last executing test programs: 1m27.497164558s ago: executing program 2 (id=27): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000000, 0xe0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dt2817\x00', [0x83fe, 0x4, 0x228, 0x4, 0x1, 0xcc7, 0x5, 0x8d, 0x8, 0x2d21, 0x2, 0x1, 0x1, 0xb, 0x8026, 0xf8, 0x6, 0x1a549, 0x40009, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) ioctl$COMEDI_BUFINFO(r1, 0xc02c640e, &(0x7f0000000000)={0x2, 0x5, 0x84, 0xd, 0x4, 0x10000, 0x8e}) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x8, 0x4, 0x4, 0x7fff, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x80000001}, 0x8) (async) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) writev(r3, &(0x7f0000000000), 0x0) (async) readv(r3, &(0x7f0000000700)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1) 1m26.600154176s ago: executing program 2 (id=37): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @remote}, 0xa, 0x0, 0xff, 0x1, 0x0, 0xffff}, 0x20) 1m26.599780328s ago: executing program 2 (id=38): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x54}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x9, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x88c0) 1m26.499553982s ago: executing program 2 (id=42): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mount(0x0, 0x0, &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x378}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket(0x10, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) symlink(0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000340)=0x800003, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000680040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m26.148369919s ago: executing program 2 (id=47): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x28d) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000}, 0x50) getsockopt$inet6_int(r1, 0x29, 0x18, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x1000}]}) io_setup(0x1, &(0x7f0000000100)=0x0) r5 = eventfd(0x2) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000300)={0xfffffffffffffffa, r1, 'id1\x00'}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x381200, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) ioctl$SG_IO(r8, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffe, 0x0, 0x6b, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0), &(0x7f0000002240)=""/4103, 0x0, 0x10010, 0x0, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r10, 0x40045532, &(0x7f0000000040)) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r12 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_PREPARE(r12, 0x4140, 0x0) eventfd2(0x9, 0x80801) io_submit(r4, 0x5, &(0x7f0000000700)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xd, r3, &(0x7f0000000240)="0e4be2a1e73210b679f3b83e4d90457453404d93419064282e7194d112", 0x1d, 0x4, 0x0, 0x2, r5}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x7f, r3, &(0x7f00000002c0)="b010fa23b6c219ee4ea9dbb0f7e4399761467db3ff1d2424a6094acd8d", 0x1d, 0x2, 0x0, 0x3, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x2800, r1, 0x0, 0x0, 0xffffffffffffff53, 0x0, 0x1, r7}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x13, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="3f61a545d8deb925fb81c0a8ba07c1ab40bfb8c6c9f5791a45819b21586a797cd3821a81bf91dcad55f354d66da49dc2d98d41f558aa35fbcb014a56b52102fcbc70baf01635c37848b5963069496d4591e3272c0ea2b3d6a1732f7354dc663c7595c2a81aa6c396783167a696caabcd50a50ad4f257e1d9eb5142a9cd1e03a6d7a9a3ead895654a524330baa915ecbefead187bed9434d6467ffeb95970e60572a6a349abcd85a5ed227bd0c214706d52931b", 0xb3, 0x4, 0x0, 0x2}]) r13 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r13, 0x40946400, 0x0) 1m25.208992881s ago: executing program 2 (id=62): set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000014) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f0000000680)=[{0x2, 0x5, 0xb}, {0x5, 0xff, 0x7}], 0x2, 0x1ff}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f00000006c0)=""/4096, &(0x7f0000000100)=0x1000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000b, 0x42032, 0xffffffffffffffff, 0x200000000000000) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000014) (async) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) (async) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f0000000680)=[{0x2, 0x5, 0xb}, {0x5, 0xff, 0x7}], 0x2, 0x1ff}) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r3, 