x7f0000000280)=@IORING_OP_RECV_ZC={0x3a, 0x10, 0x0, r6, 0x0, 0x0, 0x9, 0x0, 0x0, {0x0, 0x0, 0x80}}) (async) io_uring_enter(r12, 0x1, 0x1, 0x1, 0x0, 0x0) (async) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800dd8d00000000ffffff2502101000fe0400060000002008001e0001"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000069000b000000000000000000000000000000000008000100010000360d3a0841950200"], 0x20}}, 0x4000000) 15m0.774888043s ago: executing program 35 (id=2037): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) write$P9_RLERRORu(r1, &(0x7f00000002c0)=ANY=[], 0xfffffffffffffc57) inotify_init() r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) setsockopt$inet_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x502}, "d4fdc140a3ced5ef", "8add41eee519d200352e4545144d7c3c", "ceaeb565", "90df8705032bdd4c"}, 0x28) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x2) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) write$binfmt_misc(r2, &(0x7f0000000200)="b814aae2ecd4bececf22084f1ffc0a57e425b56d025a714a709de416bd52fc3edaa7ec597f25ba9bbe15fa62a4ac85f00cd3d96575a9b9e6dfae67f1cba77a4954b6bab5eedc18d3fb8512ccab9a2ae7a8b11f8a6b5a0c2db4c8008b73d1cd30658da8982d42f6dc60201cdc4e56956ea3b834593b7c5705952c751e40c4c8e0350e919c2840ff712fda9b99d698dab7b93955d8004ded1090ad31e78d", 0x9d) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f00000005c0)={0x1, 0x0, [{0x400000ff, 0x0, 0x9}]}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$TCFLSH(r11, 0x400455c8, 0x1) socket$netlink(0x10, 0x3, 0xe) ioctl$TIOCSETD(r10, 0x5423, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000040)=0xde) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) 13m57.552368271s ago: executing program 36 (id=2918): unshare(0x2a020480) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) unshare(0x2a020480) (async) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) (async) 12m56.542540286s ago: executing program 37 (id=3740): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000084600001c0012800b00010067656e65766500000c000280050028fff21bcc902b9b0a0088d73520540e7ef04b2944513086141ddaf92ba99b3e76429345c2acc0929a", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x25, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') r7 = fsmount(r2, 0x0, 0x2) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x6, 0x1}, 0xc) fchdir(r7) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000180)=0xfffffffb, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000500)=0xe8) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x800, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@cachetag={'cachetag', 0x3d, 'geneve\x00'}}, {@cache_mmap}, {@version_L}], [{@euid_lt={'euid<', r10}}]}}) r11 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002004e23ffffffff00000000000000000800120000000100000000000000000006000000000000000000000000000000ff020000000000000020000000000001fc020000000000000000000000000000030006000000000002000000e00000010000000000000000"], 0x80}}, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f00000000c0)={0x2, 0x9, 0x9ba, 0x0, 0x5, 0x4, 0x0, &(0x7f0000000040)=[{0x18, 0xfe, 0x401}, {0x3, 0x101, 0x3}, {0x3, 0x0, 0x8}, {0x13, 0x0, 0x2}]}) ioctl$AUTOFS_IOC_EXPIRE(r11, 0x810c9365, 0x0) 11m52.838785558s ago: executing program 38 (id=4465): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x20000000000000}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x1, 0x90}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04181700198e5145f53498c6459864d2100000279d007c589718e01506286af296b8df19588405"], 0x1a) 11m32.994832902s ago: executing program 39 (id=4636): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000000)="974701000000201c2401e18d93d74c6f68bb1a761a4a946249c9a834", 0x1c}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010101}}}], 0x20}, 0x400c804) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, r0) 11m17.6887279s ago: executing program 40 (id=4779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="17000000", @ANYRES16=r2, @ANYBLOB="01072cbd7000fcdbdf250600000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r5, 0x1, 0x70bd2b, 0x25dfdbff, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x10, 0x70bd2d, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0xfffa}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xbc}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x4040010) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x1, 0x40, 0x0, 0x9, {{0x15, 0x4, 0x3, 0x3f, 0x54, 0x66, 0x0, 0x1, 0x2f, 0x0, @multicast1, @rand_addr=0x64010101, {[@end, @end, @noop, @timestamp_prespec={0x44, 0x3c, 0xc2, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8f}, {@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x10000}, {@empty}, {@empty, 0x5}, {@local, 0x81}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x10c, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r1) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000000308010005000300ff0000000400048000"/32], 0x20}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r10, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000880)={0x5c, r11, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x100}, 0x0) r12 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x7, 0x0, 0x0) ptrace(0x10, r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a3c000000120a09000000090000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000914"], 0x64}}, 0x0) ptrace$setregset(0x4205, r12, 0x1, &(0x7f0000000180)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee88197c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r12, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x63}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) ioctl$sock_SIOCSPGRP(r13, 0x8902, &(0x7f0000000280)=r12) 10m19.933395466s ago: executing program 41 (id=5429): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000380)={'veth0_to_bond\x00', @remote}) (async) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce6f40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be90b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e3404000067feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xfda1, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0xff, {0x40, 0x0, 0xb, 0xfffc, 0x9, 0x1, 0x0, 0xffffffff, 0x123, 0x2000, 0xa8, r2, r3, 0x501, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000240), 0x1000, &(0x7f0000000400)={[{@uuid_auto}, {@xino_auto}, {@verity_off}, {@uuid_off}, {@uuid_on}, {@xino_auto}, {@nfs_export_off}], [{@flag='sync'}, {@uid_gt={'uid>', r2}}, {@hash}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@dont_hash}, {@audit}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_type={'obj_type', 0x3d, 'lowerdir'}}]}) (async) rmdir(&(0x7f0000000040)='./file1\x00') (async) futex(&(0x7f000000cffc)=0x1, 0x4, 0x1, 0x0, &(0x7f0000000200), 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) close(r6) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYRES64=r3, @ANYRES8=r3, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008008c00ac0a000006000100050000000800eacb796095de7bc49525f91049d0fadd685ebf0b63140b", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0xc080}, 0x20000034) (async, rerun: 32) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) (async, rerun: 32) pipe2$9p(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RCLUNK(r9, &(0x7f0000000700)={0x7, 0x79, 0x2}, 0x7) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e00000004000000080000000100000004000000411c52af761b3330845833c0d386a073b6b5baff395d6447b98e171c89b7745b664df207fd2ffb0511aca8576ea24410f68eef3022ef5113f3f3c639a11402a0ca8eef40aac5aed5efca64fd1c6229dad388f769ef1570ceebf4e4c42a8a6f6285d8629081f47bfa4a5d56d1d55355b45278977fda6fc654e5e882114404447c8d2a9fa1d09dc9fce23d6d7fbea21ebfb2409f4eaa0613b81e932cda6798994fb10cd3d22dcbe39a9b830e68be7c5235de64a6ec86d8961cb2e14c07829317367fba526237afe1138da024707d04c4915379003413689763a4cf34352045", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000840)={r10, &(0x7f0000000800)="cc54d3fcc0b23cf10feacc15fc1365c5ff042acfc3b4e65eda"}, 0xfffffffffffffee3) chdir(&(0x7f0000000000)='./bus\x00') (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r11, @ANYBLOB='.'], 0x20) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) (rerun: 32) 10m0.192086418s ago: executing program 5 (id=5678): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000000000000000000000000bbff020000000000000000006b"], 0x0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40800) r1 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[], 0x65) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000002c0)="f3410f090f00d5440f01dfb9800000c00f3235000800000f30640fc7a802700000460f01f766baf80cb804c31b8eef66bafc0cec0f070f01cbf044ff801a290000", 0x41}], 0x1, 0xb, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r8, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b350814123070000000000000006c0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a85a056f5d759ded130e04d528539f3d328973747a75df8a69ea917deb7d6193b3e7772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}}) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r10, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r11 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) 9m59.93283193s ago: executing program 5 (id=5681): r0 = openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f00000000c0)='nv\x00', 0x3) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00', {0x3}, 0xff00}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) syz_usb_connect$midi(0x2, 0x31, &(0x7f0000001c00)=ANY=[@ANYBLOB="12010071020000000844090102010203010902000000000000000004000001010330fe090512030800290608042501"], &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0}) 9m56.910612639s ago: executing program 5 (id=5698): gettid() (async) syz_clone(0x400a200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) (async, rerun: 32) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x88042, 0x0) (rerun: 32) write$dsp(r1, &(0x7f0000000280)="dbd74658", 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) syz_open_dev$loop(&(0x7f0000000180), 0x6, 0x80) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x24004045) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3}, {0xd, 0xfff3}, {0x7, 0xfff2}}}, 0x24}}, 0x4004004) (rerun: 32) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) (async) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') (async) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) (async) ftruncate(r3, 0x10000) sendfile(r2, r3, 0x0, 0x7ffff004) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 9m56.191021239s ago: executing program 5 (id=5713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000300)={0x2, 0x86e, 0x0, &(0x7f0000000340)="0000040000cf3b2ba333ffff956e6e6551b5d99f85", 0x0, 0x15}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x5, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x0, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x7000, 0x0, 0x77, 0x8, 0x0, 0x8, 0x2, 0x0, 0x8, 0x6}, {0xffff1000, 0x9000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7}, {0xeeee0000, 0x1000, 0x10, 0x0, 0x7, 0xc4, 0x0, 0x1, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0xc, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x34, 0x7}, {0xffff1000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xe, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x1}, {0x80a0000, 0x3}, {0x5000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0xe, 0xf801, 0x0, [0x8, 0x0, 0x1, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 9m55.822434126s ago: executing program 5 (id=5718): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x2, 0x4}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000140)='./file1\x00') (async, rerun: 64) r1 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], 0x0, r5, 0x0, '\x00', 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={r5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, r6}) close_range(r0, 0xffffffffffffffff, 0x0) 9m55.805898049s ago: executing program 5 (id=5720): ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) r0 = syz_open_dev$admmidi(&(0x7f00000000c0), 0x2, 0x90000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000100)=0xfffffffc) r1 = syz_open_dev$usbmon(&(0x7f0000000140), 0x7, 0xa4000) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) r4 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$OCFS2_IOC_RESVSP64(r5, 0x4030582a, &(0x7f0000000240)={0x2, 0x1, 0x9, 0x2, 0x7, 0x9ca}) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000280)) sendto$inet_nvme_of_msg(r4, &(0x7f0000000380)={@rsp={{0x5, 0x5, 0x18, 0x10, 0x2}, {@u16=0x8, 0x6, 0x2, 0x5, 0x5}}, @val=&(0x7f0000000300)="5eb0d3d5912fbf2b59697140a0e194737af1960d83eb58f8a497bd28c2bdb3bc1609f589328677c4aa42c957e1d1d86437f906f0f9414bdbd88ec2a0448b46bb9fc4bfb869cfc78a833df38241fe34a2dae0d3b361bb59"}, 0x88, 0x0, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000480)={0x28, 0x0, 0x0, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000440)}) ioctl$XFS_IOC_DIOINFO(r4, 0x800c581e, &(0x7f00000004c0)) r6 = syz_open_dev$vivid(&(0x7f0000000500), 0x1, 0x2) ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0) close(r5) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000540)={@loopback, @initdev, 0x0}, &(0x7f0000000580)=0xc) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000005c0)={r7, 0x1, 0x6, @random="8ead15a31cb9"}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@getqdisc={0x2c, 0x26, 0x800, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x1, 0x7}, {0x4, 0xffe0}, {0x3, 0xc}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) pwritev2(r0, &(0x7f0000000940)=[{&(0x7f0000000700)="2dc4eacd764266cefc94b371e577066f58285e3d1853a5709fe7b190f14dca916ab7cde40a9f94785f73ef8ccdd738298cf04a0383dcaa98bd22da645d975f233971bc33c3670c11a183a35281b96ebf25f397225f501dc727", 0x59}, {&(0x7f0000000780)="0bd0f8d1159c8c1eec625eb2795d505ffc01105ad219474c3ed47c72c2546f2b49b75b1334273fd59f760169225faa5346560e1238a9a89766efcb1158762cf27517e7f2dbbc28ce39cbbd021ff94bb0e26d2b24c82497f4d7b46e916cfd20833564116ff168bc348f5b863256351878715130a8a45afc70340e9d927bb1d45a52411d038abba0fd761f91906e8de8b5ea802fbe8ff33e8b037e6a1697ee35cddfeb28652d381a9928f2b2631733c5b1e52971610bc582afbfe77ceef7", 0xbd}, {&(0x7f0000000840)="5d0b4ff0951e763add89ec8b27ad3c08efa121a0239a76f83d7411d51840076206be6d46ac774842a81a9ad25a7bd5967a668de856bfe980de053064f2735b078a7ac05fb9663e72fbee12be0cb2bd4a5ccf90b13ae46416a12a55e0f47791f239ddd4c3bc8d7317be517e9dc163c5663d60e5bac50fb3b97663c318d3261fd38ecea9cb16f69141f8b52f32f1217cce3c8078e17a44f48ec7dffe16f40d034eae4958522ae8c81642c8a2b00b82fbca38b08b521d210f8030c047701edaf151296183a2d5ca3ac30ad7272c3f9155f01452be889b565c0bf8699225c0a508db0b3bebc904d872ebb25e16fcd07f542271", 0xf1}], 0x3, 0x389, 0x17ec5ab2, 0x8fb5c9d277a77ece) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x64, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000b00)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000c00)=0xe8) quotactl_fd$Q_GETFMT(r8, 0xffffffff80000402, r9, &(0x7f0000000c40)) ioctl$KVM_CAP_X86_GUEST_MODE(r4, 0x4068aea3, &(0x7f0000000c80)) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000e00)={r4, &(0x7f0000000d00)='gre0\x00', 0x800, &(0x7f0000000d40)={@_ha_fsid={[0x0, 0x4]}, {0xd, 0x5, 0x4c, 0x6}}, 0x7, &(0x7f0000000d80)={@_ha_fsid}, &(0x7f0000000dc0)=0x17b}) pwritev(r10, &(0x7f0000001240)=[{&(0x7f0000000e40)="9168144dbebd99ea55fb3a3a0d41b00d6da501e450bf8218f2c606b580a47f947f162477cb802ff14c474032cc2c9998424dce817f36fd5281dfb22d865fe3c63350b9c78495df0007e3c80bbaf55b460a1e36b8b3d8fc4939118e3b44b8953341888a86dade1602217d51e768d9f77e031b4c5b4836fc2014dfa4d4880967ca3b572fe78c72e21d030b450686ef0637a6dd258360b8de89f3596a5bfcc8cae1eba5674e89cf2d166d12ba49fd91ef9cbb07510289b2ddbf5a56e208daa11f3ac04c80ddbedd3952ec75d4cc60bf225a0535a1898a9cb6b30f1241d0fb05f6bb3a3a13d43eebac57133d82ad14", 0xed}, {&(0x7f0000000f40)="5b6296e250b75588a8cd095913535104898a8fe6f9b54d6cae2be1971d48f89cf8cd54de52972f849cb311370a8c95d27e1e7e36fefdad62cfb653e9b4393340a4525ee440f74103808e8f8a72e61229d99d22034238822c334f141405bd07caabc27f8222e3e75bd0", 0x69}, {&(0x7f0000000fc0)="85fa83161f8940bd2032a2d09d8b7afff5275181e6584845331c", 0x1a}, {&(0x7f0000001000)="65517ee10fbe38fd940565e35fda52e5b53e577a464d166262b82b4f943c52d439aefa5a6af3650118e486376649d57d5c42a61b988feddf8829857b0b12a537f08820e5740a8f29b89521c137cbce5170d339b25a7fa7d9f69e0e5bc53f1b4311084c40a42b22aac4d9ccf5fcd0bd9ecd4da7d576b33b3ccefed34e9ce25b4e4567ed7ddeeb411193d6522fce19f63b7eb688fc7fd71c0c84cf292abedae343649793b5299fe3e6302d07cbef657a23bca29532fb8e205a004048d3d4e02a9e0cac3701cc6b", 0xc6}, {&(0x7f0000001100)="cc4bff059536e5ad625187865b4bfa38fb82f4a3ef457aa5adb703c6ab9933c0103e3fbbcd3c570b65665b3507f0bc206d907da34a9596a441fba374bcd1970bd014c5620db7be06981dab7aa70085cb15849be1b15c3298e2c4b75e0d80661b2a3dc12e9443359c4569efb5b1fd8438d1975e34af82e70c98875eb0ccd1766a0e0464910e342288d8f0f9dcf20eaa7514dd57bd57e0adf6445c431925bbfe09dd2a813ee3432789188f3c46dcd200cf483984d486c4160829496f9f589fe0a31c88a37cb24f6e088f657e6d7ba64863965f040c8e744d1e8790291cb997698d618e066410", 0xe5}, {&(0x7f0000001200)="30f852d883a41888bab8a381a2758d658d9e9b28b6c95b6d", 0x18}], 0x6, 0x8, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f00000012c0)={'veth0_virt_wifi\x00', {0x2, 0x0, @remote}}) 9m55.575981438s ago: executing program 42 (id=5721): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0x7f}, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x4, 0x10, 0x8, 0x2, 0x41, @empty, @empty, 0x7800, 0x7800, 0x5, 0x2}}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) write(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061117c0c00"/32], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 9m40.762562289s ago: executing program 43 (id=5720): ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) r0 = syz_open_dev$admmidi(&(0x7f00000000c0), 0x2, 0x90000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000100)=0xfffffffc) r1 = syz_open_dev$usbmon(&(0x7f0000000140), 0x7, 0xa4000) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) r4 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$OCFS2_IOC_RESVSP64(r5, 0x4030582a, &(0x7f0000000240)={0x2, 0x1, 0x9, 0x2, 0x7, 0x9ca}) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000280)) sendto$inet_nvme_of_msg(r4, &(0x7f0000000380)={@rsp={{0x5, 0x5, 0x18, 0x10, 0x2}, {@u16=0x8, 0x6, 0x2, 0x5, 0x5}}, @val=&(0x7f0000000300)="5eb0d3d5912fbf2b59697140a0e194737af1960d83eb58f8a497bd28c2bdb3bc1609f589328677c4aa42c957e1d1d86437f906f0f9414bdbd88ec2a0448b46bb9fc4bfb869cfc78a833df38241fe34a2dae0d3b361bb59"}, 0x88, 0x0, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000480)={0x28, 0x0, 0x0, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000440)}) ioctl$XFS_IOC_DIOINFO(r4, 0x800c581e, &(0x7f00000004c0)) r6 = syz_open_dev$vivid(&(0x7f0000000500), 0x1, 0x2) ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0) close(r5) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000540)={@loopback, @initdev, 0x0}, &(0x7f0000000580)=0xc) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000005c0)={r7, 0x1, 0x6, @random="8ead15a31cb9"}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@getqdisc={0x2c, 0x26, 0x800, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x1, 0x7}, {0x4, 0xffe0}, {0x3, 0xc}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) pwritev2(r0, &(0x7f0000000940)=[{&(0x7f0000000700)="2dc4eacd764266cefc94b371e577066f58285e3d1853a5709fe7b190f14dca916ab7cde40a9f94785f73ef8ccdd738298cf04a0383dcaa98bd22da645d975f233971bc33c3670c11a183a35281b96ebf25f397225f501dc727", 0x59}, {&(0x7f0000000780)="0bd0f8d1159c8c1eec625eb2795d505ffc01105ad219474c3ed47c72c2546f2b49b75b1334273fd59f760169225faa5346560e1238a9a89766efcb1158762cf27517e7f2dbbc28ce39cbbd021ff94bb0e26d2b24c82497f4d7b46e916cfd20833564116ff168bc348f5b863256351878715130a8a45afc70340e9d927bb1d45a52411d038abba0fd761f91906e8de8b5ea802fbe8ff33e8b037e6a1697ee35cddfeb28652d381a9928f2b2631733c5b1e52971610bc582afbfe77ceef7", 0xbd}, {&(0x7f0000000840)="5d0b4ff0951e763add89ec8b27ad3c08efa121a0239a76f83d7411d51840076206be6d46ac774842a81a9ad25a7bd5967a668de856bfe980de053064f2735b078a7ac05fb9663e72fbee12be0cb2bd4a5ccf90b13ae46416a12a55e0f47791f239ddd4c3bc8d7317be517e9dc163c5663d60e5bac50fb3b97663c318d3261fd38ecea9cb16f69141f8b52f32f1217cce3c8078e17a44f48ec7dffe16f40d034eae4958522ae8c81642c8a2b00b82fbca38b08b521d210f8030c047701edaf151296183a2d5ca3ac30ad7272c3f9155f01452be889b565c0bf8699225c0a508db0b3bebc904d872ebb25e16fcd07f542271", 0xf1}], 0x3, 0x389, 0x17ec5ab2, 0x8fb5c9d277a77ece) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x64, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000b00)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000c00)=0xe8) quotactl_fd$Q_GETFMT(r8, 0xffffffff80000402, r9, &(0x7f0000000c40)) ioctl$KVM_CAP_X86_GUEST_MODE(r4, 0x4068aea3, &(0x7f0000000c80)) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000e00)={r4, &(0x7f0000000d00)='gre0\x00', 0x800, &(0x7f0000000d40)={@_ha_fsid={[0x0, 0x4]}, {0xd, 0x5, 0x4c, 0x6}}, 0x7, &(0x7f0000000d80)={@_ha_fsid}, &(0x7f0000000dc0)=0x17b}) pwritev(r10, &(0x7f0000001240)=[{&(0x7f0000000e40)="9168144dbebd99ea55fb3a3a0d41b00d6da501e450bf8218f2c606b580a47f947f162477cb802ff14c474032cc2c9998424dce817f36fd5281dfb22d865fe3c63350b9c78495df0007e3c80bbaf55b460a1e36b8b3d8fc4939118e3b44b8953341888a86dade1602217d51e768d9f77e031b4c5b4836fc2014dfa4d4880967ca3b572fe78c72e21d030b450686ef0637a6dd258360b8de89f3596a5bfcc8cae1eba5674e89cf2d166d12ba49fd91ef9cbb07510289b2ddbf5a56e208daa11f3ac04c80ddbedd3952ec75d4cc60bf225a0535a1898a9cb6b30f1241d0fb05f6bb3a3a13d43eebac57133d82ad14", 0xed}, {&(0x7f0000000f40)="5b6296e250b75588a8cd095913535104898a8fe6f9b54d6cae2be1971d48f89cf8cd54de52972f849cb311370a8c95d27e1e7e36fefdad62cfb653e9b4393340a4525ee440f74103808e8f8a72e61229d99d22034238822c334f141405bd07caabc27f8222e3e75bd0", 0x69}, {&(0x7f0000000fc0)="85fa83161f8940bd2032a2d09d8b7afff5275181e6584845331c", 0x1a}, {&(0x7f0000001000)="65517ee10fbe38fd940565e35fda52e5b53e577a464d166262b82b4f943c52d439aefa5a6af3650118e486376649d57d5c42a61b988feddf8829857b0b12a537f08820e5740a8f29b89521c137cbce5170d339b25a7fa7d9f69e0e5bc53f1b4311084c40a42b22aac4d9ccf5fcd0bd9ecd4da7d576b33b3ccefed34e9ce25b4e4567ed7ddeeb411193d6522fce19f63b7eb688fc7fd71c0c84cf292abedae343649793b5299fe3e6302d07cbef657a23bca29532fb8e205a004048d3d4e02a9e0cac3701cc6b", 0xc6}, {&(0x7f0000001100)="cc4bff059536e5ad625187865b4bfa38fb82f4a3ef457aa5adb703c6ab9933c0103e3fbbcd3c570b65665b3507f0bc206d907da34a9596a441fba374bcd1970bd014c5620db7be06981dab7aa70085cb15849be1b15c3298e2c4b75e0d80661b2a3dc12e9443359c4569efb5b1fd8438d1975e34af82e70c98875eb0ccd1766a0e0464910e342288d8f0f9dcf20eaa7514dd57bd57e0adf6445c431925bbfe09dd2a813ee3432789188f3c46dcd200cf483984d486c4160829496f9f589fe0a31c88a37cb24f6e088f657e6d7ba64863965f040c8e744d1e8790291cb997698d618e066410", 0xe5}, {&(0x7f0000001200)="30f852d883a41888bab8a381a2758d658d9e9b28b6c95b6d", 0x18}], 0x6, 0x8, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f00000012c0)={'veth0_virt_wifi\x00', {0x2, 0x0, @remote}}) 9m26.189285044s ago: executing program 6 (id=6016): r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000380)=ANY=[@ANYRES64=r1, @ANYRES32=r1]) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x1, 0x11, 0x7, 0x1}, 0x8) 9m26.118575267s ago: executing program 6 (id=6019): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x4, r6, 0x0, 0x0, 0x0, 0x2142, 0x0, {0x3}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000000000000200000d0000000000000000020000000100000002000000000000000000000500000000002e"], 0x0, 0x43, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x50) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x104, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) ioctl$KVM_RUN(r7, 0xae80, 0x0) 9m25.761827409s ago: executing program 6 (id=6026): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3c, &(0x7f0000000100)}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) syz_emit_ethernet(0x15e, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000000)=0x3, 0x4) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r3, &(0x7f0000002200)={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, "bb8ed5519e0a9c8d46eb5f454d2d1a1ebc0a89c478f877cf2e739378b26f4edafe615b8f07c11a6042056601d488ebe3b8a9f006ae0c89a625bc6ded4b048f", 0x8}, 0x60) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x10000000, @loopback, 0xd}, 0x1c) 9m25.761177608s ago: executing program 6 (id=6027): openat$kvm(0xffffffffffffff9c, 0x0, 0x88840, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001300050026bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a800800058004000380"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x20000000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) open_by_handle_at(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000020000000b"], 