0x0) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f00000006c0)=""/4096, &(0x7f0000000100)=0x1000) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000b, 0x42032, 0xffffffffffffffff, 0x200000000000000) (async) 1m10.060130562s ago: executing program 32 (id=62): set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000014) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f0000000680)=[{0x2, 0x5, 0xb}, {0x5, 0xff, 0x7}], 0x2, 0x1ff}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f00000006c0)=""/4096, &(0x7f0000000100)=0x1000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000b, 0x42032, 0xffffffffffffffff, 0x200000000000000) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000014) (async) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) (async) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f0000000680)=[{0x2, 0x5, 0xb}, {0x5, 0xff, 0x7}], 0x2, 0x1ff}) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r3, 0x0) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f00000006c0)=""/4096, &(0x7f0000000100)=0x1000) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000b, 0x42032, 0xffffffffffffffff, 0x200000000000000) (async) 48.850721627s ago: executing program 4 (id=602): syz_open_dev$tty1(0xc, 0x4, 0x3) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x12) 48.850031278s ago: executing program 4 (id=603): mprotect(&(0x7f00001ae000/0x1000)=nil, 0x1000, 0x5) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$can_bcm(0x1d, 0x2, 0x2) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140)) (async) r2 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140)) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x111}, 0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x60e0) ioctl$KVM_RUN(r5, 0xae80, 0x0) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000000c0)='\x00\x00', 0x0, r6) socket$inet(0x2, 0x2, 0x800) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000100)={0x92f3, 0x6, [{0x0, 0x1}, {}, {0xa, 0x1}, {0x7}, {0xf, 0x1}, {0x1}]}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) setsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000000)=0x92c, 0xfffffffffffffdf7) 48.57935642s ago: executing program 4 (id=607): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x6e}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002e000000", @ANYRES32=0x0, @ANYBLOB="0a00340002020202020200100a000600"], 0x3c}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) sched_setattr(r3, &(0x7f0000000640)={0x38, 0x6, 0x10000000, 0x4, 0x5, 0x9, 0x0, 0x5, 0xb9ad, 0x3ff}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x0, 0x3f, {r3}, {r4}, 0x1c0000000000000, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 48.577273235s ago: executing program 4 (id=609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) r2 = syz_io_uring_complete(0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xa4, r1, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xc}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x46000}, 0x48090) 48.489284844s ago: executing program 4 (id=610): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x80}}, 0x2004c9c1) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x1, 0x700001f7299a4aad) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x370, 0x0, 0xffffffff, 0x228, 0x228, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x87, 0x4e1c, 0x4e23, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xb, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @icmp_id=0x66}}}}, {{@ip={@multicast1, @rand_addr=0x64010101, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x5}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) (async) r3 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0906, 0x2, '\x00', @p_u32=&(0x7f00000000c0)}}) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="11000400000000000000060000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080091000000000006001600020000000500120000000000"], 0x54}}, 0x0) 48.410207868s ago: executing program 4 (id=611): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000740)={0x2, 0x0, @ioapic={0x0, 0x4, 0x0, 0x0, 0x0, [{}, {0x0, 0x4}, {}, {0x0, 0x2}, {0x0, 0x0, 0x2, '\x00', 0x4}, {0x6, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x5}, {}, {}, {}, {0x3, 0x0, 0x1, '\x00', 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {0x6}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x2}, {0x81, 