0x2f000000) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x189802a, 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = syz_pidfd_open(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) setns(r5, 0x66020000) umount2(&(0x7f0000000140)='./file0\x00', 0x2) 9m25.6828396s ago: executing program 6 (id=6029): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x0, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffff00], 'wlan0\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) 9m25.402354179s ago: executing program 6 (id=6034): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) (async) openat$cdrom(0xffffffffffffff9c, &(0x7f00000017c0), 0xc0040, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@map=r4, r4, 0x2f, 0x18, 0x4, @void, @value, @void, @void, r5}, 0x20) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x2003008, &(0x7f0000000180)={[], [{@hash}, {@dont_appraise}, {@fowner_eq={'fowner', 0x3d, r2}}]}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x4000, 0xa6) 9m25.325086871s ago: executing program 44 (id=6034): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) (async) openat$cdrom(0xffffffffffffff9c, &(0x7f00000017c0), 0xc0040, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@map=r4, r4, 0x2f, 0x18, 0x4, @void, @value, @void, @void, r5}, 0x20) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x2003008, &(0x7f0000000180)={[], [{@hash}, {@dont_appraise}, {@fowner_eq={'fowner', 0x3d, r2}}]}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x4000, 0xa6) 7m38.575629586s ago: executing program 9 (id=7237): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) waitid(0x1, r0, 0x0, 0x8, &(0x7f0000000000)) 7m38.436370174s ago: executing program 9 (id=7239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="05c8213a86c1bb8a676c415c0006000d090800080017330208080006100400ff0036030f0d04000800380d0a060200810011b90200d2c985d5040003000700ef45f76a0956"], 0x3f) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000003, 0x0, 0x1}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0407060d20"], 0x7) r6 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sched_cls, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000000180)) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000440)={0x1fe, 0x2, 0x2, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000017000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x8e, 0x11, 0x0, 0xfffffdf1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text16={0x10, 0x0}], 0x1, 0x9, 0x0, 0x0) r9 = syz_ublk_setup_io_uring(0x498e, &(0x7f00000001c0)={0x0, 0x4fbc, 0x0, 0x3, 0x3bd}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r9, 0x1f, &(0x7f0000000340)={0x28, 0x1, 0x0, r10, &(0x7f0000000280)="b46e5fbe5e46673363fc64a3a2d7d22ca640818506277c861daa98909dc033ccd5e2f9164254c4b1ed9df7f54a53c9430615ea5bbd39ce03527f277f4ae012a49bb31e827fad5abaec7446b03e0c16fbf36760db730e51ceec34a56cc9bc4d3b27fe7b75a86bd3b49a0c72caceddbdf8e680c1b2798c75a67cf4df8e8ffe835b7f26f48424b026d2e17df0d82340920670da4f2fb444dd9ba467e9bafeec9f739c2c5ad1f965026855f39a22", 0x0, 0x8, 0x2, 0x3, {0x0, 0x0, r8, 0x3}}, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001a00)={&(0x7f0000000880)="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", 0x0, &(0x7f0000001940)="b8994b27b152c8e9879b4b9898ff800743142a7b426ba26170cb820537741cb6e2124b53e46f802a24245d3665e223519b6a7d32c2cd2330b52d4f9756a3401a1d5910e0", &(0x7f00000019c0), 0x200, 0xffffffffffffffff, 0x4}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x2800}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 7m38.135076673s ago: executing program 9 (id=7240): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e63925789381db3fe455e8dadc7dcf81189517730bed5d8036168bd2e27cc611027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc506c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7964a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$kcm(r2, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e22}}]}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0xf830, 0x700, 0x7, 0x101, {{0x6, 0x4, 0x0, 0x7, 0x18, 0x66, 0x0, 0x40, 0x4, 0x0, @local, @broadcast, {[@noop]}}}}}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000006a0020002abd7000fd030000000000009045b662e0250a000000000000000400090004000b0008000500022613ca54e1fb348570dc30c9e9323a50cbdb61e9ab3d5ac8e070526d3cf0754fe3dcefb39c64921d0604654f68f892bcca3f344757f12cb2737043a29b2c5c2c495800876c44ec57c3b21f12e23a2633abb72949739749847f01bfcf56b6403d7511a940a9996e5c5865eba7eb1c7d634ab5131cce842e98f85668be971aa548aa2a81f49e9eb432f0a20af3d426e7e15c2b9015f78a77b2", @ANYRES32=r6, @ANYBLOB], 0x28}}, 0xc080) 7m37.204066782s ago: executing program 9 (id=7246): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000140)={0x0, "5622d02e54e0090aa90108e267cd87ab932cf729f85c7bd8fa1cea70f891568c", 0x0, 0x1}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x8) mount(&(0x7f00000007c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000780)='romfs\x00', 0x204001, 0x0) 7m37.056321081s ago: executing program 9 (id=7247): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fbffffff000000005e73000018000000960700000000000000000000850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x30010, 0x100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x24000840) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file1\x00', 0x0, 0x128) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='ocfs2_dlmfs\x00', 0x120c00c, 0x0) 7m36.120531393s ago: executing program 9 (id=7259): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000103006a0a00fe000000008500000026000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}]}, 0x48}}, 0x0) sendto$packet(r4, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc966", 0x27, 0x40, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000280)="e87c", 0x2, 0x21, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r8, &(0x7f0000000040)='@', 0x1, 0x20004880, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) 7m20.933007613s ago: executing program 45 (id=7259): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000103006a0a00fe000000008500000026000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}]}, 0x48}}, 0x0) sendto$packet(r4, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc966", 0x27, 0x40, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000280)="e87c", 0x2, 0x21, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r8, &(0x7f0000000040)='@', 0x1, 0x20004880, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) 5m21.513888016s ago: executing program 3 (id=8968): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5m21.393294897s ago: executing program 3 (id=8973): clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000040)={r0, r1+60000000}, &(0x7f0000000080)) rt_sigtimedwait(&(0x7f00000000c0)={[0x2b3]}, 0x0, &(0x7f0000000100)={0x77359400}, 0x8) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x3000, 0x2, 0x2, 0x20, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r2, 0x8) clock_settime(0x5, &(0x7f0000000180)) clock_settime(0x3, &(0x7f00000001c0)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000200)={0x76a, 0x17, 0xfad6, 0x4, 0x5, 0x9, 0xc, 0xfffffffffffff000, 0x0, 0x1, 0x10000, 0x8, 0x6, 0xbce, 0x2, 0xfffffffffffffffa, 0x0, 0x2, 0x800, 0x6, 0x400, 0x1, 0x3, 0x5, 0xfffffffffffff66d, 0x9a1}) r3 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000300)) recvmmsg$unix(r3, &(0x7f0000003ec0)=[{{&(0x7f0000000340)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/153, 0x99}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/44, 0x2c}, {&(0x7f0000001580)=""/122, 0x7a}, {&(0x7f0000001600)=""/156, 0x9c}], 0x6, &(0x7f0000001740)}}, {{&(0x7f0000001780), 0x6e, &(0x7f0000002a80)=[{&(0x7f0000001800)=""/197, 0xc5}, {&(0x7f0000001900)=""/53, 0x35}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/114, 0x72}, {&(0x7f00000029c0)=""/33, 0x21}, {&(0x7f0000002a00)=""/71, 0x47}], 0x6, &(0x7f0000002b00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002b40)=""/209, 0xd1}, {&(0x7f0000002c40)=""/25, 0x19}, {&(0x7f0000002c80)=""/240, 0xf0}, {&(0x7f0000002d80)=""/81, 0x51}, {&(0x7f0000002e00)=""/224, 0xe0}], 0x5, &(0x7f0000002f80)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f00000030c0), 0x6e, &(0x7f0000003300)=[{&(0x7f0000003140)=""/185, 0xb9}, {&(0x7f0000003200)=""/228, 0xe4}], 0x2, &(0x7f0000003340)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003380)=@abs, 0x6e, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/178, 0xb2}, {&(0x7f00000034c0)=""/204, 0xcc}, {&(0x7f00000035c0)=""/39, 0x27}, {&(0x7f0000003600)=""/69, 0x45}, {&(0x7f0000003680)=""/10, 0xa}], 0x5, &(0x7f0000003740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003780), 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003800)=""/213, 0xd5}, {&(0x7f0000003900)=""/77, 0x4d}, {&(0x7f0000003980)=""/165, 0xa5}, {&(0x7f0000003a40)=""/108, 0x6c}, {&(0x7f0000003ac0)=""/228, 0xe4}, {&(0x7f0000003bc0)=""/238, 0xee}, {&(0x7f0000003cc0)=""/49, 0x31}, {&(0x7f0000003d00)=""/35, 0x23}, {&(0x7f0000003d40)=""/186, 0xba}], 0x9}}], 0x6, 0x20, &(0x7f0000004040)={0x77359400}) nanosleep(&(0x7f0000004080)={0x0, 0x3938700}, &(0x7f00000040c0)) clock_gettime(0x3, &(0x7f0000004100)) futex_waitv(&(0x7f00000043c0)=[{0x0, &(0x7f0000004140)=0x7fffffff, 0x82}, {0x954, &(0x7f0000004180)=0x7, 0x2}, {0x7056, &(0x7f00000041c0)=0xd, 0x2}, {0xb, &(0x7f0000004200)=0x1, 0x2}, {0x3, &(0x7f0000004240)=0x6, 0x82}, {0x9, &(0x7f0000004280)=0x3, 0x2}, {0x5, &(0x7f00000042c0)=0x3, 0x82}, {0x2, &(0x7f0000004300)=0x7, 0x82}, {0x1ff, &(0x7f0000004340)=0x8, 0x82}, {0x5, &(0x7f0000004380)=0x47d44fe5, 0x2}], 0xa, 0x0, &(0x7f00000044c0)={0x77359400}, 0x1) r10 = syz_open_dev$swradio(&(0x7f0000004500), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r10, 0x4054561e, &(0x7f0000004540)={0x4, "bdc5f9af46aaded8cd1a9220b3b8e18eff32e712bb6b5d563dea46ea96fb544b", 0x2, 0x0, 0x9, 0x2, 0x8, 0x7ea8cd785d68aecd, 0x20000000, 0x3ff}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f00000045c0)={0xd02, r8}, 0x1) ioctl$I2C_TIMEOUT(r6, 0x702, 0x80000001) nanosleep(&(0x7f0000004600)={0x0, 0x3938700}, &(0x7f0000004640)) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000004680), 0x406180, 0x0) mkdirat(r11, &(0x7f00000046c0)='./file0\x00', 0x80) fsconfig$FSCONFIG_SET_PATH(r8, 0x3, &(0x7f0000004700)='!-\'\x00', &(0x7f0000004740)='./file0\x00', r7) clock_gettime(0x0, &(0x7f0000006e00)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000006d80)=[{{&(0x7f0000004780)=@ieee802154, 0x80, &(0x7f0000004900)=[{&(0x7f0000004800)=""/92, 0x5c}, {&(0x7f0000004880)=""/121, 0x79}], 0x2, &(0x7f0000004940)=""/61, 0x3d}, 0x5}, {{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000006cc0)=[{&(0x7f0000004a00)=""/25, 0x19}, {&(0x7f0000004a40)=""/144, 0x90}, {&(0x7f0000004b00)=""/159, 0x9f}, {&(0x7f0000004bc0)=""/57, 0x39}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/131, 0x83}, {&(0x7f0000005cc0)=""/4096, 0x1000}], 0x7, &(0x7f0000006d40)}, 0x80000000}], 0x2, 0x2, &(0x7f0000006e40)={r12, r13+10000000}) mq_timedsend(r6, &(0x7f0000006e80)="ff83130de2d53e6e802615596e78da4c032a0b4cb11bb855ccf0f1143ab3bc9cc5", 0x21, 0xfffffffffffffff2, &(0x7f0000006ec0)={0x0, 0x989680}) r14 = syz_open_dev$vivid(&(0x7f0000006f00), 0x2, 0x2) ioctl$VIDIOC_G_ENC_INDEX(r14, 0x8818564c, &(0x7f0000006f40)) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000007780)=0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f000000ca00)=[{{&(0x7f00000077c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007c40)=[{&(0x7f0000007840)=""/236, 0xec}, {&(0x7f0000007940)=""/179, 0xb3}, {&(0x7f0000007a00)=""/180, 0xb4}, {&(0x7f0000007ac0)=""/146, 0x92}, {&(0x7f0000007b80)=""/73, 0x49}, {&(0x7f0000007c00)=""/21, 0x15}], 0x6}, 0xf8b2}, {{0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000007cc0)=""/172, 0xac}, {&(0x7f0000007d80)=""/238, 0xee}, {&(0x7f0000007e80)=""/220, 0xdc}, {&(0x7f0000007f80)}], 0x4, &(0x7f0000008000)=""/31, 0x1f}, 0x515}, {{&(0x7f0000008040)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f000000a440)=[{&(0x7f00000080c0)=""/1, 0x1}, {&(0x7f0000008100)=""/23, 0x17}, {&(0x7f0000008140)=""/211, 0xd3}, {&(0x7f0000008240)}, {&(0x7f0000008280)=""/64, 0x40}, {&(0x7f00000082c0)=""/4096, 0x1000}, {&(0x7f00000092c0)=""/194, 0xc2}, {&(0x7f00000093c0)=""/63, 0x3f}, {&(0x7f0000009400)=""/4, 0x4}, {&(0x7f0000009440)=""/4096, 0x1000}], 0xa, &(0x7f000000a500)}, 0x5}, {{&(0x7f000000a540)=@can, 0x80, &(0x7f000000aa40)=[{&(0x7f000000a5c0)=""/184, 0xb8}, {&(0x7f000000a680)=""/164, 0xa4}, {&(0x7f000000a740)=""/248, 0xf8}, {&(0x7f000000a840)=""/202, 0xca}, {&(0x7f000000a940)=""/220, 0xdc}], 0x5, &(0x7f000000aac0)=""/95, 0x5f}, 0xb75}, {{&(0x7f000000ab40)=@nfc, 0x80, &(0x7f000000ad00)=[{&(0x7f000000abc0)=""/193, 0xc1}, {&(0x7f000000acc0)=""/46, 0x2e}], 0x2, &(0x7f000000ad40)=""/83, 0x53}, 0x7}, {{&(0x7f000000adc0)=@xdp, 0x80, &(0x7f000000af40)=[{&(0x7f000000ae40)=""/131, 0x83}, {&(0x7f000000af00)=""/1, 0x1}], 0x2, &(0x7f000000af80)=""/72, 0x48}, 0xce}, {{&(0x7f000000b000)=@caif=@util, 0x80, &(0x7f000000b100)=[{&(0x7f000000b080)=""/81, 0x51}], 0x1, &(0x7f000000b140)=""/112, 0x70}, 0x6}, {{0x0, 0x0, &(0x7f000000b240)=[{&(0x7f000000b1c0)=""/90, 0x5a}], 0x1, &(0x7f000000b280)=""/247, 0xf7}, 0x4}, {{&(0x7f000000b380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f000000c940)=[{&(0x7f000000b400)=""/28, 0x1c}, {&(0x7f000000b440)=""/155, 0x9b}, {&(0x7f000000b500)=""/4096, 0x1000}, {&(0x7f000000c500)=""/175, 0xaf}, {&(0x7f000000c5c0)=""/1, 0x1}, {&(0x7f000000c600)=""/43, 0x2b}, {&(0x7f000000c640)=""/208, 0xd0}, {&(0x7f000000c740)=""/200, 0xc8}, {&(0x7f000000c840)=""/81, 0x51}, {&(0x7f000000c8c0)=""/65, 0x41}], 0xa}, 0xa0}], 0x9, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f000000cc40)='./file0\x00', &(0x7f000000cc80), 0x23d2032, &(0x7f000000ccc0)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @void}}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) ioctl$TIOCGSID(r5, 0x5429, &(0x7f000000cd00)) 5m20.524716073s ago: executing program 3 (id=8982): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x34, r0, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x200}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000580)={[{@none}, {@xattr}, {@cpuset_v2_mode}, {@clone_children}, {@cpuset_v2_mode}, {@none}, {@subsystem='io'}, {@xattr}, {@nofavordynmods}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x3}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x24004040) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000380), 0xa0000, 0x0) ppoll(&(0x7f00000003c0)=[{r4, 0x4}], 0x1, &(0x7f0000000440)={0x0, 0x989680}, 0x0, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) r6 = dup3(r5, r2, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) futimesat(r6, &(0x7f0000000400)='./file0\x00', &(0x7f0000000640)={{r7, r8/1000+60000}}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRES8=0x0, @ANYBLOB="f708d2775549110570089530895b340be0c792affda23c32e51d607fe357308b3a45373b9942c0898b148cc570c53842a66be6bf09d0c902ec3ef3d5e2ab943f81da06cc38afe50ba2d82dd5ff959c8dd5e56052e64d678bd459ac4755d131fd3755218931c9fd887b0fa30c859a862b409806f08ee714b0041a084aa669a655ad7bdc49679c46a088d87b8761c8291ed2db1df4e6bc09804e37154f690ac8173a1ef20bc23955dc", @ANYRES16=r5, @ANYRES16=r5, @ANYRESHEX=r5, @ANYBLOB="7cac472742f514cddc4e652a9bc21864585da5b9aca06c", @ANYRES8=r5, @ANYRES16=r4], 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 5m13.783340423s ago: executing program 3 (id=8985): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x36, 0x1, 0x0, r2}) (async) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 5m13.528798843s ago: executing program 3 (id=8989): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x4, 0x100, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r8, &(0x7f0000000600)=[{&(0x7f0000000100)="339931a8e5", 0x5}], 0x1) setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f00000000c0)=0x7cef, 0x4) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r11 = fanotify_init(0x200, 0x0) fanotify_mark(r11, 0x201, 0x4000003e, r10, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r12, 0x401c5820, &(0x7f0000000080)={0x8}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r13, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0504"], 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) r15 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r15, 0xc01064b3, &(0x7f0000000040)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) write$binfmt_misc(r16, &(0x7f0000000580)="8c0e2fb1cd", 0x5) syz_ublk_setup_queues(r9, r7, &(0x7f0000000540)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x1000, 0x2, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x330, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x20, 0x0, 0x2db, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r9, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r6, '\x00', {0x3, 0xb55, 0x100104, 0x0}}, &(0x7f0000001fc0)) 5m13.32213191s ago: executing program 3 (id=8991): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x50000}]}) (async) r0 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0x0, &(0x7f00000001c0)={0x2000000000000000, 0xfffdfffffffffffb}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x110) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) (async, rerun: 64) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000005c0)='configfs\x00', 0x200000, 0x0) (rerun: 64) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000005c0), 0x8040, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}, {@workdir={'workdir', 0x3d, './bus'}}]}) 4m58.096301682s ago: executing program 46 (id=8991): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x50000}]}) (async) r0 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0x0, &(0x7f00000001c0)={0x2000000000000000, 0xfffdfffffffffffb}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x110) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) (async, rerun: 64) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000005c0)='configfs\x00', 0x200000, 0x0) (rerun: 64) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000005c0), 0x8040, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3m52.929871304s ago: executing program 1 (id=9656): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) userfaultfd(0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) 3m52.828764649s ago: executing program 1 (id=9657): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001035cac6d8ec8148a0006000000000010000600000000002000000000000002e89265417e37c6c5aea188d5fde33e850e6032df9d5136244d0aa9008d9e6e2acc8ed26b7fdaa5afc075e561a9bad22f06cb6f2c0f1e72d915425992f9a61e1c16c467bd678c016d725fe3d1eee9a951b6b458bd487ad3d2ab0b54342b5be8dd00115663e7c69991313ef42cb33a1b97fcb7e91c09163a349878833a33fbd5a772e0285692bdea14944c9855489324337f1cb19183f9e5da8213"], 0x24, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) listen(0xffffffffffffffff, 0x5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) r2 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r2, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5}) ioctl(r3, 0x8b32, &(0x7f0000000040)) utimensat(r0, 0x0, &(0x7f0000000100)={{0x0, 0x3fffffff}, {0x0, 0x3fffffff}}, 0x0) 3m47.293101544s ago: executing program 1 (id=9659): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x2, 0x1d84, 0xd, 0x1000}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES8=r1], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 3m47.181179523s ago: executing program 1 (id=9665): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r1, 0xaea2, 0x1) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x10, 0x0, 0x5}, {0xfe, 0x0, 0x8}]}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000740)={&(0x7f0000000600)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, &(0x7f0000000000)) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) ioctl$KVM_SET_TSC_KHZ_cpu(r1, 0xaea2, 0x1) (async) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x10, 0x0, 0x5}, {0xfe, 0x0, 0x8}]}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000740)={&(0x7f0000000600)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r3}) (async) 3m47.109469777s ago: executing program 1 (id=9668): r0 = socket$netlink(0x10, 0x3, 0x13) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x4800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x44040}], 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000300)=0xfffffffffffffefc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r9, 0x8}, 0x8) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r12, 0x5, &(0x7f00000005c0)='fd', 0x0, r11) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) r13 = fsmount(r12, 0x0, 0x2) fchdir(r13) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./file0\x00', r13, 0x4000, r1}, 0x18) writev(r10, &(0x7f0000000480)=[{&(0x7f0000000000)="baa20f3beee0abbaec415993e6b7bccdf71b0d4386a04273a5c92e7021afda3416dda2c86322f5f1bbef7ca4edf0ba3a19c946e6f209cc1c5d9620ad8a60e432b9a9dff7902c2cf87d119041ce4c99b1eb", 0x51}], 0x1) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0xaaa4}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 3m46.704704022s ago: executing program 1 (id=9675): r0 = getpid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@allocspi={0x104, 0x16, 0x1, 0x70bd27, 0x25dfdbff, {{{@in=@multicast1, @in6=@empty, 0x4e24, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x2f, 0x0, 0xffffffffffffffff}, {@in=@remote, 0x4d2, 0x33}, @in=@remote, {0xfffffffffffffff8, 0x3, 0x3ec, 0x2, 0x7, 0x6, 0xe, 0x8}, {0xe374, 0x0, 0x6, 0xf377}, {0x7f, 0x0, 0x2}, 0x70bd2c, 0x3504, 0x2, 0x2, 0x2}, 0x0, 0x1b1d}, [@lastused={0xc, 0xf, 0xfffffffffffffff8}]}, 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) setreuid(0xee01, 0x0) 3m46.600331082s ago: executing program 47 (id=9675): r0 = getpid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@allocspi={0x104, 0x16, 0x1, 0x70bd27, 0x25dfdbff, {{{@in=@multicast1, @in6=@empty, 0x4e24, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x2f, 0x0, 0xffffffffffffffff}, {@in=@remote, 0x4d2, 0x33}, @in=@remote, {0xfffffffffffffff8, 0x3, 0x3ec, 0x2, 0x7, 0x6, 0xe, 0x8}, {0xe374, 0x0, 0x6, 0xf377}, {0x7f, 0x0, 0x2}, 0x70bd2c, 0x3504, 0x2, 0x2, 0x2}, 0x0, 0x1b1d}, [@lastused={0xc, 0xf, 0xfffffffffffffff8}]}, 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) setreuid(0xee01, 0x0) 2m18.888020113s ago: executing program 2 (id=10323): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000180)={'sit0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r3) sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="571f2cbd7000ffdbcf2516"], 0x20}, 0x1, 0x0, 0x0, 0x4018010}, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="67f040f61d71000000430fc75b000f01c90f01c5c482318c1527000000f341a7c4e27935b1209b7d1e6566470f013c3766b8f6008ee036400f06", 0x3a}], 0x1, 0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7001fedbdf2530000000180001801400020076657468315f746f5f626f6e640000000800060002"], 0x34}, 0x1, 0x0, 0x0, 0x86}, 0x40040) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2300, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r8, 0xc004ae02, &(0x7f0000000080)={0x40000000000000c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m18.670746396s ago: executing program 2 (id=10326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a300200000074000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300e4edf2b708000240000000000e000100636f6e6e6c6162656c0000000900010073797a30"], 0xe8}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000e00)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) fchdir(r1) 2m18.572407551s ago: executing program 2 (id=10328): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x300024) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbf9, {0x0, 0x0, 0x0, r7, {0x10, 0xffe0}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3, 0xd, 0x9, 0x6}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xfff3}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r9, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r8, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c5}, 0x8000) r11 = getpid() sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r11, 0xee01}}}], 0x20}, 0x0) clock_gettime(0x0, &(0x7f00000040c0)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000003f00)=[{{&(0x7f0000000440), 0x6e, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/159, 0x9f}, {&(0x7f0000000580)=""/123, 0x7b}], 0x2, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000680)=""/80, 0x50}], 0x1, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000ac0)=""/108, 0x6c}, {&(0x7f0000000b40)=""/107, 0x6b}, {&(0x7f0000000bc0)=""/65, 0x41}], 0x3, &(0x7f0000000c80)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000cc0), 