0x7}]}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000008800000001"], 0x48) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x24, 0x3, 0x0, 0x3, 0x0, 0x7, 0x6, 0x6, 0x7f}}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000035, 0x400fff, 0x14000000215b9037, 0x40180, 0x1, 0x11, 0x8000000000f2, 0x0, 0x3, 0x20000005, 0x5, 0xc6bd, 0x566, 0x45, 0x5, 0x7], 0x6006, 0x1c0293}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x302, 0xb92, 0xe0, 0x2, 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x80000000) (async) r7 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r7, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) 47.040967552s ago: executing program 3 (id=625): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000040000100fcff070004000000010000000400488014000180100010800c000b80080091002d2e2600080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c811}, 0x4008094) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) mount(0x0, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)='debugfs\x00', 0x200010, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') 47.039375125s ago: executing program 3 (id=626): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xb}, 0x10) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x801) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x6, 0x1, 0x3, 0x6, '\x00', 0x800003}, 0x1, [0x5e, 0x2, 0x400, 0x80000000, 0x7f, 0x3de3, 0xc, 0xffffffff00000000, 0x1, 0x5, 0x2000020, 0x4, 0x60, 0x4, 0x4, 0x4, 0x6, 0x405, 0x6, 0x3, 0x0, 0x9, 0x6fa80, 0x60, 0x3, 0x2120, 0x2, 0x1, 0x5, 0x6, 0x101, 0x3, 0x7, 0x1000, 0x0, 0x9, 0x4, 0xff, 0x141, 0xfffffffffffffff7, 0x8, 0x7, 0x93a8, 0x2, 0x1, 0x48b6, 0x7, 0x3, 0x2, 0x4, 0x4, 0x8, 0x4, 0x2, 0x6df, 0x8000000000000001, 0x3ff, 0x2, 0x9e36, 0x5, 0x1, 0xfffffffffdfffff8, 0x9, 0x7, 0x1, 0x80, 0x1000000000008001, 0x8, 0x4, 0x0, 0x8f, 0x1, 0x8, 0x5, 0xb, 0x7ff, 0x6, 0x101, 0x3, 0x0, 0x804, 0x8, 0x8, 0x3, 0x5, 0x1, 0xff, 0xfffffffffffffffc, 0x8001, 0x8000000000002, 0x8, 0xad1, 0xdc, 0xfffffffffffffffb, 0xff, 0x188, 0x1, 0x7, 0x7fff, 0x5, 0xd, 0x2, 0x8000000000000000, 0x6, 0x3, 0x4, 0x9211, 0xfffffffffffffffc, 0xb, 0xb36, 0xe34, 0x80, 0x4, 0x9, 0x4, 0x5b9, 0xf7, 0x28, 0x2, 0x9, 0x1, 0x10, 0x12, 0x8, 0xffffffffffffffc8, 0xd1, 0x1ff, 0x10000]}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x20000090}, 0x48800) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000000)=0x80, 0x4) bind$can_raw(r4, &(0x7f0000000200)={0x1d, r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$SG_GET_ACCESS_COUNT(r6, 0x5459, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r9, 0x0, 0x13, &(0x7f0000000000)=0x2, 0x4) r10 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ppoll(&(0x7f00000003c0)=[{r10, 0x40}], 0x1, &(0x7f0000000480)={0x0, 0x3938700}, 0x0, 0x0) sendto$inet(r9, 0x0, 0x0, 0x24040014, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="05000000000000e7ff000600000008000300", @ANYRES32=r12, @ANYBLOB="0800050007000000"], 0x24}}, 0x20000891) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000140)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="40010000", @ANYRES16=r11, @ANYBLOB="020028bd7000fddbdf252e0000000c009900880600004c000000940051805400008009000100a08b59e768000000140008800400010004000200040001000400010004000600040006000800030000000000110001003b13dec46f5ec198778ffe0be60000000c000880040001000400020018000080110001001a9813959eb44153ba57de95d40000000c00008006000400c8870000080000800400060010000080040005000800070001000000040093001000e3800c000000040001000400010010009d0002000000040060000700000039c1af0008003500050000000400d00004001e014300fe001c24011c8dc9ed5af73fee5f4806c7ad85d0a7a1b15aa18e69ffdd0b089f84ee0e9616c2cf0c82a9b97b3bf7fb0b8c5ec09199d1b86da3b768b54572d7394f000a00340001010101010100000400af00"], 0x140}, 0x1, 0x0, 0x0, 0x4004801}, 0x40) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff2, 0xffe0}, {0x9, 0x4}, {0xb, 0x2}}, ["", "", "", "", "", ""]}, 0xffffffffffffff45}, 0x1, 0x0, 0x0, 0x8041}, 0x80) 46.900544934s ago: executing program 3 (id=627): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x28d) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000}, 0x50) getsockopt$inet6_int(r1, 0x29, 0x18, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x1000}]}) io_setup(0x1, &(0x7f0000000100)=0x0) r5 = eventfd(0x2) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000300)={0xfffffffffffffffa, r1, 