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000d40)=""/137, 0x89}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/195, 0xc3}, {&(0x7f0000000f40)=""/11, 0xb}], 0x4, &(0x7f0000000fc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000001100)=@abs, 0x6e, &(0x7f0000002580)=[{&(0x7f0000001180)=""/87, 0x57}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/161, 0xa1}, {&(0x7f00000022c0)=""/158, 0x9e}, {&(0x7f0000002380)=""/205, 0xcd}, {&(0x7f0000002480)=""/197, 0xc5}], 0x6, &(0x7f0000002600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000002740), 0x6e, &(0x7f0000003e80)=[{&(0x7f00000027c0)=""/218, 0xda}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/128, 0x80}, {&(0x7f0000003e00)=""/124, 0x7c}], 0x4, &(0x7f0000003ec0)=[@cred={{0x1c}}], 0x20}}], 0x7, 0x12141, &(0x7f0000004100)={r12, r13+10000000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000080)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xa2, &(0x7f0000000180)=""/162, 0x41000, 0x29, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000002c0)=[{0x2, 0x1, 0x8, 0x9}, {0x0, 0x1, 0x7, 0x5}], 0x10, 0x5}, 0x94) 2m18.461345177s ago: executing program 2 (id=10332): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102d1a04e20cd0c02010e890102030109021200010c5440010904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0xc0082, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x300, 0x18, r1}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000380)='./file0/file0/file0\x00', 0x1) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000240)={0x1, 0x4, 0x5, &(0x7f0000000080)={0x11, "c95500000000000000e3f0ff00000000000200"}}) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000000106050000000000000000000700000405000100070000000500010007000000050001000700000005000100070000000500010007000000050001000700000005000100070000000500010007000000050001000700000005000100070000001e7b3f4b733be61b1bccbc391a3989aea5088ef0908d68ceae5be2ecc7f815c58fb90ab1558bfe5cee736417f702920c500d1dea7a7deaa392aa3f3a3b71b92e"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) writev(r0, &(0x7f0000000c40), 0x0) 2m16.861988181s ago: executing program 2 (id=10351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a09000000000000000000020000000900010073797a30000000000900020073797a3000000000740000001c0a01040000000000000000020000020900020073797a30000000000900010073797a3000000000080007400000000240000380080002400000000108000140000000002c000380140001007767300000000000000000000000000014000100767863616e310000000000000000000014000000110001"], 0xc8}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x7f, @none, 0xfffd}, 0xe) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0xfffffffa}}, './file0\x00'}) write$uinput_user_dev(r3, &(0x7f0000000880)={'syz0\x00', {0x6, 0x4, 0x7, 0xffff}, 0x4f, [0x200, 0xdb6, 0x7, 0xd4, 0x0, 0x10, 0x3, 0x5, 0x5, 0x2, 0x1, 0x8, 0x0, 0x101, 0x200, 0xa, 0x9, 0x5, 0x80, 0x8, 0x2, 0x5, 0x320d06b3, 0xb3fb, 0x8, 0x3, 0x1ff, 0x6, 0x10000, 0x9c3, 0x1, 0xab13, 0x0, 0xfffffff7, 0xef6, 0x2, 0x5, 0xa, 0x6, 0x1, 0x8, 0xd1e, 0x93, 0x3, 0x5, 0x8000, 0x80000000, 0x2, 0x9, 0x283517af, 0x3, 0xfff, 0x5, 0x4, 0x0, 0x337, 0xef, 0x1, 0x5, 0x7, 0xb6, 0xc, 0xfffffffd, 0x81], [0xfffffffa, 0x0, 0x6, 0x9, 0x3, 0x0, 0x209230bd, 0x4, 0x8, 0xffffffff, 0x8, 0x1, 0x4, 0x0, 0x9, 0xfff, 0x0, 0x4, 0x6, 0x6, 0x3, 0x8, 0x4b, 0x684, 0x8, 0x3, 0x3, 0xfffffff8, 0x8000, 0xff, 0x954b, 0x10000, 0x100, 0x2, 0xc, 0xf, 0x200, 0x419, 0x6, 0x8001, 0xa, 0x0, 0x8, 0xf214, 0xb89, 0x0, 0x40, 0x6, 0x3, 0x2, 0x8, 0x0, 0x9, 0xa, 0x200, 0x9, 0x304, 0x7fff, 0x40, 0x1, 0x3, 0x7ff, 0xfffffff8, 0x1ff], [0xdae5, 0x376, 0x40, 0x632, 0x9, 0xfef, 0x3, 0xb7ab, 0x70, 0x3, 0xa, 0x0, 0xae, 0x7, 0xffff, 0x17, 0x1, 0x3, 0x6, 0x0, 0x9, 0x9, 0x1, 0x9, 0x4, 0x0, 0x1, 0x3, 0x4, 0x9, 0x8000, 0x7ff, 0xb50, 0x1, 0x100, 0x1, 0x0, 0x0, 0x1, 0xe63, 0x4, 0x6, 0x7, 0x200, 0x4, 0x80000000, 0x80000001, 0x8, 0x18000000, 0x2, 0xcb1, 0x5, 0x9, 0x2, 0xb54, 0x6, 0x100, 0x7c45, 0x5, 0x9400, 0xf7, 0x6, 0x1, 0x2], [0xa65e, 0x7, 0x5, 0x9, 0xfffeffff, 0x8, 0x7fffffff, 0xffffff13, 0xfffffffe, 0x9, 0xf, 0x6, 0x81, 0xf0bb, 0x7fff, 0x10000, 0x8, 0x7fff, 0x80000000, 0x6, 0x4c, 0x9, 0xaa, 0xffffffff, 0x9, 0x8001, 0x80, 0x9, 0x1, 0x1, 0x5ad3, 0x10, 0x1, 0x3c, 0x0, 0x30, 0x9, 0xfffffffc, 0x0, 0x8, 0x4, 0xe1, 0x3d3, 0x80, 0x27a9, 0x1, 0x5, 0x10f8, 0x4000, 0x5, 0x0, 0xcfb, 0x1e0, 0x8, 0x8, 0x7c5, 0x9, 0x9, 0x0, 0x8000, 0x3, 0x0, 0x5, 0x54f2]}, 0x45c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) 2m16.246522684s ago: executing program 2 (id=10360): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r1 = userfaultfd(0x80001) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc000905850200"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x12d}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9b090b, 0x2, '\x00', @value=0x1}}) ppoll(&(0x7f0000000300)=[{r3, 0x8018}, {r0, 0xa200}], 0x20000000000000b7, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0xd, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r6, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f00000002c0)=0xd9, 0x4) read(r6, &(0x7f0000000300)=""/4067, 0xffd0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r7, 0x10c, 0x8, &(0x7f0000000000), 0x4) syz_open_procfs(0x0, &(0x7f0000000f80)='timerslack_ns\x00') socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc00000000"], 0x50) 2m16.070696062s ago: executing program 48 (id=10360): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r1 = userfaultfd(0x80001) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc000905850200"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x12d}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9b090b, 0x2, '\x00', @value=0x1}}) ppoll(&(0x7f0000000300)=[{r3, 0x8018}, {r0, 0xa200}], 0x20000000000000b7, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0xd, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r6, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f00000002c0)=0xd9, 0x4) read(r6, &(0x7f0000000300)=""/4067, 0xffd0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r7, 0x10c, 0x8, &(0x7f0000000000), 0x4) syz_open_procfs(0x0, &(0x7f0000000f80)='timerslack_ns\x00') socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc00000000"], 0x50) 9.428389675s ago: executing program 7 (id=11443): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 9.244875751s ago: executing program 7 (id=11445): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller1\x00'}) close(r0) recvmsg$can_raw(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000900)=""/110, 0x6e}], 0x1}, 0x40000040) 9.146907972s ago: executing program 7 (id=11446): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000016, 0x12, r0, 0xb0b77000) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffff89ffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000000000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000020004400050000000000000000000000000000000000000004d23c0000000a000000ff"], 0xfc}}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) mq_open(&(0x7f0000000140)='&\x00', 0x1, 0x28, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x10001) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000280)=0x80000001, 0x4) (async) setsockopt$inet_int(r2, 0x0, 0x22, &(0x7f0000000200)=0xba, 0x4) socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) r3 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) r4 = socket$kcm(0xa, 0x1, 0x106) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$kcm(r5, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="d453628553c77a6258af4edb38c7eb5695702e18e28d24fd03d5a89c21803787e0fe608293ae3283465698e3e2147ec75bac5db926854765d282dd76265270601a93e998718d07a204c96ca7ac0212e9478f7fa5c4b3d38ace7518fa94576e78f65fb8d9d0ee3ee053aab8b4492bac591fee9abb9e", 0x75}, {&(0x7f0000001840)="2fd8eb9dfb657e4e4a99a197176e0da48f0f45aed6ff73569d1b4ca646318195b8e882", 0x23}, {&(0x7f0000001880)="97eb45e9cbf38d34189ffe29a1ffeedae4974b06b3fe9a90cad2ae61c555cbee7b5c814c2c644b13b3bf4c03090094ee19e260d0e2738ba89cb2f56219728e48dcc27943ec3f414ab24cbcc19a9a67dd1e6bb460accf006d99a937b8747f27cff5883e0d4ad9453bb7d9b04564a4a4184a231e38876ede41cb6ad52456", 0x7d}, {&(0x7f0000001900)="ca2f5fe68623677b50af17829ad3374f272a8a505b2c7e66e47761a414afa4756d9ff0551c225beff20327019c4f7e7dbc7209e7e918f6ecdc8f202fe34ddeb0a8ed3bd74db8343518e83609f4ed00634c404e8c68a2b0ba48c4e8b2c385079b5ca9d485ebcf0a3f6ab7c0d5417343a9a7535b4e90694abb4ed908de944ce93a179c5d8a6b388f1a37d1ec843f8be435848f4a23af0923b76c44fa1232be099c660d3ac252c903bc2116536db51a8d1b74d389320a29c004fa3a8922f2b25b", 0xbf}, {&(0x7f00000019c0)="9897fb3cd8a948ef4864e329fd59e69684635e74901eca6a6a91517dfff3e6f553679d3363468c5658c28982cf4574acb57cc4325bc8bb2abe24443805c187f72a870e8b5c5f00971f153dafccc8558a05f05aae22bffaac46eef8d2cb4632fb2b6a667e21ab5d65624f601b829e589bb35b8a5691ab4f201840271fbef2f291c66b6d3cdf714e353f6e0b1c14c9063e5d69f0", 0x93}, {&(0x7f0000001a80)}], 0x7}, 0x50) (async) bind$unix(r5, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @dev, 0x4}, 0x80, 0x0}, 0xe07e872424db6f0e) 8.972212593s ago: executing program 7 (id=11450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000004000a0007"], 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000180)=ANY=[], 0x12bc}, 0x1, 0x0, 0x0, 0x60000021}, 0x20000804) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x26e40, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) write$binfmt_misc(r4, &(0x7f0000000280)="1396154e4206b2db1f6127f64b1a8f263120a603eac207d44ade0234176fae84a99ccb7e6893e66c78f46b17298c5a4a46768c6e96a9717d827336bb61d64d756b9d4f1218986f97e682800ecd51abbf5f6c82b51a6104050745beca734915d9588736ba1e7208a5cb88084ff6b98429dd7a1fbc56b871e720fbddef9cee3689e046838979c5b861951265f808ed71501f2dcbc1e44b20b5273fac640120d58fabe1ac2e2ffae06fc2fe098b1ec1bdd2928da14e5abee4ce693b3b87d46227d57f69526b9bd2d9e2dc67168b11616f015c819cf8f8691409eb81b4e3d48b34c37f", 0xe1) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) 8.790095297s ago: executing program 7 (id=11452): r0 = userfaultfd(0x80801) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x6, 0x200, 0x400, 0x429}}) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000180), 0x2f0d0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x0) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x16f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x536f}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@hopopts={{0x28, 0x29, 0x32, {0x4, 0x1, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0xd, 0xfff}}]}}}], 0x28}}], 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@can_delroute={0x24, 0x19, 0x11, 0x70bd27, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}]}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.709485613s ago: executing program 7 (id=11454): clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x602100, 0x0) fadvise64(r2, 0x7, 0x9, 0x0) pselect6(0x40, &(0x7f0000000140)={0x800, 0x100000001, 0x1, 0xfff, 0x0, 0x8, 0x7fffffff, 0x8}, &(0x7f0000000180)={0x3ff, 0x5, 0x1, 0x7fff, 0x80000000, 0x2, 0x2, 0x2}, &(0x7f00000001c0)={0xd42, 0x401, 0x9, 0x3, 0x8, 0x1, 0x1, 0x3}, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0xffffffffffff0000]}, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) r4 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)=0x2b1b1983) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x30, r5, 0x1, 0x70bd2c, 0x1200, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x300, 0x0, 0x1, {0x8}}]}]}, 0x30}}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f0000000340)='./file0\x00', 0x1) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3.051602237s ago: executing program 4 (id=11515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELRULE={0x34, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) 2.979029461s ago: executing program 4 (id=11519): r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000037ea40137068327a31a71cfbd657aedfb6a505d477d505ec97854700"/44], 0x830600) r1 = creat(&(0x7f00000001c0)='./file0/file0\x00', 0xecf86c37d53049e8) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e42200000000d77a9ec024cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket(0x3, 0x1, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x1, 0x0, @thr={&(0x7f0000000b00)="44f42561ede95daf910736d78bd153d0d06379eeba56aa04380d94642f5f3de01fc240f9f66a725ea1e59c76d6bb47fd744dea659bac116fd2b401c73ea01e01fec6db39d2edf8fa878883abced10b78408d67b80fede9fb7d0c85d77c3e6ce181b17741bb24b564204f9b96546d24abc074951ed6d68bfefe557902923902f7a317dca0460f2307b1f20e854cfd3a5b8881452b6fad2121c8f55eee7b68a2aa408f2fee9a8791fa9243d366bdac3094b9bd46de37f832860263fc45ca62052989228ed1a7a2b466a1cfb7075217bc", &(0x7f0000000d00)="9eba7c28e95fae25117f21e9fd023773cd4a71573e1e4ad6bd8cb6d79c6e239e87a884a54794325ada75a9a4cbdf22674d63f591ea879f7b10f1790b54d28553485c3cbf3cf412fd3b74b95d3738f66fdcf43b03800d865f6c3eb8c59615a28cedc01a89909d49e47168d6bea4a0c9dbdbd6c296a5a0b3f4896c2152cc2430a97fa513d19d69f12c529a5e8bb8e01de0d8a393e9cbb92f213db5c8162050d22ce45d40657caa99af2b3990b853c8bc5d96fb4d2c5c8280c6726eba5b6db275f78475305612bf0617aa802c38e3f6"}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) unshare(0x2040400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r5, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000200)={0x5, 0x4, 0x81}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000500000000000000000000000054e2e741a546b0e77b45864149bc3a874b4341b6bcfa27b957b264532528efcaf8042fd75366e5cb5c53b04befca324db130085b804d00e03c"], 0x50) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r11 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r11, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x7fff, 0xffffffffffffffff, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x8, 0x0, 0x4945, 0x0, 0xfffffefffffffffc, 0x0, 0xcd, 0x1, 0x4, 0x0, 0x0, 0x0, 0x5, 0x1ffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x3, 0x8000002000000000, 0x2, 0x10000, 0x800, 0x4, 0x10092c, 0x7fffffff, 0x7f, 0x0, 0x0, 0x4, 0x1, 0x0, 0x3, 0x4, 0x1, 0x6, 0x0, 0x0, 0x800, 0x1772cf50, 0x0, 0x0, 0x7ffffffffc, 0x205, 0x0, 0x1000000000000, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffff, 0x200000, 0x1, 0xfffffffffffffffd, 0x4a, 0x0, 0x3000000000000, 0xfffffffffffffffd, 0x2, 0xdd60000000000000, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x48, 0x0, 0x8, 0x0, 0x2, 0x2001, 0x0, 0x0, 0x5, 0x40, 0x0, 0x40000000000, 0x801, 0x2000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2000000000000002, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x6, 0x0, 0x1000000003, 0x10000000010, 0x4000100000001]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000928700000000000000002b000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x79c9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 2.774614363s ago: executing program 4 (id=11521): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000240)={0x1, 0x0, {0x5, 0x5, 0x201b, 0x0, 0x4, 0x7, 0x1, 0x5}}) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0xed, 0x1, 0x20a, 0x7fff, 0xc9744761, 0x0, 0x401, 0x80000000, r4}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r5, 0x7}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000007a2c700000000000000009c0001000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x94) 2.698841875s ago: executing program 4 (id=11523): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x80, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0) close(0x3) r3 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r4, 0x21, 0x0, 0x0) (async) pidfd_send_signal(r4, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r4, 0x0, 0x40000004, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r5, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000000c0)="0f78c70f001b66b9800000c00f326635000400000f30baf80c66b8d294a98266efbafc0cb8f968efba4200b000ee990f02ab01002e0f005bc6660fc7b10a00f30fe6db", 0x43}], 0x1, 0x18, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000000c0)="0f78c70f001b66b9800000c00f326635000400000f30baf80c66b8d294a98266efbafc0cb8f968efba4200b000ee990f02ab01002e0f005bc6660fc7b10a00f30fe6db", 0x43}], 0x1, 0x18, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.481981317s ago: executing program 4 (id=11524): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sigaltstack(0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r0, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0xfeca, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x44400, 0x8) fcntl$notify(r6, 0x402, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) 2.351933558s ago: executing program 4 (id=11526): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x40015b0b, &(0x7f0000000040)) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='ceph\x00', &(0x7f00000001c0)='c:::\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0xa) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') pread64(r4, &(0x7f0000000080)=""/237, 0xed, 0x5) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000000)=0x8) 1.615115244s ago: executing program 0 (id=11533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001600), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r4, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x3}, {0x1, 0x19}, {0x3, 0x2}, {0x5, 0x6}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x3, 0x2}, {0x3, 0x2}, {0x1}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000065}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004861}, 0x4008004) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 1.549823588s ago: executing program 0 (id=11534): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000010c0)=@urb_type_iso={0x0, {0x1, 0x1}, 0x149b, 0x0, 0x0, 0x0, 0x5, 0x60000, 0x6, 0x802, 0x6, 0x0, [{0xd7, 0x10, 0x3ff}, {0xfffff704, 0x3, 0x7}, {0x6, 0x236f9b63, 0xfffff3f0}, {0x400, 0x5, 0x7}, {0x2, 0x7, 0x3}, {0xfffffffd, 0x6, 0x80}]}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r1, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x1}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000140)=0x8) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0xa, 0x1}, 0x5, 0x60, &(0x7f0000000000)="3e28210b31637da9da14fb0e300eff6d3f1213fe0af8e1ed52c8773ee989141d06b46fe4d8bf28bc214a952ff5b33bc3a34ce71568da9f26907ec81add7f1b9649e9744e29093e408806b0bd11679178b669a7cf28e6dad1136236f34c67aa40c1b9fbea3ad8ae3929d106f84463c4b379c9ed9ad95bd9b2202af299e018af07efbb8112371c1cbf75edcb94eb36979c8db72e56cf0655ed3b163c92c144079f135c3bb8ac907f75e2ad0bea473b948e55484b9b9823479c", 0xb8, 0xfffffffc, 0x4, 0x71, 0x2, 0x81, &(0x7f00000000c0)="264c64c07fb61039563f3bf0c85c717ccd3b4b80616ca59bfcce29c4db77825261ca33252b37b1b5760764ff626d145ff20662dd57d92d57718502a884ef7e4cbbb9", [{0x6424, 0x5dc, 0x1}, {0x6, 0x3, 0x100}, {0x9, 0x5, 0x6}, {0x0, 0x9, 0xca}, {0x9, 0x8001, 0x7}, {0x10000, 0x3, 0x200}, {0x2, 0x1, 0xfffffffc}, {0x6, 0x8000}, {0xdfb, 0x81, 0x4}, {0x6, 0x8, 0xfffffffe}, {0x3, 0xd9, 0x4}, {0x3, 0x6, 0x8}, {0x1dd, 0x7, 0x1}, {0xffffffc0, 0x7d10, 0x2}, {0xb, 0x6, 0x2}, {0xe4a9, 0x5}, {0x471, 0x4, 0x4c}, {0x9, 0xdebc, 0x3ff}, {0x3, 0x9, 0x80}, {0x4, 0x7, 0x6}, {0x7c41, 0x2, 0x3}, {0xffff, 0x2, 0x8001}, {0x4, 0x6843e47a, 0xce}, {0x3ff, 0x9, 0x4d}, {0x7, 0x990f, 0x9}, {0x80, 0xb, 0xffff}, {0x9, 0x6e, 0x8}, {0xff, 0x5, 0x5}, {0xc24c, 0x7, 0xffffffff}, {0x5, 0xc61b, 0x2}, {0x2, 0xac7, 0x800}, {0x81, 0x4, 0x3}, {0x0, 0x9, 0x3a}, {0x1, 0x8001, 0x6}, {0x9, 0x1000, 0x8}, {0x7, 0xf}, {0x10, 0x6, 0x7}, {0xccf, 0x9, 0x1}, {0x5, 0x6, 0x1}, {0x0, 0x75002449, 0x10001}, {0x4bf, 0x179, 0xc}, {0x0, 0x7, 0x7}, {0x10, 0xb5c, 0x1c}, {0x2, 0x9, 0x2}, {0x1, 0x2, 0x2}, {0x0, 0x6}, {0x0, 0x6, 0x9}, {0x0, 0x2, 0x22e}, {0x80000000, 0x2, 0x3}, {0x8000, 0x2, 0x1}, {0x551d, 0xb256}, {0x1, 0x2, 0xc}, {0xffffdf22, 0xb, 0xd}, {0x2, 0x80000000, 0x10001}, {0x0, 0x9}, {0x0, 0x3}, {0xfff, 0x5}, {0x8, 0x80000000, 0x80c}, {0x80000000, 0x5c6, 0x8}, {0x7, 0x8f, 0xf1}, {0x9, 0x200, 0xa7}, {0x8, 0x5, 0x609}, {0x93, 0x9, 0x1}, {0xd6ce, 0x3, 0x2}, {0x3, 0x6, 0x8422}, {0xfff, 0x3c6a, 0x8}, {0xfffffffe, 0x7, 0x3}, {0x5, 0x8, 0xe361}, {0x80, 0xe, 0xfbd}, {0x3, 0x4, 0x10000}, {0xfffffffb, 0x6ca, 0x4}, {0x0, 0x1, 0x9}, {0x6, 0x3, 0x1}, {0x0, 0x75f5, 0x5}, {0x800, 0x4, 0x100}, {0x965, 0xffffffff, 0x5}, {0x6, 0x6, 0x4}, {0x3, 0x401, 0x6}, {0x5, 0x9, 0x1}, {0x7, 0x81, 0x9}, {0x497, 0x7b149d00, 0x3}, {0x5, 0x7, 0x10001}, {0xfffffffa, 0x0, 0x6}, {0x8, 0x9, 0xfffffffe}, {0x9, 0x1, 0x8}, {0x8, 0x7, 0xe}, {0x800, 0xc7, 0x9}, {0x8, 0x9, 0xf}, {0x101, 0x9, 0x8}, {0x7de, 0x0, 0x4e}, {0x4, 0xf, 0x8}, {0xb7ae, 0x1, 0x5}, {0x101, 0x7, 0x7}, {0x5, 0x4, 0x80}, {0x0, 0x7a3, 0x6}, {0x2, 0x8, 0x6}, {0xc2a, 0x6, 0xffff}, {0xfffffff8, 0x2, 0x3}, {0x8, 0x3, 0x1}, {0x7b4c, 0x3, 0x4}, {0x800, 0xffffffff, 0x3ff}, {0xb58e, 0x7, 0x7}, {0x9, 0x5f1, 0x81}, {0x1, 0x101, 0x2}, {0x4, 0x6, 0x2}, {0x9, 0x8, 0x80000001}, {0xa, 0x7, 0xaa}, {0x4, 0x3, 0x5}, {0xd, 0xa, 0x960a}, {0x4, 0x18, 0x200}, {0x7ff, 0xa, 0xec}, {0x7f, 0x48000000}, {0x3, 0x8, 0x9}]}) 1.484885279s ago: executing program 0 (id=11536): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r2, 0x48212b8952c3aff5, 0x70bd24, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f0000000200)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000f00)=[@in_dx={0x69, 0x20, {0x5e82, 0x4}}, @wrmsr={0x65, 0x20, {0xf6, 0x1}}, @rdmsr={0x66, 0x18, {0x91f}}, @rdmsr={0x66, 0x18, {0x90d}}, @rdmsr={0x66, 0x18, {0x9bf}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro32=0x440c, 0xe, 0x5, 0x6}}, @in_dx={0x69, 0x20, {0xf22b, 0x7}}, @code={0xa, 0x68, {"66b805008ec0658883199699b7660f38210d00000000f0838a0f0000007566ba4000b800080000efb805000000b9060000000f01c13e400f1cb813830000b805000000b90d0000000f01c166ba4100b8337b0000ef0f07"}}, @set_irq_handler={0xc8, 0x20, {0x2e, 0x2}}], 0x168}) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 423.131568ms ago: executing program 8 (id=11543): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') socket$alg(0x26, 0x5, 0x0) (async) read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) (async) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x100000001) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) (async) unshare(0x6e020000) (async) r2 = fsopen(&(0x7f0000000300)='cpuset\x00', 0x1) fsmount(r2, 0x1, 0x73) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x90) 422.751175ms ago: executing program 0 (id=11544): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r3, 0x2000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x8, 0xe6a225d, 0x0, 0x3, 0x0, 0xb, 0x0, 0x0, 0x10, 0x30d9e6d0}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0xb0, 0x0, 0x6, [{{0x1, 0x0, 0xd, 0x8, 0x5, 0xb70, {0x6, 0x3ff, 0x81, 0x8, 0x0, 0x100, 0x9, 0x6, 0x87fb, 0x2000, 0x40, r6, r7, 0x80000000, 0x9}}, {0x5, 0x81, 0x3, 0x6, '.(^'}}]}, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@ipv4, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private1}}, &(0x7f0000000340)=0xe8) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xa00800, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}], [{@subj_role={'subj_role', 0x3d, 'netdevsim'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@fowner_lt={'fowner<', r6}}, {@fowner_eq={'fowner', 0x3d, r8}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@hash}, {@seclabel}]}}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000b40)={@val={0x1c, 0xf5}, @void, @mpls={[{}], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x1e5, 0x3a, 0x0, @mcast2, @private1, {[@fragment={0x0, 0x0, 0x81, 0x0, 0x0, 0x16, 0x68}, @routing={0x84, 0x12, 0x1, 0x8d, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x5}, @private2, @private0, @dev={0xfe, 0x80, '\x00', 0x1f}, @rand_addr=' \x01\x00', @private1, @mcast2]}, @srh={0x6c, 0x6, 0x4, 0x3, 0x40, 0x0, 0x3, [@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @private1]}, @srh={0x64, 0xe, 0x4, 0x7, 0xf, 0x10, 0xa, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @mcast2, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x8, 0x7, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0xd, 0xc824, [0x7, 0x62]}}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0xffffffff}, @enc_lim, @hao={0xc9, 0x10, @mcast1}]}, @srh={0x87, 0x2, 0x4, 0x1, 0xff, 0x40, 0x5, [@loopback]}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [{0x0, 0x1, "b0dcc4a3616748a199e53d"}]}}}}}, 0x215) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001bc0), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001e00)={0x3c, r9, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xffffffff}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c}, 0x0) 346.559824ms ago: executing program 8 (id=11545): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x163680) (async) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x163680) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xb, 0x4005, 0x800}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r1, 0x100000000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') write$qrtrtun(r4, &(0x7f0000000180)="2bdbca4b", 0x4) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000140)=@arm64_sys={0x603000000013e1c5, &(0x7f0000000100)=0x6}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) (async) close(r0) setsockopt$inet6_int(r7, 0x29, 0x21, 0x0, 0x5b) sendmmsg$inet(r6, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000007240)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}}], 0x1, 0x4000000) close_range(r4, r4, 0x0) (async) close_range(r4, r4, 0x0) sendto$inet(r6, &(0x7f00000025c0)='i', 0x1, 0xc000, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_udp(0xa, 0x2, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a0080000000000400"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffed9, 0x0, 0x0, 0x10, 0x20000}, 0x94) sendmsg$inet6(r8, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) sendmsg$inet(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="a9030000000012000000", 0xfff7}], 0x1}, 0x4000841) (async) sendmsg$inet(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="a9030000000012000000", 0xfff7}], 0x1}, 0x4000841) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x4, 0x76, 0xe5, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x9, 0x94], 0x100000, 0x2018d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 216.819783ms ago: executing program 0 (id=11546): r0 = socket$inet_udp(0x2, 0x2, 0x0) setresuid(0x0, 0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0x11, 0x148, 0x0, 0x0, 0x3c8, 0x2a8, 0x2a8, 0x3c8, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @broadcast, 0x0, 0xff000000, 'tunl0\x00', 'team0\x00', {0xff}, {}, 0x6, 0x1, 0x18}, 0x0, 0x2f0, 0x338, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x2, [0x4e24, 0x4e23, 0x4e20, 0x4e23, 0x4e20, 0x4e21, 0x4e21, 0x4e21, 0x4e25, 0x4e22, 0x4e21, 0x2, 0x4e20, 0x4e21, 0x4e23], [0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x7fffffffffffffff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x240048c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001800c000280050001e69c7512f6dc4c1ca6198c6272248ef9000000000014000180080001007f000001080002000a0101000000084000000008080007"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x800, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002380)={{{@in6=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000002480)=0xe8) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x115048, &(0x7f00000024c0)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}, {@max_read={'max_read', 0x3d, 0x8000}}, {}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x10000}}], [{@obj_role={'obj_role', 0x3d, '$%\''}}, {@permit_directio}, {@fowner_gt={'fowner>', r6}}]}}) ioctl$KVM_SET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea2, 0xb2) 116.169098ms ago: executing program 8 (id=11547): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) r1 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) read$ptp(r1, &(0x7f0000000280)=""/108, 0x6c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) 112.972281ms ago: executing program 0 (id=11548): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$dsp(r1, &(0x7f0000000100)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(r0, &(0x7f0000000140)='net/ip_mr_cache\x00') 111.019401ms ago: executing program 8 (id=11549): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x5}, {0x10, 0x2, 0x0, 0x0, 0x8000, 0x1402}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x24044092) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {}, {0xc, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x7}, 0x8) 538.541µs ago: executing program 8 (id=11550): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f00000025c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, 0xb7, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000100)=ANY=[@ANYBLOB="7472618037a96c4a0455f12ce0d56500"/28]) 0s ago: executing program 8 (id=11551): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fcntl$addseals(r0, 0x409, 0xd) readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) mknodat(r0, &(0x7f0000000080)='./mnt\x00', 0xc000, 0x10001) kernel console output (not intermixed with test programs): bind } for pid=13097 comm="syz.0.10800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1027.102664][T13101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10800'. [ 1027.163123][ T42] audit: type=1400 audit(6001574399.372:53930): avc: denied { read } for pid=13102 comm="syz.0.10801" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1027.187084][ T61] Bluetooth: Error in BCSP hdr checksum [ 1027.282039][T12719] usb 13-1: usb_control_msg returned -32 [ 1027.284349][T12719] usbtmc 13-1:16.0: can't read capabilities [ 1027.453918][ T61] Bluetooth: Error in BCSP hdr checksum [ 1027.721349][T17523] Bluetooth: Error in BCSP hdr checksum [ 1027.989303][T17523] Bluetooth: Error in BCSP hdr checksum [ 1028.259589][T17523] Bluetooth: Error in BCSP hdr checksum [ 1028.532806][T13417] Bluetooth: Error in BCSP hdr checksum [ 1028.661306][T13125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13125 comm=syz.0.10806 [ 1028.681266][T13124] sock: sock_set_timeout: `syz.0.10806' (pid 13124) tries to set negative timeout [ 1028.799865][T17520] Bluetooth: Error in BCSP hdr checksum [ 1028.815854][T13128] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1029.073565][T17520] Bluetooth: Error in BCSP hdr checksum [ 1029.316570][T13137] lo speed is unknown, defaulting to 1000 [ 1029.320751][T13137] xfrm0 speed is unknown, defaulting to 1000 [ 1029.346124][T17523] Bluetooth: Error in BCSP hdr checksum [ 1029.355118][T13065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1029.407810][ T857] usb 13-1: USB disconnect, device number 30 [ 1029.618639][T17523] Bluetooth: Error in BCSP hdr checksum [ 1029.891919][T17523] Bluetooth: Error in BCSP hdr checksum [ 1029.914458][T13148] kvm: kvm [13147]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1029.916755][T13154] support for cryptoloop has been removed. Use dm-crypt instead. [ 1030.109801][T13178] program syz.7.10820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1030.167789][T13417] Bluetooth: Error in BCSP hdr checksum [ 1030.259262][T13190] netlink: 'syz.0.10823': attribute type 5 has an invalid length. [ 1030.299363][T13195] __nla_validate_parse: 33 callbacks suppressed [ 1030.299382][T13195] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.10824'. [ 1030.443342][T17523] Bluetooth: Error in BCSP hdr checksum [ 1030.445578][T13200] netlink: 236 bytes leftover after parsing attributes in process `syz.7.10826'. [ 1030.450587][T13200] netlink: 236 bytes leftover after parsing attributes in process `syz.7.10826'. [ 1030.716823][T17520] Bluetooth: Error in BCSP hdr checksum [ 1030.838384][T13220] netlink: 868 bytes leftover after parsing attributes in process `syz.8.10833'. [ 1030.856250][T13226] netlink: 868 bytes leftover after parsing attributes in process `syz.8.10833'. [ 1030.992087][T13417] Bluetooth: Error in BCSP hdr checksum [ 1031.231409][T13235] random: crng reseeded on system resumption [ 1031.270252][T13417] Bluetooth: Error in BCSP hdr checksum [ 1031.546531][T17520] Bluetooth: Error in BCSP hdr checksum [ 1031.763065][T13245] netlink: 'syz.7.10842': attribute type 1 has an invalid length. [ 1031.783606][T13245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1031.825230][T17520] Bluetooth: Error in BCSP hdr checksum [ 1032.099271][T17520] Bluetooth: Error in BCSP hdr checksum [ 1032.377486][T13417] Bluetooth: Error in BCSP hdr checksum [ 1032.655467][T17523] Bluetooth: Error in BCSP hdr checksum [ 1032.933851][T32542] Bluetooth: Error in BCSP hdr checksum [ 1033.211874][T17520] Bluetooth: Error in BCSP hdr checksum [ 1033.490834][T17520] Bluetooth: Error in BCSP hdr checksum [ 1033.769594][T17514] Bluetooth: Error in BCSP hdr checksum [ 1034.048532][T13417] Bluetooth: Error in BCSP hdr checksum [ 1034.329402][T17523] Bluetooth: Error in BCSP hdr checksum [ 1034.607786][T17520] Bluetooth: Error in BCSP hdr checksum [ 1034.887401][T17520] Bluetooth: Error in BCSP hdr checksum [ 1035.167242][T17514] Bluetooth: Error in BCSP hdr checksum [ 1035.465625][T13417] Bluetooth: Error in BCSP hdr checksum [ 1035.739406][T17514] Bluetooth: Error in BCSP hdr checksum [ 1036.018458][T32542] Bluetooth: Error in BCSP hdr checksum [ 1036.298916][T13417] Bluetooth: Error in BCSP hdr checksum [ 1036.578801][T17514] Bluetooth: Error in BCSP hdr checksum [ 1036.859621][T17520] Bluetooth: Error in BCSP hdr checksum [ 1037.139982][T17514] Bluetooth: Error in BCSP hdr checksum [ 1037.420790][T32542] Bluetooth: Error in BCSP hdr checksum [ 1037.702078][T17520] Bluetooth: Error in BCSP hdr checksum [ 1037.982985][T17514] Bluetooth: Error in BCSP hdr checksum [ 1038.263990][T13417] Bluetooth: Error in BCSP hdr checksum [ 1038.544700][T13417] Bluetooth: Error in BCSP hdr checksum [ 1038.825823][T17514] Bluetooth: Error in BCSP hdr checksum [ 1039.106447][T17520] Bluetooth: Error in BCSP hdr checksum [ 1039.387495][T17523] Bluetooth: Error in BCSP hdr checksum [ 1039.669976][T17520] Bluetooth: Error in BCSP hdr checksum [ 1039.950014][T17520] Bluetooth: Error in BCSP hdr checksum [ 1040.231354][ T61] Bluetooth: Error in BCSP hdr checksum [ 1040.363752][ T42] kauditd_printk_skb: 151 callbacks suppressed [ 1040.363775][ T42] audit: type=1400 audit(6001574411.747:54082): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1040.381188][ T42] audit: type=1400 audit(6001574411.747:54083): avc: denied { sendto } for pid=23 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1040.512955][T17520] Bluetooth: Error in BCSP hdr checksum [ 1040.793997][T17523] Bluetooth: Error in BCSP hdr checksum [ 1041.075479][T17523] Bluetooth: Error in BCSP hdr checksum [ 1041.356878][T13417] Bluetooth: Error in BCSP hdr checksum [ 1041.638943][T17520] Bluetooth: Error in BCSP hdr checksum [ 1041.925032][T17523] Bluetooth: Error in BCSP hdr checksum [ 1042.201384][T17514] Bluetooth: Error in BCSP hdr checksum [ 1042.482444][T13417] Bluetooth: Error in BCSP hdr checksum [ 1042.764068][T17514] Bluetooth: Error in BCSP hdr checksum [ 1043.046894][T13417] Bluetooth: Error in BCSP hdr checksum [ 1043.328091][T17520] Bluetooth: Error in BCSP hdr checksum [ 1043.608740][T17520] Bluetooth: Error in BCSP hdr checksum [ 1043.890219][T13417] Bluetooth: Error in BCSP hdr checksum [ 1044.172689][ T61] Bluetooth: Error in BCSP hdr checksum [ 1044.453338][T17523] Bluetooth: Error in BCSP hdr checksum [ 1044.735463][T13417] Bluetooth: Error in BCSP hdr checksum [ 1045.016808][ T61] Bluetooth: Error in BCSP hdr checksum [ 1045.299496][ T61] Bluetooth: Error in BCSP hdr checksum [ 1045.580229][T17520] Bluetooth: Error in BCSP hdr checksum [ 1045.861798][T17514] Bluetooth: Error in BCSP hdr checksum [ 1046.143488][T17514] Bluetooth: Error in BCSP hdr checksum [ 1046.426598][T17520] Bluetooth: Error in BCSP hdr checksum [ 1046.707248][ T61] Bluetooth: Error in BCSP hdr checksum [ 1046.988854][ T61] Bluetooth: Error in BCSP hdr checksum [ 1047.270601][T13417] Bluetooth: Error in BCSP hdr checksum [ 1047.552185][T17514] Bluetooth: Error in BCSP hdr checksum [ 1047.833557][T17514] Bluetooth: Error in BCSP hdr checksum [ 1048.115232][T17514] Bluetooth: Error in BCSP hdr checksum [ 1048.397319][T17514] Bluetooth: Error in BCSP hdr checksum [ 1048.681221][T17514] Bluetooth: Error in BCSP hdr checksum [ 1048.960506][T17523] Bluetooth: Error in BCSP hdr checksum [ 1049.242313][T17523] Bluetooth: Error in BCSP hdr checksum [ 1049.524119][T17523] Bluetooth: Error in BCSP hdr checksum [ 1049.806368][T17523] Bluetooth: Error in BCSP hdr checksum [ 1050.087433][T17523] Bluetooth: Error in BCSP hdr checksum [ 1050.369402][T17523] Bluetooth: Error in BCSP hdr checksum [ 1050.652187][T17514] Bluetooth: Error in BCSP hdr checksum [ 1050.932945][T13417] Bluetooth: Error in BCSP hdr checksum [ 1051.215224][T17523] Bluetooth: Error in BCSP hdr checksum [ 1051.496899][T17514] Bluetooth: Error in BCSP hdr checksum [ 1051.759927][ T42] audit: type=1400 audit(6001574422.272:54084): avc: denied { create } for pid=13248 comm="syz.8.10843" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1051.760552][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10843'. [ 1051.769197][T13256] vxfs: WRONG superblock magic 00000000 at 1 [ 1051.769478][T13256] vxfs: WRONG superblock magic 00000000 at 8 [ 1051.769496][T13256] vxfs: can't find superblock. [ 1051.770422][ T42] audit: type=1400 audit(6001574422.281:54085): avc: denied { mounton } for pid=13253 comm="syz.7.10846" path="/84/file0" dev="tmpfs" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1051.778226][T13256] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1051.778323][ T61] Bluetooth: Error in BCSP hdr checksum [ 1051.779478][ T42] audit: type=1400 audit(6001574422.281:54086): avc: denied { mounton } for pid=13253 comm="syz.7.10846" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1051.782389][T13256] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1051.792232][ T42] audit: type=1400 audit(6001574422.281:54087): avc: denied { read } for pid=13250 comm="syz.4.10844" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1051.796288][T13256] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 1051.798248][ T42] audit: type=1400 audit(6001574422.281:54088): avc: denied { open } for pid=13250 comm="syz.4.10844" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1051.809159][T13256] UDF-fs: Scanning with blocksize 512 failed [ 1051.817694][ T42] audit: type=1400 audit(6001574422.281:54089): avc: denied { ioctl } for pid=13250 comm="syz.4.10844" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64bd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1051.827882][T13256] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1051.839866][ T42] audit: type=1400 audit(6001574422.346:54090): avc: denied { write } for pid=13253 comm="syz.7.10846" name="anycast6" dev="proc" ino=4026533100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1051.849929][T13256] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1051.871325][T13256] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 1051.874715][T13256] UDF-fs: Scanning with blocksize 1024 failed [ 1051.880399][T13256] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1051.883682][ T42] audit: type=1326 audit(6001574422.383:54091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13264 comm="syz.8.10848" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb63ab9de59 code=0x0 [ 1051.885044][T13256] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1051.899732][T13256] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 1051.902875][ T42] audit: type=1400 audit(6001574422.401:54092): avc: denied { setopt } for pid=13266 comm="syz.0.10847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1051.904026][T13256] UDF-fs: Scanning with blocksize 2048 failed [ 1051.911524][ T42] audit: type=1400 audit(6001574422.401:54093): avc: denied { bind } for pid=13266 comm="syz.0.10847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1051.915185][T13263] lo speed is unknown, defaulting to 1000 [ 1051.922227][T13256] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1051.930164][T13256] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1051.934384][T13256] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 1051.935096][T13263] xfrm0 speed is unknown, defaulting to 1000 [ 1051.937439][T13256] UDF-fs: Scanning with blocksize 4096 failed [ 1051.937454][T13256] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 1051.967805][T13272] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 1052.009522][T13280] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10851'. [ 1052.052166][T13277] syzkaller1: entered promiscuous mode [ 1052.056027][T13277] syzkaller1: entered allmulticast mode [ 1052.059969][T17523] Bluetooth: Error in BCSP hdr checksum [ 1052.078743][T13289] netlink: 'syz.0.10854': attribute type 13 has an invalid length. [ 1052.143562][T13289] syzkaller0: entered promiscuous mode [ 1052.146814][T13289] syzkaller0: entered allmulticast mode [ 1052.342612][T13417] Bluetooth: Error in BCSP hdr checksum [ 1052.381783][T13297] tipc: Enabled bearer , priority 0 [ 1052.386597][T13297] tipc: Disabling bearer [ 1052.596345][T13304] loop2: detected capacity change from 0 to 7 [ 1052.600551][T13304] Dev loop2: unable to read RDB block 7 [ 1052.604532][T13304] loop2: AHDI p1 p2 p3 [ 1052.606344][T13304] loop2: partition table partially beyond EOD, truncated [ 1052.609874][T13304] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1052.614102][T13304] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1052.623132][T17520] Bluetooth: Error in BCSP hdr checksum [ 1052.753491][T12720] usb 12-1: new high-speed USB device number 81 using dummy_hcd [ 1052.864248][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10862'. [ 1052.913582][T17520] Bluetooth: Error in BCSP hdr checksum [ 1052.987039][T12720] usb 12-1: Using ep0 maxpacket: 8 [ 1052.988472][T13310] team0: Port device team_slave_0 removed [ 1052.991267][T12720] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1052.995160][T12720] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1052.997973][T12720] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.007416][T12720] usb 12-1: config 0 descriptor?? [ 1053.199924][T17523] Bluetooth: Error in BCSP hdr checksum [ 1053.399654][T12720] iowarrior 12-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1053.481363][T17523] Bluetooth: Error in BCSP hdr checksum [ 1053.549021][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10857'. [ 1053.762246][T32542] Bluetooth: Error in BCSP hdr checksum [ 1053.774067][T13332] lo speed is unknown, defaulting to 1000 [ 1053.776900][T13332] xfrm0 speed is unknown, defaulting to 1000 [ 1054.043043][T13417] Bluetooth: Error in BCSP hdr checksum [ 1054.325047][T13417] Bluetooth: Error in BCSP hdr checksum [ 1054.578337][ T5743] usb 12-1: USB disconnect, device number 81 [ 1054.606426][T13417] Bluetooth: Error in BCSP hdr checksum [ 1054.728234][T13346] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1054.872462][T13359] overlayfs: missing 'lowerdir' [ 1054.872570][T13358] overlayfs: missing 'lowerdir' [ 1054.888322][T13417] Bluetooth: Error in BCSP hdr checksum [ 1054.960749][T13362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10873'. [ 1055.007437][T13366] netlink: 'syz.8.10874': attribute type 30 has an invalid length. [ 1055.046214][T13366] syzkaller0: entered promiscuous mode [ 1055.048669][T13366] syzkaller0: entered allmulticast mode [ 1055.173292][ T61] Bluetooth: Error in BCSP hdr checksum [ 1055.363438][T13376] 9pnet_fd: p9_fd_create_unix (13376): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1055.377274][T13387] netlink: 'syz.0.10880': attribute type 1 has an invalid length. [ 1055.418926][T13387] netlink: 756 bytes leftover after parsing attributes in process `syz.0.10880'. [ 1055.451682][ T61] Bluetooth: Error in BCSP hdr checksum [ 1055.466878][T13389] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10881'. [ 1055.553223][T13391] syzkaller1: entered promiscuous mode [ 1055.555024][T13391] syzkaller1: entered allmulticast mode [ 1055.562374][T13391] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10882'. [ 1055.642412][T13397] veth0: Caught tx_queue_len zero misconfig [ 1055.733677][T13417] Bluetooth: Error in BCSP hdr checksum [ 1056.015137][ T61] Bluetooth: Error in BCSP hdr checksum [ 1056.042277][T13409] netlink: 'syz.0.10890': attribute type 1 has an invalid length. [ 1056.044720][T13409] netlink: 'syz.0.10890': attribute type 2 has an invalid length. [ 1056.300775][T13417] Bluetooth: Error in BCSP hdr checksum [ 1056.329662][T13475] fuse: Unknown parameter 'max_r' [ 1056.410445][T13478] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 1056.414323][T13478] ref_ctr increment failed for inode: 0x206 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803af09980 [ 1056.420340][T13476] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 1056.422056][T13480] No source specified [ 1056.424034][T13476] ref_ctr decrement failed for inode: 0x206 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803af09980 [ 1056.427159][T13480] netlink: 'syz.8.10902': attribute type 2 has an invalid length. [ 1056.431000][T13476] uprobe: syz.7.10903:13476 failed to unregister, leaking uprobe [ 1056.443944][T13480] netlink: 11 bytes leftover after parsing attributes in process `syz.8.10902'. [ 1056.579042][T13417] Bluetooth: Error in BCSP hdr checksum [ 1056.770956][T13491] lo speed is unknown, defaulting to 1000 [ 1056.774296][T13491] xfrm0 speed is unknown, defaulting to 1000 [ 1056.860565][T13417] Bluetooth: Error in BCSP hdr checksum [ 1056.951700][T13507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13507 comm=syz.8.10910 [ 1056.960728][T13507] netlink: 'syz.8.10910': attribute type 1 has an invalid length. [ 1056.975700][T13507] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1056.982361][T13507] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10910'. [ 1057.040116][T13518] overlayfs: upper fs does not support tmpfile. [ 1057.143944][T17523] Bluetooth: Error in BCSP hdr checksum [ 1057.202717][ T42] kauditd_printk_skb: 297 callbacks suppressed [ 1057.202731][ T42] audit: type=1400 audit(6001574427.292:54391): avc: denied { create } for pid=13526 comm="syz.7.10917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1057.224884][ T42] audit: type=1400 audit(6001574427.292:54392): avc: denied { ioctl } for pid=13526 comm="syz.7.10917" path="socket:[265942]" dev="sockfs" ino=265942 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1057.244247][ T42] audit: type=1400 audit(6001574427.292:54393): avc: denied { create } for pid=13526 comm="syz.7.10917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1057.261743][ T42] audit: type=1400 audit(6001574427.292:54394): avc: denied { write } for pid=13526 comm="syz.7.10917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1057.268614][ T42] audit: type=1400 audit(6001574427.292:54395): avc: denied { read } for pid=13526 comm="syz.7.10917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1057.277643][ T42] audit: type=1400 audit(6001574427.301:54396): avc: denied { read write } for pid=13526 comm="syz.7.10917" name="virtual_nci" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1057.287024][ T42] audit: type=1400 audit(6001574427.301:54397): avc: denied { open } for pid=13526 comm="syz.7.10917" path="/dev/virtual_nci" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1057.295579][ T42] audit: type=1400 audit(6001574427.328:54398): avc: denied { read } for pid=13533 comm="syz.4.10918" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1057.302611][ T42] audit: type=1400 audit(6001574427.328:54399): avc: denied { open } for pid=13533 comm="syz.4.10918" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1057.311059][T13534] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1057.314139][ T42] audit: type=1400 audit(6001574427.375:54400): avc: denied { ioctl } for pid=13533 comm="syz.4.10918" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1057.373063][T13542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10920'. [ 1057.425200][ T1253] Bluetooth: Error in BCSP hdr checksum [ 1057.473255][T13544] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 1057.476238][T13544] ref_ctr increment failed for inode: 0x7d9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802ce0d940 [ 1057.482755][T13544] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 1057.489784][T13544] ref_ctr decrement failed for inode: 0x7d9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802ce0d940 [ 1057.494339][T13544] uprobe: syz.0.10921:13544 failed to unregister, leaking uprobe [ 1057.593555][T13551] netlink: 32263 bytes leftover after parsing attributes in process `syz.4.10922'. [ 1057.710999][T32542] Bluetooth: Error in BCSP hdr checksum [ 1057.733919][T28208] hid_parser_main: 91 callbacks suppressed [ 1057.733968][T28208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1057.746173][T28208] hid-generic 0000:0000:0000.0024: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1057.790469][T13565] fido_id[13565]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1057.987601][ T1253] Bluetooth: Error in BCSP hdr checksum [ 1058.100203][T13571] mac80211_hwsim hwsim115 : renamed from wlan0 (while UP) [ 1058.269778][ T1253] Bluetooth: Error in BCSP hdr checksum [ 1058.278259][T13577] veth1_macvtap: left promiscuous mode [ 1058.280659][T13577] macsec0: entered promiscuous mode [ 1058.286914][T13577] veth1_macvtap: entered promiscuous mode [ 1058.289578][T13577] macsec0: left promiscuous mode [ 1058.308896][T13577] ntfs3(nbd7): try to read out of volume at offset 0x0 [ 1058.552971][T17514] Bluetooth: Error in BCSP hdr checksum [ 1058.833278][T17514] Bluetooth: Error in BCSP hdr checksum [ 1059.114733][T17514] Bluetooth: Error in BCSP hdr checksum [ 1059.397297][T32542] Bluetooth: Error in BCSP hdr checksum [ 1059.679200][T13417] Bluetooth: Error in BCSP hdr checksum [ 1059.960802][ T1253] Bluetooth: Error in BCSP hdr checksum [ 1060.242462][ T61] Bluetooth: Error in BCSP hdr checksum [ 1060.343484][T13599] netlink: 64 bytes leftover after parsing attributes in process `syz.8.10936'. [ 1060.525518][ T61] Bluetooth: Error in BCSP hdr checksum [ 1060.805851][ T1253] Bluetooth: Error in BCSP hdr checksum [ 1061.087192][ T1253] Bluetooth: Error in BCSP hdr checksum [ 1061.369015][ T61] Bluetooth: Error in BCSP hdr checksum [ 1061.456796][T13573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1061.608369][T13613] lo speed is unknown, defaulting to 1000 [ 1061.612304][T13613] xfrm0 speed is unknown, defaulting to 1000 [ 1061.650997][T13417] Bluetooth: Error in BCSP hdr checksum [ 1061.725968][T13622] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1061.934231][T17514] Bluetooth: Error in BCSP hdr checksum [ 1062.216150][T13417] Bluetooth: Error in BCSP hdr checksum [ 1062.325343][T26437] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 1062.496358][T17514] Bluetooth: Error in BCSP hdr checksum [ 1062.692394][ C2] vcan0: j1939_tp_rxtimer: 0xffff888038cfd800: rx timeout, send abort [ 1062.704254][ T42] kauditd_printk_skb: 121 callbacks suppressed [ 1062.704265][ T42] audit: type=1400 audit(6001574432.366:54522): avc: denied { read } for pid=5126 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1062.717770][ T42] audit: type=1400 audit(6001574432.366:54523): avc: denied { search } for pid=5126 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1062.725810][ T42] audit: type=1400 audit(6001574432.366:54524): avc: denied { append } for pid=5126 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1062.733134][ T42] audit: type=1400 audit(6001574432.366:54525): avc: denied { open } for pid=5126 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1062.744402][ T42] audit: type=1400 audit(6001574432.366:54526): avc: denied { getattr } for pid=5126 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1062.777769][T32542] Bluetooth: Error in BCSP hdr checksum [ 1062.909575][T13664] lo speed is unknown, defaulting to 1000 [ 1062.912538][T13664] xfrm0 speed is unknown, defaulting to 1000 [ 1062.952757][ T42] audit: type=1400 audit(6001574432.597:54527): avc: denied { create } for pid=13663 comm="syz.4.10957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1062.962976][ T42] audit: type=1400 audit(6001574432.597:54528): avc: denied { ioctl } for pid=13663 comm="syz.4.10957" path="socket:[266213]" dev="sockfs" ino=266213 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1062.977739][ T42] audit: type=1400 audit(6001574432.597:54529): avc: denied { bind } for pid=13663 comm="syz.4.10957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1063.059724][T32542] Bluetooth: Error in BCSP hdr checksum [ 1063.073774][T13648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1063.219999][ T42] audit: type=1400 audit(6001574432.837:54530): avc: denied { recv } for pid=5722 comm="syz-executor" saddr=127.0.0.1 src=56080 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1063.237262][ C2] vcan0: j1939_tp_rxtimer: 0xffff888038cfd800: abort rx timeout. Force session deactivation [ 1063.270218][ T42] audit: type=1400 audit(6001574432.892:54531): avc: denied { create } for pid=13670 comm="syz.4.10959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1063.342032][ T61] Bluetooth: Error in BCSP hdr checksum [ 1063.344718][T13676] trusted_key: encrypted_key: insufficient parameters specified [ 1063.437122][T13676] can0: slcan on ptm0. [ 1063.626139][ T61] Bluetooth: Error in BCSP hdr checksum [ 1063.720430][ T7287] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 1063.885162][ T7287] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.889529][ T7287] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1063.893260][ T7287] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1063.897310][ T7287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.902694][ T7287] usb 5-1: config 0 descriptor?? [ 1063.917235][ T61] Bluetooth: Error in BCSP hdr checksum [ 1064.146946][ T7287] usb 5-1: USB disconnect, device number 40 [ 1064.187323][ T61] Bluetooth: Error in BCSP hdr checksum [ 1064.330696][T13673] can0 (unregistered): slcan off ptm0. [ 1064.468483][T17514] Bluetooth: Error in BCSP hdr checksum [ 1064.751445][T32542] Bluetooth: Error in BCSP hdr checksum [ 1064.821775][T13714] binder: 13712:13714 ioctl c0186f3f 200000000040 returned -22 [ 1064.825104][T13713] binder: BC_ACQUIRE_RESULT not supported [ 1064.827638][T13713] binder: 13712:13713 ioctl c0306201 2000000003c0 returned -22 [ 1064.962883][T13727] netlink: 'syz.0.10969': attribute type 83 has an invalid length. [ 1065.030888][T13737] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1065.033594][T17514] Bluetooth: Error in BCSP hdr checksum [ 1065.038103][T13737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10972'. [ 1065.227098][ T5743] usb 12-1: new high-speed USB device number 82 using dummy_hcd [ 1065.314514][T17514] Bluetooth: Error in BCSP hdr checksum [ 1065.340763][T13743] overlayfs: cannot append lower layer [ 1065.400795][ T5743] usb 12-1: Using ep0 maxpacket: 32 [ 1065.405388][ T5743] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 1065.409653][ T5743] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1065.415714][ T5743] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1065.419544][ T5743] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1065.425222][ T5743] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1065.429443][ T5743] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1065.437699][ T5743] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1065.441189][ T5743] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.446040][ T5743] usb 12-1: config 0 descriptor?? [ 1065.596025][T17514] Bluetooth: Error in BCSP hdr checksum [ 1065.669344][T13747] netlink: 'syz.8.10975': attribute type 2 has an invalid length. [ 1065.672105][ T5743] usblp 12-1:0.0: usblp0: USB Bidirectional printer dev 82 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1065.672129][T13747] netlink: 46 bytes leftover after parsing attributes in process `syz.8.10975'. [ 1065.686128][ T5743] usb 12-1: USB disconnect, device number 82 [ 1065.697150][ T5743] usblp0: removed [ 1065.878112][T17514] Bluetooth: Error in BCSP hdr checksum [ 1066.025729][T13762] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 1066.164926][T13417] Bluetooth: Error in BCSP hdr checksum [ 1066.265361][T13775] MTD: Couldn't look up './bus': -15 [ 1066.267353][ T5743] usb 12-1: new high-speed USB device number 83 using dummy_hcd [ 1066.440994][T17514] Bluetooth: Error in BCSP hdr checksum [ 1066.447337][ T5743] usb 12-1: Using ep0 maxpacket: 32 [ 1066.451177][ T5743] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 1066.461208][ T5743] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1066.468933][ T5743] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1066.476678][ T5743] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1066.483442][ T5743] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1066.487950][ T5743] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1066.492342][ T5743] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1066.495799][ T5743] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.499859][T13790] sit0: entered promiscuous mode [ 1066.501785][ T5743] usb 12-1: config 0 descriptor?? [ 1066.518427][T13790] netlink: 'syz.4.10987': attribute type 1 has an invalid length. [ 1066.523657][T13790] netlink: 1 bytes leftover after parsing attributes in process `syz.4.10987'. [ 1066.570396][T13793] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13793 comm=syz.4.10988 [ 1066.582763][T13793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10988'. [ 1066.722857][T13417] Bluetooth: Error in BCSP hdr checksum [ 1066.734234][ T5743] usblp 12-1:0.0: usblp0: USB Bidirectional printer dev 83 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1066.753557][ T5743] usb 12-1: USB disconnect, device number 83 [ 1066.759958][ T5743] usblp0: removed [ 1067.007452][ T61] Bluetooth: Error in BCSP hdr checksum [ 1067.056630][T13807] syz.0.10993: vmalloc error: size 3853062144, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1067.072134][T13807] CPU: 2 UID: 0 PID: 13807 Comm: syz.0.10993 Tainted: G L syzkaller #0 PREEMPT(full) [ 1067.072170][T13807] Tainted: [L]=SOFTLOCKUP [ 1067.072177][T13807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1067.072189][T13807] Call Trace: [ 1067.072220][T13807] [ 1067.072229][T13807] dump_stack_lvl+0x100/0x190 [ 1067.072542][T13807] warn_alloc.cold+0x94/0xa8 [ 1067.072611][T13807] ? __pfx_warn_alloc+0x10/0x10 [ 1067.072698][T13807] ? __pfx_stack_trace_save+0x10/0x10 [ 1067.072802][T13807] ? kasan_save_stack+0x3f/0x50 [ 1067.072820][T13807] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1067.072844][T13807] ? vb2_vmalloc_alloc+0xf9/0x410 [ 1067.076482][T13807] ? __vb2_queue_alloc+0x8d5/0x1160 [ 1067.076505][T13807] ? vb2_core_create_bufs+0x5fa/0xa30 [ 1067.076528][T13807] ? vb2_create_bufs+0x40c/0x830 [ 1067.076547][T13807] ? v4l_create_bufs+0x17d/0x270 [ 1067.076626][T13807] ? __video_do_ioctl+0xb2a/0xdf0 [ 1067.076653][T13807] ? video_usercopy+0x47a/0x1730 [ 1067.076672][T13807] ? __x64_sys_ioctl+0x18e/0x210 [ 1067.076775][T13807] ? do_syscall_64+0x115/0x870 [ 1067.077448][T13807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.077474][T13807] ? vb2_vmalloc_alloc+0x135/0x410 [ 1067.077504][T13807] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1067.077570][T13807] ? vb2_vmalloc_alloc+0x135/0x410 [ 1067.077608][T13807] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1067.077636][T13807] ? kasan_save_track+0x14/0x30 [ 1067.077903][T13807] ? __kasan_kmalloc+0xaa/0xb0 [ 1067.077924][T13807] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1067.077954][T13807] ? vb2_vmalloc_alloc+0x135/0x410 [ 1067.077977][T13807] vmalloc_user_noprof+0x9e/0xe0 [ 1067.078000][T13807] ? vb2_vmalloc_alloc+0x135/0x410 [ 1067.078024][T13807] vb2_vmalloc_alloc+0x135/0x410 [ 1067.078046][T13807] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1067.078069][T13807] __vb2_queue_alloc+0x8d5/0x1160 [ 1067.078114][T13807] vb2_core_create_bufs+0x5fa/0xa30 [ 1067.078144][T13807] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 1067.078172][T13807] ? trace_contention_end+0x126/0x160 [ 1067.078278][T13807] ? __mutex_lock+0x26d/0x1bd0 [ 1067.078310][T13807] vb2_create_bufs+0x40c/0x830 [ 1067.078332][T13807] ? __pfx_vb2_create_bufs+0x10/0x10 [ 1067.078353][T13807] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1067.078428][T13807] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1067.078455][T13807] v4l_create_bufs+0x17d/0x270 [ 1067.078487][T13807] __video_do_ioctl+0xb2a/0xdf0 [ 1067.078520][T13807] ? __might_fault+0xc5/0x140 [ 1067.078545][T13807] ? __pfx___video_do_ioctl+0x10/0x10 [ 1067.078584][T13807] video_usercopy+0x47a/0x1730 [ 1067.078603][T13807] ? __pfx___video_do_ioctl+0x10/0x10 [ 1067.078631][T13807] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1067.078895][T13807] ? __pfx_video_usercopy+0x10/0x10 [ 1067.078933][T13807] v4l2_ioctl+0x1bd/0x250 [ 1067.078954][T13807] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1067.078976][T13807] __x64_sys_ioctl+0x18e/0x210 [ 1067.079002][T13807] do_syscall_64+0x115/0x870 [ 1067.079034][T13807] ? clear_bhb_loop+0x40/0x90 [ 1067.079058][T13807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.079085][T13807] RIP: 0033:0x7ff86fb9de59 [ 1067.079104][T13807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.079124][T13807] RSP: 002b:00007ff870a24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1067.079146][T13807] RAX: ffffffffffffffda RBX: 00007ff86fe25fa0 RCX: 00007ff86fb9de59 [ 1067.079159][T13807] RDX: 0000200000002300 RSI: 00000000c100565c RDI: 0000000000000004 [ 1067.079172][T13807] RBP: 00007ff86fc33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1067.079312][T13807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1067.079325][T13807] R13: 00007ff86fe26038 R14: 00007ff86fe25fa0 R15: 00007ffd00f29b78 [ 1067.079358][T13807] [ 1067.239467][T13807] Mem-Info: [ 1067.240734][T13807] active_anon:16654 inactive_anon:21833 isolated_anon:0 [ 1067.240734][T13807] active_file:3178 inactive_file:25526 isolated_file:0 [ 1067.240734][T13807] unevictable:1771 dirty:216 writeback:0 [ 1067.240734][T13807] slab_reclaimable:11810 slab_unreclaimable:145196 [ 1067.240734][T13807] mapped:35978 shmem:30201 pagetables:6919 [ 1067.240734][T13807] sec_pagetables:332 bounce:0 [ 1067.240734][T13807] kernel_misc_reclaimable:0 [ 1067.240734][T13807] free:162939 free_pcp:14727 free_cma:0 [ 1067.259455][T13807] Node 0 active_anon:14980kB inactive_anon:49788kB active_file:11416kB inactive_file:46308kB unevictable:3548kB isolated(anon):0kB isolated(file):0kB mapped:22640kB dirty:712kB writeback:0kB shmem:45880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:24928kB pagetables:21964kB sec_pagetables:1296kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1067.289549][T13807] Node 1 active_anon:51608kB inactive_anon:37528kB active_file:1296kB inactive_file:55796kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:121268kB dirty:152kB writeback:0kB shmem:75036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:1184kB pagetables:5748kB sec_pagetables:44kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1067.304355][T13807] Node 0 DMA free:5600kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:600kB active_file:64kB inactive_file:1108kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:220kB local_pcp:0kB free_cma:0kB [ 1067.308074][ T5743] usb 12-1: new high-speed USB device number 84 using dummy_hcd [ 1067.316963][T13807] lowmem_reserve[]: 0 1226 1226 1226 1226 [ 1067.321487][T13807] Node 0 DMA32 free:37320kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14968kB inactive_anon:49188kB active_file:11352kB inactive_file:45200kB unevictable:3548kB writepending:712kB zspages:156kB present:2080628kB managed:1255508kB mlocked:12kB bounce:0kB free_pcp:13672kB local_pcp:3144kB free_cma:0kB [ 1067.334522][T13807] lowmem_reserve[]: 0 0 0 0 0 [ 1067.336723][T13807] Node 1 Normal free:632880kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:51608kB inactive_anon:37528kB active_file:1296kB inactive_file:55796kB unevictable:3536kB writepending:152kB zspages:10776kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:38528kB local_pcp:680kB free_cma:0kB [ 1067.351731][T13807] lowmem_reserve[]: 0 0 0 0 0 [ 1067.354065][T13807] Node 0 DMA: 85*4kB (UME) 66*8kB (UME) 32*16kB (UME) 24*32kB (UME) 12*64kB (UME) 7*128kB (UME) 1*256kB (E) 3*512kB (ME) 0*1024kB 0*2048kB 0*4096kB = 5604kB [ 1067.360953][T13807] Node 0 DMA32: 679*4kB (UME) 699*8kB (UE) 457*16kB (UE) 234*32kB (UME) 71*64kB (UME) 41*128kB (UME) 9*256kB (UM) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 37252kB [ 1067.366454][T13807] Node 1 Normal: 67*4kB (UE) 1179*8kB (UME) 1149*16kB (UME) 1071*32kB (UME) 367*64kB (UME) 172*128kB (UME) 76*256kB (UM) 93*512kB (UM) 31*1024kB (UME) 58*2048kB (UM) 77*4096kB (UM) = 640852kB [ 1067.373712][T13807] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1067.377840][T13807] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1067.381755][T13807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1067.386317][T13807] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1067.390652][T13807] 60248 total pagecache pages [ 1067.392698][T13807] 1314 pages in swap cache [ 1067.394734][T13807] Free swap = 38644kB [ 1067.396515][T13807] Total swap = 124996kB [ 1067.398394][T13807] 1048443 pages RAM [ 1067.400393][T13807] 0 pages HighMem/MovableOnly [ 1067.402735][T13807] 285255 pages reserved [ 1067.404428][T13807] 0 pages cma reserved [ 1067.409366][T32542] Bluetooth: Error in BCSP hdr checksum [ 1067.464058][T13803] lo speed is unknown, defaulting to 1000 [ 1067.467045][T13803] xfrm0 speed is unknown, defaulting to 1000 [ 1067.507106][ T5743] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.510611][ T5743] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1067.524513][ T5743] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1067.527627][ T5743] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.538008][ T5743] usb 12-1: config 0 descriptor?? [ 1067.549760][ T5743] usbhid 12-1:0.0: couldn't find an input interrupt endpoint [ 1067.628714][T13813] bond0: entered allmulticast mode [ 1067.630582][T13813] bond_slave_0: entered allmulticast mode [ 1067.632525][T13813] @0: entered allmulticast mode [ 1067.658958][T13817] netlink: 'syz.8.10995': attribute type 2 has an invalid length. [ 1067.688266][T17509] Bluetooth: Error in BCSP hdr checksum [ 1067.752329][T13817] netlink: 'syz.8.10995': attribute type 10 has an invalid length. [ 1067.765296][T13817] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10995'. [ 1067.824475][T13817] team0: entered promiscuous mode [ 1067.826272][T13817] team_slave_1: entered promiscuous mode [ 1067.839113][T13817] team0: entered allmulticast mode [ 1067.840909][T13817] team_slave_1: entered allmulticast mode [ 1067.844745][T13817] bridge0: port 3(team0) entered blocking state [ 1067.852250][T13817] bridge0: port 3(team0) entered disabled state [ 1067.863057][T13817] bridge0: port 3(team0) entered blocking state [ 1067.866048][T13817] bridge0: port 3(team0) entered forwarding state [ 1067.975488][ T61] Bluetooth: Error in BCSP hdr checksum [ 1068.125254][T13839] XFS (loop8): SB validate failed with error -5. [ 1068.239070][ T42] kauditd_printk_skb: 329 callbacks suppressed [ 1068.239088][ T42] audit: type=1400 audit(6001574437.469:54861): avc: denied { read } for pid=13842 comm="syz.4.11001" dev="nsfs" ino=4026535122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1068.251972][T13417] Bluetooth: Error in BCSP hdr checksum [ 1068.259196][ T42] audit: type=1400 audit(6001574437.487:54862): avc: denied { open } for pid=13842 comm="syz.4.11001" path="net:[4026535122]" dev="nsfs" ino=4026535122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1068.279125][ T42] audit: type=1400 audit(6001574437.487:54863): avc: denied { create } for pid=13842 comm="syz.4.11001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1068.307060][ T42] audit: type=1400 audit(6001574437.487:54864): avc: denied { connect } for pid=13842 comm="syz.4.11001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1068.343570][ T42] audit: type=1400 audit(6001574437.534:54865): avc: denied { shutdown } for pid=13842 comm="syz.4.11001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1068.366008][ T42] audit: type=1400 audit(6001574437.571:54866): avc: denied { read } for pid=13848 comm="syz.8.11002" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1068.383383][ T42] audit: type=1400 audit(6001574437.571:54868): avc: denied { create } for pid=13848 comm="syz.8.11002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1068.395535][ T42] audit: type=1400 audit(6001574437.571:54867): avc: denied { open } for pid=13848 comm="syz.8.11002" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1068.406279][ T42] audit: type=1400 audit(6001574437.580:54869): avc: denied { bind } for pid=13848 comm="syz.8.11002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1068.412822][ T42] audit: type=1400 audit(6001574437.580:54870): avc: denied { setopt } for pid=13848 comm="syz.8.11002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1068.509597][T13853] geneve3: entered promiscuous mode [ 1068.545635][T13853] geneve3: entered allmulticast mode [ 1068.549043][ T61] Bluetooth: Error in BCSP hdr checksum [ 1068.781024][T28390] usb 12-1: USB disconnect, device number 84 [ 1068.818071][T32542] Bluetooth: Error in BCSP hdr checksum [ 1068.976551][T13861] netlink: 'syz.8.11005': attribute type 1 has an invalid length. [ 1069.027994][T13861] bond5: entered promiscuous mode [ 1069.030215][T13861] bond5: entered allmulticast mode [ 1069.032101][T13866] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 1069.038179][T13861] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1069.100954][T17514] Bluetooth: Error in BCSP hdr checksum [ 1069.122530][T13863] erspan1: entered allmulticast mode [ 1069.144510][T13863] bond5: (slave erspan1): making interface the new active one [ 1069.150815][T13863] erspan1: entered promiscuous mode [ 1069.154761][T13863] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 1069.378103][T32542] Bluetooth: Error in BCSP hdr checksum [ 1069.389984][T28390] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 1069.490764][T13891] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1069.563808][T28390] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.567428][T28390] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1069.571101][T28390] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1069.576583][T28390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.581899][T28390] usb 5-1: config 0 descriptor?? [ 1069.589078][T28390] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1069.591472][T28390] dvb-usb: bulk message failed: -22 (3/0) [ 1069.608189][T28390] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1069.612599][T28390] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1069.615065][T28390] usb 5-1: media controller created [ 1069.619285][T28390] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1069.647962][T28390] dvb-usb: bulk message failed: -22 (6/0) [ 1069.651410][T28390] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1069.657263][T28390] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input117 [ 1069.663514][T13417] Bluetooth: Error in BCSP hdr checksum [ 1069.666566][T28390] dvb-usb: schedule remote query interval to 150 msecs. [ 1069.669259][T28390] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1069.848243][T28390] dvb-usb: bulk message failed: -22 (1/0) [ 1069.855731][T28390] dvb-usb: error while querying for an remote control event. [ 1069.893113][T13905] netlink: 'syz.8.11017': attribute type 10 has an invalid length. [ 1069.903771][T13905] veth0: entered promiscuous mode [ 1069.905643][T13905] veth0: entered allmulticast mode [ 1069.911524][ T34] usb 5-1: USB disconnect, device number 41 [ 1069.915449][T13905] team0: Port device veth0 added [ 1069.941591][T32542] Bluetooth: Error in BCSP hdr checksum [ 1069.980488][ T34] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1070.050465][T13907] NILFS (nbd7): device size too small [ 1070.102355][T13910] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1070.105274][T13910] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1070.110209][T13910] vhci_hcd vhci_hcd.0: Device attached [ 1070.115575][T13911] vhci_hcd: cannot find the pending unlink 2147483648 [ 1070.118549][T13911] vhci_hcd: connection closed [ 1070.118967][T14145] vhci_hcd vhci_hcd.7: stop threads [ 1070.122278][T14145] vhci_hcd vhci_hcd.7: release socket [ 1070.124608][T14145] vhci_hcd vhci_hcd.7: disconnect device [ 1070.175904][T13914] netlink: 'syz.8.11020': attribute type 11 has an invalid length. [ 1070.180722][T13914] netlink: 44 bytes leftover after parsing attributes in process `syz.8.11020'. [ 1070.223698][T17509] Bluetooth: Error in BCSP hdr checksum [ 1070.274684][T13918] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1070.375712][T13922] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11024'. [ 1070.440403][T27615] Bluetooth: hci7: command 0x0405 tx timeout [ 1070.513695][T32542] Bluetooth: Error in BCSP hdr checksum [ 1070.641972][T13939] ip6tnl0: Caught tx_queue_len zero misconfig [ 1070.738862][T13944] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1070.786985][T17509] Bluetooth: Error in BCSP hdr checksum [ 1071.000950][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11041'. [ 1071.006684][T13964] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11041'. [ 1071.019011][T13964] netlink: 124 bytes leftover after parsing attributes in process `syz.8.11041'. [ 1071.022329][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11041'. [ 1071.069641][T32542] Bluetooth: Error in BCSP hdr checksum [ 1071.103850][T13971] dummy0: entered allmulticast mode [ 1071.151645][T13974] netlink: 256 bytes leftover after parsing attributes in process `syz.0.11045'. [ 1071.154758][T13974] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11045'. [ 1071.346926][T13986] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11049'. [ 1071.351757][T13417] Bluetooth: Error in BCSP hdr checksum [ 1071.632990][T13417] Bluetooth: Error