'id1\x00'}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x381200, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) ioctl$SG_IO(r8, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffe, 0x0, 0x6b, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0), &(0x7f0000002240)=""/4103, 0x0, 0x10010, 0x0, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r10, 0x40045532, &(0x7f0000000040)) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r12 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_PREPARE(r12, 0x4140, 0x0) eventfd2(0x9, 0x80801) io_submit(r4, 0x5, &(0x7f0000000700)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xd, r3, &(0x7f0000000240)="0e4be2a1e73210b679f3b83e4d90457453404d93419064282e7194d112", 0x1d, 0x4, 0x0, 0x2, r5}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x7f, r3, 0x0, 0x0, 0x2, 0x0, 0x3, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x2800, r1, &(0x7f00000003c0)="8e4e005b54d33957fe19bb468ac7f8266ab08bcb67b76b2a673871b5497038dcee08282ed8be64fd2006f110277fc85d72159bd62e2c193085717252718a0e2c05a398fd2f79cd4eb6549e3dfcc05eee6da72805f3402fd8db7ef5dc2f0c8f7118cf386419c98857ac0fb0e13f9b11c33a8e9c17f9d129d9c0294e4fd35aa796d5ba734af74b6a63ff9847", 0x8b, 0xffffffffffffff53, 0x0, 0x1, r7}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x13, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="3f61a545d8deb925fb81c0a8ba07c1ab40bfb8c6c9f5791a45819b21586a797cd3821a81bf91dcad55f354d66da49dc2d98d41f558aa35fbcb014a56b52102fcbc70baf01635c37848b5963069496d4591e3272c0ea2b3d6a1732f7354dc663c7595c2a81aa6c396783167a696caabcd50a50ad4f257e1d9eb5142a9cd1e03a6d7a9a3ead895654a524330baa915ecbefead187bed9434d6467ffeb95970e60572a6a349abcd85a5ed227bd0c214706d52931b", 0xb3, 0x4, 0x0, 0x2}]) r13 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r13, 0x40946400, 0x0) 45.938696808s ago: executing program 3 (id=648): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x2301111, 0x0, 0x1f, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000480)='./cgroup/file0\x00', 0x0, 0x400, 0x0) ptrace$setregs(0xf, r0, 0x40, &(0x7f00000004c0)="cdd28ff8149d869f521d04dabbd103b32fd440fd12b1417a1982ebec6195fe3acabcba2c5d02c9c84e1424cd7ed6a2cc09923a9d7d37ff266c268f78ced854d51d216fef8b9d234827") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xb, 0x7, 0x643, 0x800, 0x10000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40}, 0x94) r3 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x4084, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000305000004004580100001800800260000000000000000000000000000003453969b7cc383bbed763e0f12cbdf96e2fd8ac6516fb7f56f7f57361e542d1605288f25f82df1a08c2a2988880c9ff3b4819b3b1cb6d873553d2b95d5711c2d4193b94c84e3b8a7fbdeae3c8c68a93496d1baff3867c17e2ed96184653f655c600d9fa8c16297531d5118ffc43e42dcefa3d59c41bf9215a2448dcebf9a47de6a1f93ed22861dcb977b4133bc41ce5de1754bfa1ca28d67e5114931dfa8a656ad5223f00fb416dd5c18f8ba21c6b922ccb3c667636e6818138d60e3c3054f0af6bfa8c6d62c78225d2ded07dde1a8edaea57584aa", @ANYRES32=0x0, @ANYBLOB="0400d680"], 0x28}, 0x1, 0x0, 0x0, 0x40881}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16, 0x9}]}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) listen(0xffffffffffffffff, 0xda8c) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r6) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r8, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 45.81971038s ago: executing program 3 (id=653): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000000)={0xc001, 0x200, '\x00', 0x3}) 45.567298658s ago: executing program 3 (id=661): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x20, 0x70bd2a, 0x25dfdbfe, {0x2, 0x10, 0x0, 0x2, 0xfd, 0x3, 0xff, 0x5, 0x13707706caeaeb11}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000008c}, 0x80) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x599681) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 45.472083633s ago: executing program 33 (id=661): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x20, 0x70bd2a, 0x25dfdbfe, {0x2, 0x10, 0x0, 0x2, 0xfd, 0x3, 0xff, 0x5, 0x13707706caeaeb11}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000008c}, 0x80) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x599681) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 33.403217906s ago: executing program 34 (id=611): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000740)={0x2, 0x0, @ioapic={0x0, 0x4, 0x0, 0x0, 0x0, [{}, {0x0, 0x4}, {}, {0x0, 0x2}, {0x0, 0x0, 0x2, '\x00', 0x4}, {0x6, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x5}, {}, {}, {}, {0x3, 0x0, 0x1, '\x00', 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {0x6}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x2}, {0x81, 0x7}]}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000008800000001"], 0x48) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x24, 0x3, 0x0, 0x3, 0x0, 0x7, 0x6, 0x6, 0x7f}}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000035, 0x400fff, 0x14000000215b9037, 0x40180, 0x1, 0x11, 0x8000000000f2, 0x0, 0x3, 0x20000005, 0x5, 0xc6bd, 0x566, 0x45, 0x5, 0x7], 0x6006, 0x1c0293}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x302, 0xb92, 0xe0, 0x2, 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x80000000) (async) r7 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r7, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) 2.026761896s ago: executing program 5 (id=1263): r0 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000040)) getsockname$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) r2 = dup2(r0, r0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180)=0x1, 0x4) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f00000001c0)=""/239) sendmsg$can_raw(r2, &(0x7f00000003c0)={&(0x7f00000002c0), 0x10, &(0x7f0000000380)={&(0x7f0000000300)=@canfd={{0x0, 0x1}, 0xf, 0x3, 0x0, 0x0, "f2c257f7fa19872a9685d7667da93d67b0f9955ce378ce4acbdfaffef39efec96b0bb8a51d95bf4828f738fdbcb6ca00701c912e2e71629cc388978cd816afc9"}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20008050) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000440)={0x5, &(0x7f0000000400)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000540)={r3, &(0x7f0000000480)=""/189}) accept$ax25(r0, &(0x7f0000000580)={{0x3, @bcast}, [@remote, @remote, @rose, @default, @netrom, @bcast, @rose, @default]}, &(0x7f0000000600)=0x48) getsockname$l2tp6(r2, &(0x7f0000000640)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000680)=0x20) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000006c0), 0x4) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000840)="f97b626ae0bf083a3adc080e5b4039a8b83a046303093e6d3b55e604815c8f4d3a55c7f15cfba3bfb2427421675e575b7b9d957df1d2311e4d26de68908377558cd546394d10727626036ff8e797e0976cb20b1628afde68c6f8093023742954f62a1e78c3a29a", 0x67, 0x40000, &(0x7f00000008c0)={0xa, 0x4e23, 0x1000, @private1, 0x81}, 0x1c) r5 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r5, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000900)=""/41, 0x29}, {&(0x7f0000000940)=""/237, 0xed}, {&(0x7f0000000a40)=""/138, 0x8a}], 0x3, &(0x7f0000000b40)=""/4096, 0x1000}, 0x40) r6 = syz_socket_connect_nvme_tcp() ioctl$SIOCGSTAMP(r6, 0x8906, &(0x7f0000001b80)) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001c00), r2) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000001e00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x144, r7, 0x200, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x69a}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd7}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x144}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e80), 0x4402, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f00)={{r2}, &(0x7f0000001e40), &(0x7f0000001ec0)=r8}, 0x20) stat(&(0x7f0000001f40)='./file0\x00', &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000002000)={{{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0x4e24, 0x5edf, 0x4e23, 0xfe01, 0xa, 0x20, 0x0, 0x6, r1, r9}, {0x7, 0x5, 0x28, 0x2f5f, 0x1, 0x9, 0x7, 0x2}, {0x2, 0x9, 0x6, 0x10000}, 0x2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@private1, 0x4d6, 0xff}, 0x2, @in6=@local, 0x3501, 0x4, 0x3, 0x3, 0x8b0b, 0x0, 0x8001}}, 0xe8) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x48, 0x3, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x8}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0xbd}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x7, 0x83a}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x801) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002280), r8) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x2c, r11, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0xa}}}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc4}, 0x2c001) write$FUSE_ENTRY(r8, &(0x7f0000002380)={0x90, 0x0, 0x0, {0x1, 0x0, 0x1, 0x101, 0x9, 0x7fff, {0x1, 0x76c8, 0x8, 0x8, 0xb9, 0xfffffffffffffffd, 