in BCSP hdr checksum [ 1071.915271][T32542] Bluetooth: Error in BCSP hdr checksum [ 1072.066120][T13999] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11053'. [ 1072.140201][T17509] Bluetooth: Short BCSP packet [ 1072.157510][T15983] blk_print_req_error: 50 callbacks suppressed [ 1072.157530][T15983] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1072.164216][T13999] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13999 comm=syz.7.11053 [ 1072.165682][T15983] buffer_io_error: 73 callbacks suppressed [ 1072.165698][T15983] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1072.172850][T13999] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13999 comm=syz.7.11053 [ 1072.181862][T30030] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1072.182890][T13999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13999 comm=syz.7.11053 [ 1072.190660][T30030] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1072.190720][T30030] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 1072.191644][T30030] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1072.200361][T17514] Bluetooth: Error in BCSP hdr checksum [ 1072.203349][T30030] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1072.211178][ T1303] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1072.215333][ T1303] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1072.219364][ T1303] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1072.222366][ T1303] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1072.225151][ T1303] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1072.228966][ T1303] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1072.231989][ T1303] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1072.235020][ T1303] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1072.238241][ T2137] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1072.242007][ T2137] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1072.245252][ T2137] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1072.248532][T15983] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1072.252439][T15983] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1072.257647][T14005] ldm_validate_partition_table(): Disk read failed. [ 1072.262549][T14005] Dev nbd0: unable to read RDB block 0 [ 1072.266702][T14005] nbd0: unable to read partition table [ 1072.277364][T14006] ldm_validate_partition_table(): Disk read failed. [ 1072.281201][T14006] Dev nbd0: unable to read RDB block 0 [ 1072.284785][T14006] nbd0: unable to read partition table [ 1072.338223][T13999] veth3: entered allmulticast mode [ 1072.341967][T14012] netlink: 'syz.0.11056': attribute type 11 has an invalid length. [ 1072.398081][T13999] bond2: (slave veth3): Enslaving as an active interface with an up link [ 1072.428176][T14010] bond2 (unregistering): (slave veth3): Releasing backup interface [ 1072.435289][T14010] bond2 (unregistering): Released all slaves [ 1072.477642][T17514] Bluetooth: Error in BCSP hdr checksum [ 1072.677930][T14026] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11061'. [ 1072.760532][T13417] Bluetooth: Error in BCSP hdr checksum [ 1072.785427][T14031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1072.932709][ T5743] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1073.041842][T17509] Bluetooth: Error in BCSP hdr checksum [ 1073.108434][ T5743] usb 5-1: config 128 has an invalid interface number: 148 but max is 0 [ 1073.111606][ T5743] usb 5-1: config 128 has no interface number 0 [ 1073.114328][ T5743] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1073.118695][ T5743] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1073.123259][ T5743] usb 5-1: config 128 interface 148 has no altsetting 0 [ 1073.127992][ T5743] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 1073.131532][ T5743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.134932][ T5743] usb 5-1: Product: syz [ 1073.136474][ T5743] usb 5-1: Manufacturer: syz [ 1073.138071][ T5743] usb 5-1: SerialNumber: syz [ 1073.323785][T13417] Bluetooth: Error in BCSP hdr checksum [ 1073.376997][ T5743] usb 5-1: USB disconnect, device number 43 [ 1073.447305][T14034] openvswitch: netlink: Unknown key attributes 20 [ 1073.524689][T14037] kvm: user requested TSC rate below hardware speed [ 1073.548648][T14038] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1073.606343][T17509] Bluetooth: Error in BCSP hdr checksum [ 1073.758818][T14042] netlink: 44 bytes leftover after parsing attributes in process `syz.7.11066'. [ 1073.843103][ T42] kauditd_printk_skb: 237 callbacks suppressed [ 1073.843118][ T42] audit: type=1400 audit(6001574442.636:55108): avc: denied { read write } for pid=14052 comm="syz.7.11068" name="usbmon6" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1073.854020][ T42] audit: type=1400 audit(6001574442.645:55109): avc: denied { open } for pid=14052 comm="syz.7.11068" path="/dev/usbmon6" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1073.864609][ T5743] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1073.886950][ T61] Bluetooth: Error in BCSP hdr checksum [ 1073.905133][ T42] audit: type=1400 audit(6001574442.701:55110): avc: denied { bpf } for pid=14052 comm="syz.7.11068" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1073.914869][ T42] audit: type=1400 audit(6001574442.701:55111): avc: denied { perfmon } for pid=14052 comm="syz.7.11068" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1073.924648][ T42] audit: type=1400 audit(6001574442.701:55112): avc: denied { create } for pid=14052 comm="syz.7.11068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1073.933137][ T42] audit: type=1400 audit(6001574442.728:55113): avc: denied { recv } for pid=14052 comm="syz.7.11068" saddr=127.0.0.1 src=56080 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1073.952140][ T42] audit: type=1400 audit(6001574442.747:55114): avc: denied { ioctl } for pid=14023 comm="syz.0.11060" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1074.048900][ T5743] usb 5-1: Using ep0 maxpacket: 8 [ 1074.053109][ T5743] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1074.056183][ T5743] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1074.060610][ T5743] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1074.065438][ T5743] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 1074.069883][ T5743] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1074.076178][ T5743] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1074.079400][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.169845][T17523] Bluetooth: Error in BCSP hdr checksum [ 1074.301427][ T42] audit: type=1400 audit(6001574443.070:55115): avc: denied { unmount } for pid=12035 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1074.307253][ T5743] usb 5-1: usb_control_msg returned -32 [ 1074.310609][ T5743] usbtmc 5-1:16.0: can't read capabilities [ 1074.347751][T27615] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1074.354624][ T42] audit: type=1400 audit(6001574443.107:55116): avc: denied { create } for pid=14056 comm="syz.4.11069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1074.354659][ T42] audit: type=1400 audit(6001574443.116:55117): avc: denied { read } for pid=14056 comm="syz.4.11069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1074.357111][ T9483] Bluetooth: hci6: command 0x1003 tx timeout [ 1074.480383][ T61] Bluetooth: Error in BCSP hdr checksum [ 1074.669755][T14074] netlink: 'syz.8.11074': attribute type 1 has an invalid length. [ 1074.684518][T14074] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1074.712576][T14074] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 1074.716358][T14075] netlink: 'syz.8.11074': attribute type 10 has an invalid length. [ 1074.719121][T14075] dummy0: entered promiscuous mode [ 1074.726554][T14075] bond6: (slave dummy0): Releasing backup interface [ 1074.756455][T13417] Bluetooth: Error in BCSP hdr checksum [ 1075.037473][ T61] Bluetooth: Error in BCSP hdr checksum [ 1075.082680][T14099] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 1075.113848][T14078] syzkaller1: entered promiscuous mode [ 1075.122189][T14078] syzkaller1: entered allmulticast mode [ 1075.189415][T14099] fuse: Unknown parameter '/P`##jU8 [' [ 1075.238189][T14103] kAFS: unable to lookup cell '(,cL' [ 1075.240683][T14103] kAFS: unable to lookup cell '(,cL' [ 1075.306798][T14103] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1075.317929][T17523] Bluetooth: Error in BCSP hdr checksum [ 1075.455012][T14111] openvswitch: netlink: Flow key attr not present in new flow. [ 1075.455029][T14112] openvswitch: netlink: Flow key attr not present in new flow. [ 1075.563904][T14098] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1075.607210][T17514] Bluetooth: Error in BCSP hdr checksum [ 1075.623463][T14120] program syz.4.11086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1075.648265][T14098] ISOFS: Unable to identify CD-ROM format. [ 1075.883508][T17523] Bluetooth: Error in BCSP hdr checksum [ 1076.115289][T14157] gretap0: entered promiscuous mode [ 1076.127418][T14157] gretap0: left promiscuous mode [ 1076.162982][ T61] Bluetooth: Error in BCSP hdr checksum [ 1076.279577][T14170] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1076.288123][T14170] loop5: detected capacity change from 0 to 2640 [ 1076.295613][T14170] ldm_validate_partition_table(): Disk read failed. [ 1076.298449][T14170] Dev loop5: unable to read RDB block 0 [ 1076.300691][T14170] loop5: unable to read partition table [ 1076.303156][T14170] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 1076.451534][T17514] Bluetooth: Error in BCSP hdr checksum [ 1076.455403][T14170] loop5: detected capacity change from 2640 to 524287999 [ 1076.460851][T14173] syz.7.11095 (14173): attempted to duplicate a private mapping with mremap. This is not supported. [ 1076.526445][T22608] usb 5-1: USB disconnect, device number 44 [ 1076.531587][T14179] __nla_validate_parse: 7 callbacks suppressed [ 1076.531599][T14179] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11097'. [ 1076.604359][T14179] bond2: entered promiscuous mode [ 1076.608672][T14179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1076.657135][T14187] netlink: 'syz.0.11099': attribute type 1 has an invalid length. [ 1076.699794][T14185] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 1076.702794][T14185] SELinux: failed to load policy [ 1076.719090][T14188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11099'. [ 1076.724617][T14179] veth5: entered promiscuous mode [ 1076.728127][T13417] Bluetooth: Error in BCSP hdr checksum [ 1076.730578][T14179] bond2: (slave veth5): Enslaving as an active interface with an up link [ 1076.750390][T14187] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1076.845380][T14192] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1076.848026][T14192] overlayfs: failed to set xattr on upper [ 1076.850013][T14192] overlayfs: ...falling back to redirect_dir=nofollow. [ 1076.852365][T14192] overlayfs: ...falling back to index=off. [ 1076.854412][T14192] overlayfs: ...falling back to uuid=null. [ 1076.861342][T14192] overlayfs: ...falling back to xino=off. [ 1076.863452][T14192] overlayfs: maximum fs stacking depth exceeded [ 1076.904328][T14194] (syz.8.11101,14194,0):ocfs2_get_sector:1713 ERROR: status = -5 [ 1076.909346][T14194] (syz.8.11101,14194,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 1076.920802][T14194] (syz.8.11101,14194,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1076.923727][T14194] (syz.8.11101,14194,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 1077.012868][ T61] Bluetooth: Error in BCSP hdr checksum [ 1077.163327][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11108'. [ 1077.173899][T14218] netlink: 'syz.7.11108': attribute type 30 has an invalid length. [ 1077.181119][T14218] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11108'. [ 1077.290066][T13417] Bluetooth: Error in BCSP hdr checksum [ 1077.510586][T14238] netlink: 156 bytes leftover after parsing attributes in process `syz.7.11113'. [ 1077.575655][ T61] Bluetooth: Error in BCSP hdr checksum [ 1077.853743][ T61] Bluetooth: Error in BCSP hdr checksum [ 1078.028014][T27615] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 1078.058465][T14261] usb usb8: usbfs: process 14261 (syz.7.11120) did not claim interface 0 before use [ 1078.135010][T17514] Bluetooth: Error in BCSP hdr checksum [ 1078.283712][T14283] netlink: 'syz.7.11128': attribute type 2 has an invalid length. [ 1078.311683][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11126'. [ 1078.315569][T14277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11126'. [ 1078.322869][T14283] : entered promiscuous mode [ 1078.406404][T28390] usb 13-1: new high-speed USB device number 31 using dummy_hcd [ 1078.417826][T17514] Bluetooth: Error in BCSP hdr checksum [ 1078.476412][T14302] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 1078.570920][T28390] usb 13-1: Using ep0 maxpacket: 8 [ 1078.575840][T28390] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 1078.579954][T28390] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1078.584417][T28390] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1078.589622][T28390] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1078.596024][T28390] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1078.602361][T28390] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1078.608868][T28390] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.701645][T17514] Bluetooth: Error in BCSP hdr checksum [ 1078.732269][T14311] kvm: pic: non byte write [ 1078.738429][T14311] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 1078.843378][T28390] usb 13-1: GET_CAPABILITIES returned 0 [ 1078.846107][T28390] usbtmc 13-1:16.0: can't read capabilities [ 1078.906052][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11142'. [ 1078.909150][T14327] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11142'. [ 1078.980806][T13417] Bluetooth: Error in BCSP hdr checksum [ 1079.066418][T14332] usbtmc 13-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 1079.067216][T14330] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11143'. [ 1079.264236][T13417] Bluetooth: Error in BCSP hdr checksum [ 1079.284346][ T5743] usb 13-1: USB disconnect, device number 31 [ 1079.335820][ T42] kauditd_printk_skb: 314 callbacks suppressed [ 1079.335842][ T42] audit: type=1400 audit(1075.128:55432): avc: denied { map_create } for pid=14343 comm="syz.7.11148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1079.349812][ T42] audit: type=1400 audit(1075.128:55433): avc: denied { read } for pid=14343 comm="syz.7.11148" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1079.358417][ T42] audit: type=1400 audit(1075.128:55434): avc: denied { open } for pid=14343 comm="syz.7.11148" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1079.367462][ T42] audit: type=1400 audit(1075.147:55435): avc: denied { ioctl } for pid=14343 comm="syz.7.11148" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1079.377048][ T42] audit: type=1400 audit(1075.147:55436): avc: denied { read } for pid=14343 comm="syz.7.11148" dev="nsfs" ino=4026532968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1079.386021][ T42] audit: type=1400 audit(1075.147:55437): avc: denied { open } for pid=14343 comm="syz.7.11148" path="net:[4026532968]" dev="nsfs" ino=4026532968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1079.447195][ T42] audit: type=1400 audit(1075.239:55438): avc: denied { create } for pid=14349 comm="syz.7.11149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1079.456000][ T42] audit: type=1400 audit(1075.239:55439): avc: denied { bind } for pid=14349 comm="syz.7.11149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1079.466006][ T42] audit: type=1400 audit(1075.239:55440): avc: denied { execute } for pid=14349 comm="syz.7.11149" path="/153/blkio.bfq.group_wait_time" dev="tmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1079.478861][ T42] audit: type=1400 audit(1075.239:55441): avc: denied { create } for pid=14349 comm="syz.7.11149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1079.544022][T17523] Bluetooth: Error in BCSP hdr checksum [ 1079.826232][T17523] Bluetooth: Error in BCSP hdr checksum [ 1080.108082][ T61] Bluetooth: Error in BCSP hdr checksum [ 1080.129384][ T5743] usb 13-1: new high-speed USB device number 32 using dummy_hcd [ 1080.290859][T14380] netlink: 'syz.7.11159': attribute type 4 has an invalid length. [ 1080.302449][ T5743] usb 13-1: Using ep0 maxpacket: 8 [ 1080.307922][ T5743] usb 13-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.312256][ T5743] usb 13-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.315994][ T5743] usb 13-1: config 0 interface 0 has no altsetting 0 [ 1080.318403][ T5743] usb 13-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1080.321698][ T5743] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.341731][ T5743] usb 13-1: config 0 descriptor?? [ 1080.389114][T17509] Bluetooth: Error in BCSP hdr checksum [ 1080.390158][T14376] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1080.394514][T14376] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1080.397685][T14376] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1080.401758][T14376] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1080.404454][T14376] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1080.408935][T14376] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1080.414690][T14376] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1080.417463][T14376] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1080.424769][T14376] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1080.429406][T14376] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1080.433191][T14376] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1080.437540][T14376] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1080.598445][ T5743] usbhid 13-1:0.0: can't add hid device: -71 [ 1080.610639][ T5743] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 1080.621657][ T5743] usb 13-1: USB disconnect, device number 32 [ 1080.674323][ T61] Bluetooth: Error in BCSP hdr checksum [ 1080.732508][T14389] [U]  [ 1080.953789][T17514] Bluetooth: Error in BCSP hdr checksum [ 1081.236628][ T61] Bluetooth: Error in BCSP hdr checksum [ 1081.516669][T17523] Bluetooth: Error in BCSP hdr checksum [ 1081.595446][T14401] openvswitch: netlink: Actions may not be safe on all matching packets [ 1081.798241][T17509] Bluetooth: Error in BCSP hdr checksum [ 1082.045361][T14412] overlay: ./file0 is not a directory [ 1082.079947][T17523] Bluetooth: Error in BCSP hdr checksum [ 1082.134328][T14415] __nla_validate_parse: 1 callbacks suppressed [ 1082.134347][T14415] netlink: 68 bytes leftover after parsing attributes in process `syz.8.11168'. [ 1082.140847][T14415] netlink: 68 bytes leftover after parsing attributes in process `syz.8.11168'. [ 1082.150725][T14415] binder: 14414:14415 ioctl 4068aea3 200000000300 returned -22 [ 1082.364780][ T61] Bluetooth: Error in BCSP hdr checksum [ 1082.412862][T14424] netlink: 'syz.8.11171': attribute type 11 has an invalid length. [ 1082.579388][ T9483] Bluetooth: hci1: command 0x0c1a tx timeout [ 1082.579434][T27615] Bluetooth: hci0: command 0x0c20 tx timeout [ 1082.580237][T21476] Bluetooth: hci2: command 0x041b tx timeout [ 1082.580277][T21476] Bluetooth: hci4: command 0x0c1a tx timeout [ 1082.591218][T14429] team_slave_1: Caught tx_queue_len zero misconfig [ 1082.644647][T17509] Bluetooth: Error in BCSP hdr checksum [ 1082.665202][T27615] Bluetooth: hci7: command 0x0405 tx timeout [ 1082.665228][ T5751] Bluetooth: hci3: command 0x0c1a tx timeout [ 1082.779335][T14433] kvm_intel: kvm [14428]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x100000001 [ 1082.927663][T17509] Bluetooth: Error in BCSP hdr checksum [ 1082.971456][T14442] 9p: Could not find request transport: rdport=0x000000000004e20 [ 1082.999070][T14445] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11178'. [ 1083.015301][T14447] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11179'. [ 1083.025431][T14447] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11179'. [ 1083.139817][T14454] syzkaller0: entered promiscuous mode [ 1083.142460][T14454] syzkaller0: entered allmulticast mode [ 1083.208459][T17509] Bluetooth: Error in BCSP hdr checksum [ 1083.241218][T14462] SELinux: Context system_u:object_r:dhcpd_exec_t:s0 is not valid (left unmapped). [ 1083.247347][T14462] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11183'. [ 1083.308048][T14462] fuseblk: Unknown parameter 'rootmode' [ 1083.404209][T14471] netlink: 'syz.7.11186': attribute type 19 has an invalid length. [ 1083.489474][T17514] Bluetooth: Error in BCSP hdr checksum [ 1083.490405][T14471] netlink: 'syz.7.11186': attribute type 19 has an invalid length. [ 1083.528138][T14473] Falling back ldisc for ttyS3. [ 1083.565513][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11188'. [ 1083.715287][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11192'. [ 1083.772870][ T61] Bluetooth: Error in BCSP hdr checksum [ 1083.965851][T11151] usb 12-1: new full-speed USB device number 86 using dummy_hcd [ 1084.053390][T17514] Bluetooth: Error in BCSP hdr checksum [ 1084.106314][T11151] usb 12-1: device descriptor read/64, error -71 [ 1084.334594][T17514] Bluetooth: Error in BCSP hdr checksum [ 1084.378672][T11151] usb 12-1: new full-speed USB device number 87 using dummy_hcd [ 1084.530879][T11151] usb 12-1: device descriptor read/64, error -71 [ 1084.616915][T17514] Bluetooth: Error in BCSP hdr checksum [ 1084.650077][T11151] usb usb12-port1: attempt power cycle [ 1084.707227][T14515] Bluetooth: hci0: service_discovery: too big uuid_count value 8200 [ 1084.720602][T14515] netlink: 'syz.8.11197': attribute type 12 has an invalid length. [ 1084.723440][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11197'. [ 1084.729591][T14515] netlink: 'syz.8.11197': attribute type 12 has an invalid length. [ 1084.734161][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11197'. [ 1084.763285][T14517] I!q: renamed from lo [ 1084.771656][ T42] kauditd_printk_skb: 232 callbacks suppressed [ 1084.771674][ T42] audit: type=1400 audit(1080.148:55674): avc: denied { create } for pid=14516 comm="syz.0.11199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1084.784835][ T42] audit: type=1400 audit(1080.148:55675): avc: denied { write } for pid=14516 comm="syz.0.11199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1084.805274][ T42] audit: type=1400 audit(1080.176:55676): avc: denied { read } for pid=14518 comm="syz.8.11200" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1084.814950][ T42] audit: type=1400 audit(1080.176:55677): avc: denied { open } for pid=14518 comm="syz.8.11200" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1084.824300][T14519] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 1084.829180][ T42] audit: type=1400 audit(1080.194:55678): avc: denied { append } for pid=14520 comm="syz.0.11201" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1084.839979][ T42] audit: type=1400 audit(1080.203:55679): avc: denied { read } for pid=14518 comm="syz.8.11200" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1084.843985][ T5751] Bluetooth: hci1: command 0x0c1a tx timeout [ 1084.849349][ T42] audit: type=1400 audit(1080.203:55680): avc: denied { open } for pid=14518 comm="syz.8.11200" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1084.863023][ T42] audit: type=1400 audit(1080.203:55681): avc: denied { ioctl } for pid=14518 comm="syz.8.11200" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1084.873327][ T42] audit: type=1400 audit(1080.203:55682): avc: denied { read append } for pid=14518 comm="syz.8.11200" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1084.884667][ T42] audit: type=1400 audit(1080.203:55683): avc: denied { open } for pid=14518 comm="syz.8.11200" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1084.902906][T17509] Bluetooth: Error in BCSP hdr checksum [ 1084.919432][T27615] Bluetooth: hci7: command 0x0405 tx timeout [ 1084.922678][ T5751] Bluetooth: hci3: command 0x0c1a tx timeout [ 1085.032873][T14530] veth0_to_bond: default FDB implementation only supports local addresses [ 1085.040648][T11151] usb 12-1: new full-speed USB device number 88 using dummy_hcd [ 1085.043693][T14531] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 1085.064121][T11151] usb 12-1: device descriptor read/8, error -71 [ 1085.099159][T14531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.180522][T32542] Bluetooth: Error in BCSP hdr checksum [ 1085.235561][T14537] sd 0:0:0:0: PR command failed: 1026 [ 1085.238075][T14537] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 