0xa, 0x7fff, 0x7, 0x8000, 0x4, r9, r10, 0x8, 0x7fffffff}}}, 0x90) 1.957469922s ago: executing program 5 (id=1264): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x28d) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000}, 0x50) getsockopt$inet6_int(r1, 0x29, 0x18, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x1000}]}) io_setup(0x1, &(0x7f0000000100)=0x0) r5 = eventfd(0x2) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000300)={0xfffffffffffffffa, r1, 'id1\x00'}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x381200, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) ioctl$SG_IO(r8, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffe, 0x0, 0x6b, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0), &(0x7f0000002240)=""/4103, 0x0, 0x10010, 0x0, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r10, 0x40045532, &(0x7f0000000040)) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r12 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_PREPARE(r12, 0x4140, 0x0) eventfd2(0x9, 0x80801) io_submit(r4, 0x5, &(0x7f0000000700)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xd, r3, &(0x7f0000000240)="0e4be2a1e73210b679f3b83e4d9045", 0xf, 0x4, 0x0, 0x2, r5}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x7f, r3, &(0x7f00000002c0)="b010fa23b6c219ee4ea9dbb0f7e4399761467db3ff1d2424a6094acd8d", 0x1d, 0x2, 0x0, 0x3, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x2800, r1, &(0x7f00000003c0)="8e4e005b54d33957fe19bb468ac7f8266ab08bcb67b76b2a673871b5497038dcee08282ed8be64fd2006f110277fc85d72159bd62e2c193085717252718a0e2c05a398fd2f79cd4eb6549e3dfcc05eee6da72805f3402fd8db7ef5dc2f0c8f7118cf386419c98857ac0fb0e13f9b11c33a8e9c17f9d129d9c0294e4fd35aa796d5ba734af74b6a63ff9847", 0x8b, 0xffffffffffffff53, 0x0, 0x1, r7}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x13, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="3f61a545d8deb925fb81c0a8ba07c1ab40bfb8c6c9f5791a45819b21586a797cd3821a81bf91dcad55f354d66da49dc2d98d41f558aa35fbcb014a56b52102fcbc70baf01635c37848b5963069496d4591e3272c0ea2b3d6a1732f7354dc663c7595c2a81aa6c396783167a696caabcd50a50ad4f257e1d9eb5142a9cd1e03a6d7a9a3ead895654a524330baa915ecbefead187bed9434d6467ffeb95970e60572a6a349abcd85a5ed227bd0c214706d52931b", 0xb3, 0x4, 0x0, 0x2}]) r13 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r13, 0x40946400, 0x0) 1.876653817s ago: executing program 1 (id=1267): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0x1, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0x1, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) accept4$alg(r6, 0x0, 0x0, 0x0) (async) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) (async) sendmmsg$alg(r7, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r7, &(0x7f000000b480)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001080)=""/4095, 0xfff}], 0x1}, 0x7ff}], 0x1, 0x102, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x40100) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r8, 0xc01064bd, &(0x7f0000000180)={&(0x7f00000000c0)="e4c67209309203db8d1d69952c5e327174e19146f930605ebb49abac33ed224960c96531c01fbfa03c4fb1e2aaf78ecd264d3698d2d575d00cfcd9a868ac571ba65f5a8a5c060a0d758f74df9db8b4058e5ae851d000"/99, 0x63}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r1) 1.489836348s ago: executing program 6 (id=1275): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a0b04000000000000000002000000140000001100010000000000000700000000000a"], 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc004) 1.439056033s ago: executing program 6 (id=1276): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e224e0000", 0x58}], 0x1) (async) add_key(&(0x7f0000000ac0)='asymmetric\x00', &(0x7f0000000b00)={'syz', 0x2}, &(0x7f0000000b40)="fc479c5868cc5f3be60ca131267200c06c823825055e14240e97093029f9654a25f0f3013e2a3d99", 0xfffff, 0xffffffffffffffff) (async) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x7f}, 0x2) (async) dup(r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/125, 0x7d}], 0x1, 0x8, 0x0, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000003c0)={0x0, 0xfa, "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"}, &(0x7f0000000200)=0x102) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x7) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0x0, 0x6}, {0x0, 0x1, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (async) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x30, r8, 