1085.241142][T14537] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 1085.322641][T11151] usb 12-1: new full-speed USB device number 89 using dummy_hcd [ 1085.360143][T11151] usb 12-1: device descriptor read/8, error -71 [ 1085.465147][T17514] Bluetooth: Error in BCSP hdr checksum [ 1085.475860][T11151] usb usb12-port1: unable to enumerate USB device [ 1085.526304][ T34] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1085.622594][T14548] digital: digital_start_poll: Unknown protocol [ 1085.692116][ T34] usb 5-1: config 0 has no interfaces? [ 1085.696752][ T34] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1085.704769][ T34] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1085.708154][ T34] usb 5-1: Product: syz [ 1085.709973][ T34] usb 5-1: Manufacturer: syz [ 1085.716459][ T34] usb 5-1: SerialNumber: syz [ 1085.743061][T32542] Bluetooth: Error in BCSP hdr checksum [ 1085.743411][ T34] usb 5-1: config 0 descriptor?? [ 1085.805965][T14550] support for cryptoloop has been removed. Use dm-crypt instead. [ 1085.980406][ T5831] usb 5-1: USB disconnect, device number 45 [ 1086.026003][T17523] Bluetooth: Error in BCSP hdr checksum [ 1086.308440][T17523] Bluetooth: Error in BCSP hdr checksum [ 1086.589183][T17523] Bluetooth: Error in BCSP hdr checksum [ 1086.625735][ T5887] usb 13-1: new high-speed USB device number 33 using dummy_hcd [ 1086.804650][ T5887] usb 13-1: Using ep0 maxpacket: 8 [ 1086.809676][ T5887] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 1086.813395][ T5887] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1086.821169][ T5887] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1086.825839][ T5887] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1086.836670][ T5887] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1086.844681][ T5887] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1086.850047][ T5887] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.870707][T17509] Bluetooth: Error in BCSP hdr checksum [ 1086.893981][T14578] netlink: 'syz.0.11219': attribute type 12 has an invalid length. [ 1086.901104][T14579] netlink: 'syz.0.11219': attribute type 12 has an invalid length. [ 1087.029554][T14588] netlink: 'syz.7.11222': attribute type 64 has an invalid length. [ 1087.097523][ T5751] Bluetooth: hci1: command 0x0c1a tx timeout [ 1087.107069][ T5751] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 1087.158794][T17514] Bluetooth: Error in BCSP hdr checksum [ 1087.173425][ T5751] Bluetooth: hci3: command 0x0c1a tx timeout [ 1087.175962][ T5751] Bluetooth: hci7: command 0x0405 tx timeout [ 1087.216813][T14599] xt_TCPMSS: Only works on TCP SYN packets [ 1087.260431][ T7287] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1087.389378][T14612] loop2: detected capacity change from 0 to 14 [ 1087.396528][T14612] Dev loop2: unable to read RDB block 14 [ 1087.398691][T14612] loop2: AHDI p1 p2 p3 [ 1087.400618][T14612] loop2: partition table partially beyond EOD, truncated [ 1087.407528][T14612] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1087.415273][T14612] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1087.440980][T17514] Bluetooth: Error in BCSP hdr checksum [ 1087.442044][ T7287] usb 5-1: Using ep0 maxpacket: 32 [ 1087.463131][ T7287] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1087.468464][ T7287] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 1087.477551][ T7287] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 1087.480992][ T7287] usb 5-1: config 14 has no interface number 0 [ 1087.487843][ T7287] usb 5-1: config 14 has no interface number 1 [ 1087.498123][ T7287] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1087.503236][ T7287] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1087.512009][ T7287] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1087.517283][ T7287] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1087.524515][ T7287] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1087.532917][ T7287] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1087.538712][ T7287] usb 5-1: config 14 interface 57 has no altsetting 0 [ 1087.543143][ T7287] usb 5-1: config 14 interface 228 has no altsetting 0 [ 1087.549654][ T7287] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1087.553939][ T7287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.557488][ T7287] usb 5-1: Product: syz [ 1087.558793][T14618] IPVS: set_ctl: invalid protocol: 41 100.1.1.0:20001 [ 1087.559329][ T7287] usb 5-1: Manufacturer: syz [ 1087.559348][ T7287] usb 5-1: SerialNumber: syz [ 1087.691895][T14628] usbtmc 13-1:16.0: simple usb_control_msg returned 0 [ 1087.715635][T17514] Bluetooth: Error in BCSP hdr checksum [ 1087.910000][ T5887] usb 13-1: USB disconnect, device number 33 [ 1087.957739][T14639] __nla_validate_parse: 4 callbacks suppressed [ 1087.957752][T14639] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11238'. [ 1087.965832][T14639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11238'. [ 1087.999123][T17509] Bluetooth: Error in BCSP hdr checksum [ 1088.025887][ T7287] legousbtower 5-1:14.57: interrupt endpoints not found [ 1088.110985][T14646] netlink: 'syz.7.11241': attribute type 1 has an invalid length. [ 1088.163180][T14646] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1088.275348][T14661] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11245'. [ 1088.280386][T13417] Bluetooth: Error in BCSP hdr checksum [ 1088.323066][T14666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39717 sclass=netlink_route_socket pid=14666 comm=syz.7.11246 [ 1088.349720][T14669] tmpfs: Bad value for 'mpol' [ 1088.461958][ T7287] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1088.467365][ T7287] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1088.563215][T13417] Bluetooth: Error in BCSP hdr checksum [ 1088.568135][T14680] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11250'. [ 1088.576707][T14682] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11250'. [ 1088.843819][T17520] Bluetooth: Error in BCSP hdr checksum [ 1088.981648][T14699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62490 sclass=netlink_route_socket pid=14699 comm=syz.7.11254 [ 1089.086597][ C1] usb 5-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 1089.101117][ T5831] usb 5-1: USB disconnect, device number 46 [ 1089.112767][ T5831] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 1089.125004][T17520] Bluetooth: Error in BCSP hdr checksum [ 1089.259683][T14710] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 1089.406809][T17509] Bluetooth: Error in BCSP hdr checksum [ 1089.601519][T11879] usb 12-1: new high-speed USB device number 90 using dummy_hcd [ 1089.637989][T14719] sctp: [Deprecated]: syz.8.11260 (pid 14719) Use of int in maxseg socket option. [ 1089.637989][T14719] Use struct sctp_assoc_value instead [ 1089.641852][T14720] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11260'. [ 1089.688220][T17520] Bluetooth: Error in BCSP hdr checksum [ 1089.741921][T11879] usb 12-1: device descriptor read/64, error -71 [ 1089.970263][T17509] Bluetooth: Error in BCSP hdr checksum [ 1090.002605][T11879] usb 12-1: new high-speed USB device number 91 using dummy_hcd [ 1090.080115][T14751] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1090.142892][T11879] usb 12-1: device descriptor read/64, error -71 [ 1090.189672][T14753] XFS (nbd8): SB validate failed with error -5. [ 1090.252074][T17509] Bluetooth: Error in BCSP hdr checksum [ 1090.262292][T11879] usb usb12-port1: attempt power cycle [ 1090.264100][ T42] kauditd_printk_skb: 324 callbacks suppressed [ 1090.264114][ T42] audit: type=1400 audit(1085.204:56008): avc: denied { execmem } for pid=14754 comm="syz.0.11272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1090.387619][ T42] audit: type=1400 audit(1085.324:56009): avc: denied { ioctl } for pid=14763 comm="syz.4.11273" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1090.425116][T14766] futex_wake_op: syz.0.11272 tries to shift op by -1; fix this program [ 1090.448257][T14755] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 1090.506968][ T42] audit: type=1400 audit(1085.435:56010): avc: denied { create } for pid=14776 comm="syz.8.11275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1090.512711][T14777] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1090.513802][ T42] audit: type=1400 audit(1085.444:56011): avc: denied { ioctl } for pid=14776 comm="syz.8.11275" path="socket:[276022]" dev="sockfs" ino=276022 ioctlcmd=0x8995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1090.528547][ T42] audit: type=1400 audit(1085.463:56012): avc: denied { map } for pid=14763 comm="syz.4.11273" path="/dev/video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1090.533640][T17509] Bluetooth: Error in BCSP hdr checksum [ 1090.536848][T14765] fuse: Bad value for 'group_id' [ 1090.540347][T14765] fuse: Bad value for 'group_id' [ 1090.642733][T11879] usb 12-1: new high-speed USB device number 92 using dummy_hcd [ 1090.644469][T14782] netlink: 'syz.0.11277': attribute type 32 has an invalid length. [ 1090.661346][T14782] bond6: option coupled_control: invalid value (47) [ 1090.663829][T11879] usb 12-1: device descriptor read/8, error -71 [ 1090.667558][T14782] bond6 (unregistering): Released all slaves [ 1090.722528][ T42] audit: type=1400 audit(1085.638:56013): avc: denied { write } for pid=14778 comm="syz.8.11276" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1090.731665][ T42] audit: type=1400 audit(1085.638:56014): avc: denied { create } for pid=14778 comm="syz.8.11276" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1090.740037][ T42] audit: type=1400 audit(1085.647:56015): avc: denied { unlink } for pid=14778 comm="syz.8.11276" name="file0" dev="tmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1090.815158][T17509] Bluetooth: Error in BCSP hdr checksum [ 1090.923235][T11879] usb 12-1: new high-speed USB device number 93 using dummy_hcd [ 1090.946134][T11879] usb 12-1: device descriptor read/8, error -71 [ 1090.976357][ T42] audit: type=1400 audit(1085.869:56016): avc: denied { create } for pid=14793 comm="syz.0.11279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1090.985877][T14794] gre0: Caught tx_queue_len zero misconfig [ 1090.999827][ T42] audit: type=1400 audit(1085.896:56017): avc: denied { watch_mount watch_reads } for pid=14793 comm="syz.0.11279" path="/445" dev="tmpfs" ino=2402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1091.059701][T14795] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1091.065180][T11879] usb usb12-port1: unable to enumerate USB device [ 1091.066514][T14794] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000300 undefined [ 1091.099755][T17509] Bluetooth: Error in BCSP hdr checksum [ 1091.212409][T14803] input: syz1 as /devices/virtual/input/input119 [ 1091.378846][T17514] Bluetooth: Error in BCSP hdr checksum [ 1091.587617][T14829] nfs: Unknown parameter '' [ 1091.660408][T17523] Bluetooth: Error in BCSP hdr checksum [ 1091.853758][T14840] bond6 (unregistering): Released all slaves [ 1091.914131][T14849] hfsplus: unable to find HFS+ superblock [ 1091.942801][T17514] Bluetooth: Error in BCSP hdr checksum [ 1092.022917][T14860] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1092.025599][T14860] overlayfs: failed to set xattr on upper [ 1092.027363][T14860] overlayfs: ...falling back to redirect_dir=nofollow. [ 1092.030045][T14860] overlayfs: ...falling back to index=off. [ 1092.059049][T14860] overlayfs: ...falling back to uuid=null. [ 1092.062498][T14860] overlayfs: ...falling back to xino=off. [ 1092.065543][T14860] overlayfs: maximum fs stacking depth exceeded [ 1092.169892][ T7287] usb 13-1: new low-speed USB device number 34 using dummy_hcd [ 1092.226944][T17523] Bluetooth: Error in BCSP hdr checksum [ 1092.247749][T14874] netlink: 'syz.0.11302': attribute type 32 has an invalid length. [ 1092.261812][T14874] bond6: Setting coupled_control to off (0) [ 1092.263977][T14874] bond6: entered promiscuous mode [ 1092.321411][ T7287] usb 13-1: device descriptor read/64, error -71 [ 1092.324075][T14877] macsec2: entered promiscuous mode [ 1092.326428][T14877] macsec2: entered allmulticast mode [ 1092.506258][T17514] Bluetooth: Error in BCSP hdr checksum [ 1092.592417][ T7287] usb 13-1: new low-speed USB device number 35 using dummy_hcd [ 1092.733239][ T7287] usb 13-1: device descriptor read/64, error -71 [ 1092.789006][T17520] Bluetooth: Error in BCSP hdr checksum [ 1092.852831][ T7287] usb usb13-port1: attempt power cycle [ 1093.020764][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11312'. [ 1093.028037][T14910] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11312'. [ 1093.031208][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11312'. [ 1093.078233][ T61] Bluetooth: Error in BCSP hdr checksum [ 1093.086811][T14914] xt_ecn: cannot match TCP bits for non-tcp packets [ 1093.104213][T11151] bridge0: entered promiscuous mode [ 1093.108765][T14914] netlink: 56 bytes leftover after parsing attributes in process `syz.7.11314'. [ 1093.158463][T14918] syzkaller0: entered promiscuous mode [ 1093.160325][T14918] syzkaller0: entered allmulticast mode [ 1093.232669][ T7287] usb 13-1: new low-speed USB device number 36 using dummy_hcd [ 1093.268242][ T7287] usb 13-1: device descriptor read/8, error -71 [ 1093.346327][T14923] kvm: kvm [14922]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1093.350236][T14923] kvm: kvm [14922]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1093.354492][T17520] Bluetooth: Error in BCSP hdr checksum [ 1093.535099][ T7287] usb 13-1: new low-speed USB device number 37 using dummy_hcd [ 1093.557568][ T7287] usb 13-1: device descriptor read/8, error -71 [ 1093.584308][T14929] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11318'. [ 1093.634231][ T61] Bluetooth: Error in BCSP hdr checksum [ 1093.681738][ T7287] usb usb13-port1: unable to enumerate USB device [ 1093.704900][T14932] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11318'. [ 1093.914838][T17520] Bluetooth: Error in BCSP hdr checksum [ 1094.198381][T17520] Bluetooth: Error in BCSP hdr checksum [ 1094.327685][T14934] siw: device registration error -23 [ 1094.476875][T14939] kernel read not supported for file /file0 (pid: 14939 comm: syz.4.11321) [ 1094.484518][T17509] Bluetooth: Error in BCSP hdr checksum [ 1094.493793][T14939] overlay: Bad value for 'uuid' [ 1094.538796][T14947] netlink: 6032 bytes leftover after parsing attributes in process `syz.7.11323'. [ 1094.596781][T14949] Bluetooth: MGMT ver 1.23 [ 1094.672800][T14953] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1094.678961][T14953] bond7 (unregistering): Released all slaves [ 1094.749803][T14961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11327'. [ 1094.762485][T17509] Bluetooth: Error in BCSP hdr checksum [ 1095.029443][T14975] tipc: Cannot configure node identity twice [ 1095.042132][T13424] Bluetooth: Error in BCSP hdr checksum [ 1095.048649][T14975] binder: 14974:14975 ioctl c0306201 200000000340 returned -14 [ 1095.326664][T17508] Bluetooth: Error in BCSP hdr checksum [ 1095.610190][T13430] Bluetooth: Error in BCSP hdr checksum [ 1095.735151][T11151] usb 12-1: new high-speed USB device number 94 using dummy_hcd [ 1095.741374][ T42] kauditd_printk_skb: 265 callbacks suppressed [ 1095.741412][ T42] audit: type=1400 audit(1090.270:56283): avc: denied { mount } for pid=15012 comm="syz.4.11341" name="/" dev="9p" ino=75006781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1095.751953][ T42] audit: type=1400 audit(1090.270:56284): avc: denied { write } for pid=15012 comm="syz.4.11341" name="/" dev="9p" ino=75006781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1095.761769][ T42] audit: type=1400 audit(1090.270:56285): avc: denied { remove_name } for pid=15012 comm="syz.4.11341" name="file2" dev="9p" ino=75006789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1095.781234][ T42] audit: type=1400 audit(1090.270:56286): avc: denied { rmdir } for pid=15012 comm="syz.4.11341" name="file2" dev="9p" ino=75006789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1095.788918][ T42] audit: type=1400 audit(1090.279:56287): avc: denied { create } for pid=15014 comm="syz.0.11342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1095.795209][ T42] audit: type=1400 audit(1090.288:56288): avc: denied { read write } for pid=15014 comm="syz.0.11342" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1095.805192][ T42] audit: type=1400 audit(1090.288:56289): avc: denied { open } for pid=15014 comm="syz.0.11342" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1095.813680][ T42] audit: type=1400 audit(1090.288:56290): avc: denied { unmount } for pid=12035 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1095.820105][ T42] audit: type=1400 audit(1090.316:56291): avc: denied { write } for pid=15014 comm="syz.0.11342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1095.827508][ T42] audit: type=1400 audit(1090.316:56292): avc: denied { mounton } for pid=15014 comm="syz.0.11342" path="/470/file0" dev="tmpfs" ino=2547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1095.887238][T13430] Bluetooth: Error in BCSP hdr checksum [ 1095.919781][T11151] usb 12-1: Invalid ep0 maxpacket: 9 [ 1096.061529][T11151] usb 12-1: new high-speed USB device number 95 using dummy_hcd [ 1096.091368][T15042] netlink: 'syz.8.11351': attribute type 10 has an invalid length. [ 1096.172876][T13430] Bluetooth: Error in BCSP hdr checksum [ 1096.235661][T11151] usb 12-1: Invalid ep0 maxpacket: 9 [ 1096.238706][T11151] usb usb12-port1: attempt power cycle [ 1096.275898][T15063] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1096.279228][T15063] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 1096.452563][T13430] Bluetooth: Error in BCSP hdr checksum [ 1096.509727][T15081] ALSA: seq fatal error: cannot create timer (-19) [ 1096.602580][T11151] usb 12-1: new high-speed USB device number 96 using dummy_hcd [ 1096.628646][T15084] lo speed is unknown, defaulting to 1000 [ 1096.632413][T15084] xfrm0 speed is unknown, defaulting to 1000 [ 1096.635776][T11151] usb 12-1: Invalid ep0 maxpacket: 9 [ 1096.733900][T13430] Bluetooth: Error in BCSP hdr checksum [ 1096.776118][T11151] usb 12-1: new high-speed USB device number 97 using dummy_hcd [ 1096.800053][T11151] usb 12-1: Invalid ep0 maxpacket: 9 [ 1096.807310][T11151] usb usb12-port1: unable to enumerate USB device [ 1096.821123][T15092] netlink: 'syz.0.11363': attribute type 10 has an invalid length. [ 1096.826247][T15092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1096.832720][T15092] batadv0: entered allmulticast mode [ 1096.836325][T15092] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1097.027668][ T1253] Bluetooth: Error in BCSP hdr checksum [ 1097.296250][ T1253] Bluetooth: Error in BCSP hdr checksum [ 1097.578261][T13430] Bluetooth: Error in BCSP hdr checksum [ 1097.862302][T17534] Bluetooth: Error in BCSP hdr checksum [ 1098.142093][T13430] Bluetooth: Error in BCSP hdr checksum [ 1098.209693][T15127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11371'. [ 1098.223655][T15127] bond3: entered promiscuous mode [ 1098.225772][T15127] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1098.256844][T15127] veth3: entered promiscuous mode [ 1098.259831][T15127] bond3: (slave veth3): Enslaving as an active interface with an up link [ 1098.424258][T13424] Bluetooth: Error in BCSP hdr checksum [ 1098.455763][ T7287] usb 13-1: new high-speed USB device number 38 using dummy_hcd [ 1098.632265][ T7287] usb 13-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1098.637045][ T7287] usb 13-1: config 0 interface 0 has no altsetting 0 [ 1098.643723][ T7287] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1098.647460][ T7287] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1098.650838][ T7287] usb 13-1: Product: syz [ 1098.652670][ T7287] usb 13-1: Manufacturer: syz [ 1098.654427][ T7287] usb 13-1: SerialNumber: syz [ 1098.658979][ T7287] usb 13-1: config 0 descriptor?? [ 1098.671962][ T7287] usb 13-1: selecting invalid altsetting 0 [ 1098.705932][T13430] Bluetooth: Error in BCSP hdr checksum [ 1098.799045][T15146] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11376'. [ 1098.862205][T15148] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11377'. [ 1098.865654][T15148] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1098.882634][ T7287] usb 13-1: USB disconnect, device number 38 [ 1098.922243][T15125] lo speed is unknown, defaulting to 1000 [ 1098.931993][T15125] xfrm0 speed is unknown, defaulting to 1000 [ 1098.988196][T17534] Bluetooth: Error in BCSP hdr checksum [ 1099.283357][T17534] Bluetooth: Error in BCSP hdr checksum [ 1099.323190][T11151] usb 12-1: new high-speed USB device number 98 using dummy_hcd [ 1099.518985][T11151] usb 12-1: Using ep0 maxpacket: 16 [ 1099.523138][T11151] usb 12-1: config 8 has an invalid interface number: 223 but max is 0 [ 1099.527597][T11151] usb 12-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.534399][T11151] usb 12-1: config 8 has no interface number 0 [ 1099.537379][T11151] usb 12-1: config 8 interface 223 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1099.544174][T11151] usb 12-1: config 8 interface 223 has no altsetting 0 [ 1099.550644][T11151] usb 12-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1099.555342][T11151] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.559675][T11151] usb 12-1: Product: syz [ 1099.561374][T13424] Bluetooth: Error in BCSP hdr checksum [ 1099.563333][T11151] usb 12-1: Manufacturer: syz [ 1099.564881][T11151] usb 12-1: SerialNumber: syz [ 1099.624711][T15162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11380'. [ 1099.810847][T15162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11380'. [ 1099.815413][T15162] block nbd3: server does not support multiple connections per device. [ 1099.833129][T15162] block nbd3: shutting down sockets [ 1099.844494][T13424] Bluetooth: Error in BCSP hdr checksum [ 1099.846618][T15157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.851568][T15157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.872939][T15171] binder: 15170:15171 ioctl 127e 200000000140 returned -22 [ 1099.883539][T28208] usb 12-1: USB disconnect, device number 98 [ 1100.069769][T15182] netlink: 'syz.8.11383': attribute type 11 has an invalid length. [ 1100.125543][T17534] Bluetooth: Error in BCSP hdr checksum [ 1100.132419][T15184] bond0: left allmulticast mode [ 1100.134403][T15184] bond_slave_0: left allmulticast mode [ 1100.144741][T15184] @0: left allmulticast mode [ 1100.147379][T15184] batadv0: left allmulticast mode [ 1100.157216][T15184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11384'. [ 1100.161065][T15184] nbd: must specify at least one socket [ 1100.407776][T17508] Bluetooth: Error in BCSP hdr checksum [ 1100.596553][T15242] tmpfs: User quota block hardlimit too large. [ 1100.658658][T15248] netlink: 'syz.8.11401': attribute type 18 has an invalid length. [ 1100.661933][T15248] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11401'. [ 1100.670030][T15248] netlink: 'syz.8.11401': attribute type 18 has an invalid length. [ 1100.673196][T15248] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11401'. [ 1100.688775][T17509] Bluetooth: Error in BCSP hdr checksum [ 1100.691233][T15246] syzkaller0: entered promiscuous mode [ 1100.693480][T15246] syzkaller0: entered allmulticast mode [ 1100.894198][T15262] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 1100.970440][T17508] Bluetooth: Error in BCSP hdr checksum [ 1101.114787][T15267] SELinux: truncated policydb string identifier [ 1101.131074][T15267] SELinux: failed to load policy [ 1101.188177][ T42] kauditd_printk_skb: 284 callbacks suppressed [ 1101.188189][ T42] audit: type=1400 audit(1095.299:56577): avc: denied { read } for pid=15266 comm="syz.7.11404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1101.213717][ T42] audit: type=1400 audit(1095.317:56578): avc: denied { mount } for pid=15266 comm="syz.7.11404" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1101.256844][T17534] Bluetooth: Error in BCSP hdr checksum [ 1101.262639][ T42] audit: type=1400 audit(1095.326:56579): avc: denied { unmount } for pid=15266 comm="syz.7.11404" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1101.277265][T15267] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1101.414902][ T42] audit: type=1400 audit(1095.511:56580): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=56080 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1101.435267][ T42] audit: type=1400 audit(1095.520:56581): avc: denied { read } for pid=15273 comm="syz.0.11406" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1101.457254][ T42] audit: type=1400 audit(1095.520:56582): avc: denied { open } for pid=15273 comm="syz.0.11406" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1101.480551][ T42] audit: type=1400 audit(1095.520:56583): avc: denied { ioctl } for pid=15273 comm="syz.0.11406" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1101.533694][T17534] Bluetooth: Error in BCSP hdr checksum [ 1101.663605][ T42] audit: type=1400 audit(1095.714:56584): avc: denied { create } for pid=15278 comm="syz.0.11407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1101.671544][ T42] audit: type=1400 audit(1095.714:56585): avc: denied { setopt } for pid=15278 comm="syz.0.11407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1101.815799][T17534] Bluetooth: Error in BCSP hdr checksum [ 1101.920543][ T42] audit: type=1400 audit(1095.972:56586): avc: denied { read write } for pid=15283 comm="syz.4.11408" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1101.991262][T15288] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15288 comm=syz.4.11408 [ 1102.101704][T17509] Bluetooth: Error in BCSP hdr checksum [ 1102.379118][T17508] Bluetooth: Error in BCSP hdr checksum [ 1102.661352][T17500] Bluetooth: Error in BCSP hdr checksum [ 1102.943962][T17500] Bluetooth: Error in BCSP hdr checksum [ 1103.225238][T13424] Bluetooth: Error in BCSP hdr checksum [ 1103.226446][T15303] nvme_fabrics: missing parameter 'transport=%s' [ 1103.237182][T15303] nvme_fabrics: missing parameter 'nqn=%s' [ 1103.347530][T15310] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11415'. [ 1103.506837][T13430] Bluetooth: Error in BCSP hdr checksum [ 1103.791120][T17500] Bluetooth: Error in BCSP hdr checksum [ 1103.904782][T15248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1104.081735][T17508] Bluetooth: Error in BCSP hdr checksum [ 1104.238338][T15357] futex_wake_op: syz.8.11420 tries to shift op by 32; fix this program [ 1104.351944][T17509] Bluetooth: Error in BCSP hdr checksum [ 1104.355663][T15364] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11423'. [ 1104.374818][T15364] bond7: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 1104.380614][T15364] bond7 (unregistering): Released all slaves [ 1104.569335][T15349] hid-generic 0003:0627:0001.001C: pid 15349 passed too large report [ 1104.604598][T15378] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11424'. [ 1104.612077][T15378] netlink: 'syz.7.11424': attribute type 1 has an invalid length. [ 1104.634487][T17534] Bluetooth: Error in BCSP hdr checksum [ 1104.642498][T15378] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1104.668071][T15378] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1104.671931][T15378] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1104.680817][T15378] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 1104.735525][T15381] mac80211_hwsim hwsim116 wlan1: entered promiscuous mode [ 1104.740933][T15381] bond4: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1104.915604][T17530] Bluetooth: Error in BCSP hdr checksum [ 1105.164967][T15393] netlink: 'syz.7.11428': attribute type 12 has an invalid length. [ 1105.196913][T17525] Bluetooth: Error in BCSP hdr checksum [ 1105.300856][T15397] random: crng reseeded on system resumption [ 1105.478659][ T40] Bluetooth: Error in BCSP hdr checksum [ 1105.722317][ T5751] Bluetooth: hci3: unexpected event for opcode 0x0c56 [ 1105.732146][T15424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15424 comm=syz.7.11437 [ 1105.738432][T15424] netlink: 'syz.7.11437': attribute type 1 has an invalid length. [ 1105.760660][T17530] Bluetooth: Error in BCSP hdr checksum [ 1105.785579][T15427] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11438'. [ 1105.789633][T15427] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11438'. [ 1105.793688][T15427] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11438'. [ 1105.798613][T15427] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11438'. [ 1105.802214][T15427] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11438'. [ 1105.805458][T15427] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11438'. [ 1105.808474][T15427] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11438'. [ 1105.812207][T15427] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11438'. [ 1105.819086][T15427] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11438'. [ 1105.825311][T15427] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11438'. [ 1105.930857][T15433] input input121: cannot allocate more than FF_MAX_EFFECTS effects [ 1106.045645][T17510] Bluetooth: Error in BCSP hdr checksum [ 1106.223477][T15444] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 1106.324338][T17522] Bluetooth: Error in BCSP hdr checksum [ 1106.595827][T15470] netlink: 'syz.7.11450': attribute type 7 has an invalid length. [ 1106.613602][T17530] Bluetooth: Error in BCSP hdr checksum [ 1106.620921][ T42] kauditd_printk_skb: 172 callbacks suppressed [ 1106.620933][ T42] audit: type=1400 audit(1100.309:56759): avc: denied { read write } for pid=15468 comm="syz.7.11450" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1106.622689][T15470] input: syz0 as /devices/virtual/input/input122 [ 1106.623051][ T42] audit: type=1400 audit(1100.309:56760): avc: denied { open } for pid=15468 comm="syz.7.11450" path="/dev/uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1106.649597][ T42] audit: type=1400 audit(1100.309:56761): avc: denied { ioctl } for pid=15468 comm="syz.7.11450" path="/dev/uinput" dev="devtmpfs" ino=944 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1106.663931][ T42] audit: type=1400 audit(1100.318:56762): avc: denied { bind } for pid=15471 comm="syz.4.11451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1106.672098][ T42] audit: type=1400 audit(1100.318:56763): avc: denied { node_bind } for pid=15471 comm="syz.4.11451" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1106.680437][ T42] audit: type=1400 audit(1100.318:56764): avc: denied { read } for pid=5129 comm="acpid" name="event4" dev="devtmpfs" ino=5287 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1106.694541][ T42] audit: type=1400 audit(1100.318:56765): avc: denied { read open } for pid=5129 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=5287 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1106.706390][ T42] audit: type=1400 audit(1100.318:56766): avc: denied { ioctl } for pid=5129 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=5287 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1106.720281][ T42] audit: type=1400 audit(1100.327:56767): avc: denied { connect } for pid=15471 comm="syz.4.11451" laddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1106.738887][ T42] audit: type=1400 audit(1100.420:56768): avc: denied { mounton } for pid=15475 comm="syz.7.11452" path="/241/file0" dev="tmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1106.887620][T22974] Bluetooth: Error in BCSP hdr checksum [ 1107.169524][T17522] Bluetooth: Error in BCSP hdr checksum [ 1107.460957][T22974] Bluetooth: Error in BCSP hdr checksum [ 1107.735661][ T40] Bluetooth: Error in BCSP hdr checksum [ 1108.015155][T17530] Bluetooth: Error in BCSP hdr checksum [ 1108.296833][ T40] Bluetooth: Error in BCSP hdr checksum [ 1108.523430][T15504] tmpfs: Bad value for 'gid' [ 1108.528632][T15504] tmpfs: Bad value for 'gid' [ 1108.578238][T22974] Bluetooth: Error in BCSP hdr checksum [ 1108.584502][T15506] netlink: 'syz.0.11462': attribute type 11 has an invalid length. [ 1108.837157][T15516] netlink: 'syz.0.11465': attribute type 1 has an invalid length. [ 1108.850148][ T5751] Bluetooth: hci4: command 0x0c1a tx timeout [ 1108.854385][T11879] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1108.866379][T11879] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1108.876279][T22974] Bluetooth: Error in BCSP hdr checksum [ 1109.153281][T17522] Bluetooth: Error in BCSP hdr checksum [ 1109.177818][T15534] SELinux: unknown common [ 1109.180508][T15534] SELinux: invalid class [ 1109.183235][T15534] SELinux: failed to load policy [ 1109.248755][T15537] 9pnet_fd: p9_fd_create_tcp (15537): problem binding to privport [ 1109.285303][T15539] sch_tbf: peakrate 2048 is lower than or equals to rate 117440512 ! [ 1109.290193][T15539] syzkaller0: entered promiscuous mode [ 1109.292807][T15539] syzkaller0: entered allmulticast mode [ 1109.456434][T17513] Bluetooth: Error in BCSP hdr checksum [ 1109.621015][T15555] bond4: entered promiscuous mode [ 1109.736269][ T40] Bluetooth: Error in BCSP hdr checksum [ 1109.736962][T15566] binder: 15561:15566 ioctl c0306201 200000000080 returned -14 [ 1109.746195][T15566] binder: 15561:15566 ioctl c0306201 2000000003c0 returned -14 [ 1109.888535][T15573] IPVS: length: 18 != 8 [ 1109.928501][T15569] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1109.934117][T15574] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1110.011015][T17522] Bluetooth: Error in BCSP hdr checksum [ 1110.291562][T17513] Bluetooth: Error in BCSP hdr checksum [ 1110.447420][T15595] syzkaller0: entered promiscuous mode [ 1110.449857][T15595] syzkaller0: entered allmulticast mode [ 1110.572481][ T40] Bluetooth: Error in BCSP hdr checksum [ 1110.840612][T15602] veth1_macvtap: left allmulticast mode [ 1110.844123][T15602] veth1_macvtap: left promiscuous mode [ 1110.846604][T15602] macsec0: left promiscuous mode [ 1110.855376][T22974] Bluetooth: Error in BCSP hdr checksum [ 1110.859694][T15602] veth1_macvtap: entered promiscuous mode [ 1110.862608][T15602] veth1_macvtap: entered allmulticast mode [ 1110.868515][T15602] macsec0: left allmulticast mode [ 1110.870826][T15602] veth1_macvtap: left allmulticast mode [ 1111.103501][ T5751] Bluetooth: hci2: command 0x041b tx timeout [ 1111.106259][T11879] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1111.108616][T11879] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1111.140512][T17522] Bluetooth: Error in BCSP hdr checksum [ 1111.388998][T15639] Invalid ELF header len 18 [ 1111.418110][T22974] Bluetooth: Error in BCSP hdr checksum [ 1111.460507][T15636] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 1111.511481][T15636] __nla_validate_parse: 57 callbacks suppressed [ 1111.511507][T15636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11502'. [ 1111.525412][T15641] lo speed is unknown, defaulting to 1000 [ 1111.529441][T15641] xfrm0 speed is unknown, defaulting to 1000 [ 1111.701360][T22974] Bluetooth: Error in BCSP hdr checksum [ 1111.754187][T15654] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 1112.010065][T17522] Bluetooth: Error in BCSP hdr checksum [ 1112.142076][ T42] kauditd_printk_skb: 246 callbacks suppressed [ 1112.142097][ T42] audit: type=1400 audit(1105.402:57015): avc: denied { allowed } for pid=15661 comm="syz.4.11509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1112.156748][ T42] audit: type=1400 audit(1105.411:57016): avc: denied { create } for pid=15661 comm="syz.4.11509" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1112.176927][ T42] audit: type=1400 audit(1105.439:57017): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=56080 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1112.284725][T22974] Bluetooth: Error in BCSP hdr checksum [ 1112.334670][ T42] audit: type=1400 audit(1105.578:57018): avc: denied { map_create } for pid=15587 comm="syz.0.11488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1112.346637][ T42] audit: type=1400 audit(1105.578:57019): avc: denied { map_read map_write } for pid=15587 comm="syz.0.11488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1112.376883][ T42] audit: type=1400 audit(1105.614:57020): avc: denied { read } for pid=15668 comm="syz.4.11511" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1112.392806][ T42] audit: type=1400 audit(1105.614:57021): avc: denied { open } for pid=15668 comm="syz.4.11511" path="/dev/dri/renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1112.419841][ T42] audit: type=1400 audit(1105.661:57022): avc: denied { read append } for pid=15671 comm="syz.0.11512" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1112.433502][ T42] audit: type=1400 audit(1105.661:57023): avc: denied { open } for pid=15671 comm="syz.0.11512" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1112.444189][ T42] audit: type=1400 audit(1105.661:57024): avc: denied { ioctl } for pid=15671 comm="syz.0.11512" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1112.568376][T17530] Bluetooth: Error in BCSP hdr checksum [ 1112.673561][T15983] blk_print_req_error: 112 callbacks suppressed [ 1112.673584][T15983] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1112.691504][T15983] buffer_io_error: 139 callbacks suppressed [ 1112.691525][T15983] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1112.714946][T15085] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1112.720083][T15085] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1112.723041][T15085] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1112.726433][T15085] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1112.730610][T15085] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1112.735295][T15085] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1112.739331][T15085] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1112.743329][T15085] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1112.755484][T15085] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1112.759287][T15085] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1112.766925][T15085] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1112.770867][T15085] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1112.774876][T15085] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1112.778741][T15085] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1112.782588][T15085] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1112.787062][T15085] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1112.796682][ T2137] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1112.800171][ T2137] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1112.810456][T15698] ldm_validate_partition_table(): Disk read failed. [ 1112.839364][T15698] Dev nbd0: unable to read RDB block 0 [ 1112.848623][T22974] Bluetooth: Error in BCSP hdr checksum [ 1112.881468][T15698] nbd0: unable to read partition table [ 1112.895886][T15698] NILFS (nbd0): unable to read superblock [ 1113.130858][T22974] Bluetooth: Error in BCSP hdr checksum [ 1113.357469][ T5751] Bluetooth: hci0: command 0x0c20 tx timeout [ 1113.357488][T11879] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1113.363122][T11879] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1113.412697][T22974] Bluetooth: Error in BCSP hdr checksum [ 1113.694333][T17513] Bluetooth: Error in BCSP hdr checksum [ 1113.884918][T15739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11531'. [ 1113.976384][ T40] Bluetooth: Error in BCSP hdr checksum [ 1114.007156][T15746] usb usb7: usbfs: process 15746 (syz.0.11534) did not claim interface 0 before use [ 1114.012326][T15746] dlm: no locking on control device [ 1114.107053][T15753] netlink: 12314 bytes leftover after parsing attributes in process `syz.8.11537'. [ 1114.111149][T15753] netlink: 12314 bytes leftover after parsing attributes in process `syz.8.11537'. [ 1114.258068][ T40] Bluetooth: Error in BCSP hdr checksum [ 1114.539572][ T40] Bluetooth: Error in BCSP hdr checksum [ 1114.813536][T15765] netlink: 199784 bytes leftover after parsing attributes in process `syz.8.11541'. [ 1114.818308][T15765] netlink: 'syz.8.11541': attribute type 1 has an invalid length. [ 1114.822303][T17522] Bluetooth: Error in BCSP hdr checksum [ 1115.000248][T15769] input: syz1 as /devices/virtual/input/input123 [ 1115.103273][ T40] Bluetooth: Error in BCSP hdr checksum [ 1115.334389][T15787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11546'. [ 1115.337942][T15787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11546'. [ 1115.395423][T22974] Bluetooth: Error in BCSP hdr checksum [ 1115.545358][T15798] 9pnet_virtio: no channels available for device ./file0 [ 1115.613581][T11879] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1115.616457][T11879] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1115.622426][ C3] ------------[ cut here ]------------ [ 1115.628817][ C3] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 1115.632212][ C3] WARNING: kernel/workqueue.c:2305 at __queue_work+0xd2d/0x12b0, CPU#3: swapper/3/0 [ 1115.636027][ C3] Modules linked in: [ 1115.638409][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1115.642404][ C3] Tainted: [L]=SOFTLOCKUP [ 1115.644485][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1115.648344][ C3] RIP: 0010:__queue_work+0xd31/0x12b0 [ 1115.650427][ C3] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d b3 21 56 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 1115.657005][ C3] RSP: 0018:ffffc900006f8be0 EFLAGS: 00010046 [ 1115.659149][ C3] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100ba8014e [ 1115.662003][ C3] RDX: ffff888013e63170 RSI: ffffffff8aab9ad0 RDI: ffffffff91255840 [ 1115.664727][ C3] RBP: ffff88805d400a58 R08: 0000000000000005 R09: 0000000000000000 [ 1115.667685][ C3] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888013e63000 [ 1115.670674][ C3] R13: 0000000000000000 R14: ffffffff81cf3c20 R15: 0000000000000001 [ 1115.674137][ C3] FS: 0000000000000000(0000) GS:ffff8880d60ef000(0000) knlGS:0000000000000000 [ 1115.678475][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1115.681538][ C3] CR2: 00007fb63ba00ff8 CR3: 000000012561e000 CR4: 0000000000352ef0 [ 1115.685018][ C3] DR0: 0000000000000003 DR1: fffffffffffeffff DR2: fffffffffffffff9 [ 1115.687870][ C3] DR3: 00000000000000d4 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1115.690904][ C3] Call Trace: [ 1115.692133][ C3] [ 1115.693302][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1115.696382][ C3] call_timer_fn+0x19a/0x610 [ 1115.698776][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 1115.700927][ C3] ? __run_timers+0x560/0xb00 [ 1115.702785][ C3] ? __run_timers+0x560/0xb00 [ 1115.704317][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1115.706251][ C3] __run_timers+0x570/0xb00 [ 1115.707982][ C3] ? __pfx___run_timers+0x10/0x10 [ 1115.709913][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 1115.711666][ C3] run_timer_base+0x114/0x190 [ 1115.713307][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 1115.714969][ C3] run_timer_softirq+0x1a/0x50 [ 1115.716565][ C3] handle_softirqs+0x1ea/0x9b0 [ 1115.718630][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 1115.720477][ C3] ? _raw_spin_unlock+0x28/0x50 [ 1115.722143][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1115.724074][ C3] __irq_exit_rcu+0x162/0x210 [ 1115.725673][ C3] irq_exit_rcu+0x9/0x30 [ 1115.727201][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1115.729672][ C3] [ 1115.731613][ C3] [ 1115.733670][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1115.736766][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1115.739349][ C3] Code: 96 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 63 79 13 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1115.747365][ C3] RSP: 0018:ffffc90000197e00 EFLAGS: 00000206 [ 1115.749495][ C3] RAX: 000000000075e909 RBX: ffff88801f29a540 RCX: ffffffff8bb822d5 [ 1115.752457][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a1bad RDI: ffffffff8c400b80 [ 1115.755393][ C3] RBP: ffffed1003e534a8 R08: 0000000000000001 R09: ffffed100d4e678d [ 1115.758135][ C3] R10: ffff88806a733c6b R11: 0000000000000000 R12: 0000000000000000 [ 1115.760773][ C3] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 1115.763448][ C3] ? ct_kernel_exit+0x125/0x180 [ 1115.765684][ C3] default_idle+0x9/0x10 [ 1115.767894][ C3] default_idle_call+0x6c/0xb0 [ 1115.770371][ C3] do_idle+0x3a7/0x5b0 [ 1115.772263][ C3] ? __pfx_do_idle+0x10/0x10 [ 1115.774353][ C3] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 1115.776403][ C3] cpu_startup_entry+0x4f/0x60 [ 1115.778126][ C3] start_secondary+0x21d/0x2d0 [ 1115.779777][ C3] ? __pfx_start_secondary+0x10/0x10 [ 1115.781730][ C3] common_startup_64+0x13e/0x158 [ 1115.784081][ C3] [ 1115.785431][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1115.788741][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1115.792581][ C3] Tainted: [L]=SOFTLOCKUP [ 1115.794016][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1115.797347][ C3] Call Trace: [ 1115.798593][ C3] [ 1115.799815][ C3] dump_stack_lvl+0x100/0x190 [ 1115.801859][ C3] vpanic+0x552/0x970 [ 1115.803574][ C3] ? __pfx_vpanic+0x10/0x10 [ 1115.805546][ C3] panic+0xd1/0xe0 [ 1115.807192][ C3] ? __pfx_panic+0x10/0x10 [ 1115.808817][ C3] ? check_panic_on_warn+0x1f/0x90 [ 1115.810749][ C3] check_panic_on_warn.cold+0x19/0x34 [ 1115.812802][ C3] ? __queue_work+0xd2d/0x12b0 [ 1115.814743][ C3] __warn.cold+0x191/0x318 [ 1115.816795][ C3] __report_bug+0x30f/0x440 [ 1115.819263][ C3] ? __queue_work+0xd2d/0x12b0 [ 1115.821842][ C3] ? __pfx___report_bug+0x10/0x10 [ 1115.823935][ C3] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1115.826182][ C3] ? debug_object_activate+0x343/0x4b0 [ 1115.828351][ C3] ? __css_rstat_updated+0x1ce/0x5a0 [ 1115.830067][ C3] ? look_up_lock_class+0x55/0x120 [ 1115.831870][ C3] report_bug_entry+0xe1/0x290 [ 1115.834622][ C3] ? __queue_work+0xd31/0x12b0 [ 1115.837792][ C3] handle_bug+0x1cd/0x2a0 [ 1115.839860][ C3] exc_invalid_op+0x17/0x50 [ 1115.841976][ C3] asm_exc_invalid_op+0x1a/0x20 [ 1115.844019][ C3] RIP: 0010:__queue_work+0xd31/0x12b0 [ 1115.846296][ C3] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d b3 21 56 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 1115.854033][ C3] RSP: 0018:ffffc900006f8be0 EFLAGS: 00010046 [ 1115.857931][ C3] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100ba8014e [ 1115.862147][ C3] RDX: ffff888013e63170 RSI: ffffffff8aab9ad0 RDI: ffffffff91255840 [ 1115.865430][ C3] RBP: ffff88805d400a58 R08: 0000000000000005 R09: 0000000000000000 [ 1115.868762][ C3] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888013e63000 [ 1115.872075][ C3] R13: 0000000000000000 R14: ffffffff81cf3c20 R15: 0000000000000001 [ 1115.875521][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1115.878631][ C3] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1115.881324][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1115.884075][ C3] call_timer_fn+0x19a/0x610 [ 1115.886095][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 1115.888309][ C3] ? __run_timers+0x560/0xb00 [ 1115.890349][ C3] ? __run_timers+0x560/0xb00 [ 1115.892412][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1115.894619][ C3] __run_timers+0x570/0xb00 [ 1115.896386][ C3] ? __pfx___run_timers+0x10/0x10 [ 1115.898446][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 1115.900617][ C3] run_timer_base+0x114/0x190 [ 1115.902655][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 1115.904763][ C3] run_timer_softirq+0x1a/0x50 [ 1115.906689][ C3] handle_softirqs+0x1ea/0x9b0 [ 1115.908685][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 1115.910828][ C3] ? _raw_spin_unlock+0x28/0x50 [ 1115.913008][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1115.915953][ C3] __irq_exit_rcu+0x162/0x210 [ 1115.918293][ C3] irq_exit_rcu+0x9/0x30 [ 1115.920115][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1115.922312][ C3] [ 1115.923278][ C3] [ 1115.924245][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1115.926181][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1115.928165][ C3] Code: 96 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 63 79 13 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1115.935813][ C3] RSP: 0018:ffffc90000197e00 EFLAGS: 00000206 [ 1115.938483][ C3] RAX: 000000000075e909 RBX: ffff88801f29a540 RCX: ffffffff8bb822d5 [ 1115.941323][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a1bad RDI: ffffffff8c400b80 [ 1115.943935][ C3] RBP: ffffed1003e534a8 R08: 0000000000000001 R09: ffffed100d4e678d [ 1115.946840][ C3] R10: ffff88806a733c6b R11: 0000000000000000 R12: 0000000000000000 [ 1115.950067][ C3] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 1115.952878][ C3] ? ct_kernel_exit+0x125/0x180 [ 1115.954449][ C3] default_idle+0x9/0x10 [ 1115.955817][ C3] default_idle_call+0x6c/0xb0 [ 1115.957568][ C3] do_idle+0x3a7/0x5b0 [ 1115.959324][ C3] ? __pfx_do_idle+0x10/0x10 [ 1115.961424][ C3] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 1115.964043][ C3] cpu_startup_entry+0x4f/0x60 [ 1115.965964][ C3] start_secondary+0x21d/0x2d0 [ 1115.967693][ C3] ? __pfx_start_secondary+0x10/0x10 [ 1115.969455][ C3] common_startup_64+0x13e/0x158 [ 1115.971116][ C3] [ 1115.973124][ C3] Kernel Offset: disabled [ 1115.974835][ C3] Rebooting in 86400 seconds..