0x1, 0x1, 0x1, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}]}, 0x30}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x4) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xfb) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x40) (async) fchmodat(r2, &(0x7f0000000240)='./file0\x00', 0x23) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r4, @in={{0x2, 0x4e22, @multicast2}}, 0x8, 0x1ea, 0x3, 0x4, 0x1a, 0xfffffff8, 0xfa}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000180)={r9, 0x2, 0x40, 0x6}, &(0x7f00000001c0)=0x10) 1.370182995s ago: executing program 6 (id=1278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='gre0\x00'}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="b95c030000b800000000ba010000000f30c4e135f35e00f325099000009a02000000eb009a9fef0000b1000f01cfb93a000000b8e4094ff5ba000000000f30c4c3fd00b7fc4b0000d566ba2000ed0f20a3", 0x51}], 0x1, 0x11, 0x0, 0x0) r6 = accept$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @bcast}, [@bcast, @rose, @netrom, @bcast, @remote, @default, @null, @null]}, &(0x7f0000000100)=0x48) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000140)={0xa000005, 0x0, 0x0, 0x0, 0x1}) setsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000340)=0x401, 0x4) getsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000440)={{0x1, 0x0, 0x80, {0x100000, 0xeeee8000}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.367817361s ago: executing program 0 (id=1279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a00010400000000000000000a000007fd000000000400000600c3745159428f391d004e220000"], 0x24}}, 0x800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0}, 0x94) socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2, 0x0, 0x4}, 0x18) 1.366256755s ago: executing program 0 (id=1280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@random="5bb86bfba4bb", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x4, 0x2f, 0x0, @private=0xa010101, @multicast1}, {0x2001, 0x880d, 0x48, 0x0, @wg=@cookie={0x3, 0x6, "c3c649c5ddc06026fe83810e0fda3c7bb12fa2d65a6b4ac7", "ca46d9fee7499c032f101721b7a72a513d485fe06268d452057ee6a24bad4ff5"}}}}}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x44, r1, 0x917, 0x70bd2c, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) 1.300136608s ago: executing program 0 (id=1281): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/950], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}}}, 0x84) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/950], 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}]}) (async) pipe(&(0x7f0000000000)) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}}}, 0x84) (async) 1.299120654s ago: executing program 0 (id=1282): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r3, 0x300, 0x70bc2d, 0x21dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008850}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f000000050030000000000005002f000300000008000300", @ANYRES32=r6], 0x2c}}, 0x0) 1.290480518s ago: executing program 6 (id=1283): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvfrom$inet6(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 1.220416726s ago: executing program 6 (id=1284): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xe}}}, 0xa) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) epoll_create1(0x80000) sendto$packet(r1, &(0x7f0000000000)="05004305", 0x4, 0x80, &(0x7f0000000080)={0x11, 0x8100, r2}, 0x14) r3 = dup(r0) setresuid(0xee00, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="184f"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000000)) write$UHID_INPUT(r3, &(0x7f0000001040)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d52101b080d29428f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae11a973735b36d5b1b63e91c00305d9be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c580263093ca9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6fa94fc488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c766000a5e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1386abdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060fb30e900caab415db6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3c901cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ffffff7f000000007f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca405d8c5f64fdb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb40800000077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e5e2c664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53dc10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fa6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c02b5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbb25c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d060000008926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 1.140507303s ago: executing program 6 (id=1285): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x2b, 0x0, 0x0, @in6={0xa, 0x4e24, 0x3, @remote, 0x9}}, @sadb_sa={0x2, 0x1, 0x2, 0x0, 0x6, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @empty, 0x8000}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x90}, 0x1, 0x7}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000000c0)=0x81) read(r5, &(0x7f0000000140)=""/95, 0x5f) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x1000, 0xfffffffc, 'syz0\x00'}, 0x2, 0x40, 0x5, 0x0, 0x0, 0x1000, 'syz0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "1a3952b5"}]}}, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) write$9p(r6, &(0x7f0000000300)="ea80", 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41000000015001001800128008000100677470000c00028008000200", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="de5a0b0a449996a75d5fec804b1eb1b69a78cc8b00ffba944c40047d3c6784a8ebadd2851befce6aa6b65413c1d09c30452ffdb59c68395873eaf4ca0d65a6a7aa96214cbb846186b51e3622febf77b81409ed4318114d4a2e470f9f527ba5406ee66bbe4ceca50b4835dc6f03f9f57ed79d125c0dfefd63057ec49c8cccc3d777fe62c31691e59ee3a852b82581a6c5"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x2400c080) 980.122718ms ago: executing program 5 (id=1286): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x10020) (async) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0x7, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000014) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000300)={0x79, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) (async) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r5) (async, rerun: 32) getgroups(0x0, 0x0) (rerun: 32) r6 = getegid() (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 32) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) syz_fuse_handle_req(r7, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r9, r10, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=0x0) getgroups(0x3, &(0x7f0000000140)=[r6, r10, r11]) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r4, &(0x7f0000000380), 0x0}, 0x20) (async, rerun: 64) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) (rerun: 64) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r12}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r13}, 0x18) (async, rerun: 64) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r12}, 0x20) (async, rerun: 64) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000004c0)={[0xb, 0x6, 0x1ff, 0x2d6c00000000000, 0x80, 0xfffffffffffffffc, 0xb3, 0x53, 0x79ad, 0x5, 0x8, 0x8, 0x5, 0x7, 0x0, 0x3], 0x10000, 0x3877c4}) (async) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000080)=0x2) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 979.717618ms ago: executing program 1 (id=1287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12e, 0x12e, 0x6, [@union={0xe, 0x2, 0x0, 0x5, 0x1, 0x3ff, [{0x8, 0x3, 0x80}, {0x1, 0x3}]}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x1}, @struct={0x6, 0x3, 0x0, 0x4, 0x0, 0x6, [{0xa, 0x5, 0x8}, {0xe, 0x1, 0x5}, {0x1, 0x1, 0x32c8}]}, @datasec={0xe, 0x7, 0x0, 0xf, 0x2, [{0x5, 0x6, 0x73ec}, {0x2, 0xfffffff2, 0x101}, {0x2, 0x101, 0xfff}, {0x5, 0x0, 0x4}, {0x4, 0x4, 0x3}, {0x3, 0x0, 0x80000000}, {0x2, 0x8, 0x7}], "6bde"}, @float={0x3, 0x0, 0x0, 0x10, 0x10}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x77, 0x1}, @fwd={0x4}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x0, 0x3}, {0x5, 0x1}, {0x9, 0x4}]}, @float={0x10001, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x5f, 0x61, 0x0, 0x0]}}, &(0x7f0000000140)=""/6, 0x14e, 0x6, 0x0, 0x4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipmr_delroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x800000, {0x80, 0x20, 0x0, 0x40, 0x0, 0x4, 0x0, 0x5, 0x2400}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000e40)={0x964, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [{{0x254, 0x1, {{0x1}, 0xb, 0x0, 0x2, 0x7, 0x8, 'syz1\x00', "75140f24481a2b83a09334588093d553fcf90d988624a395677bb6bbf4168d51", "5581ed5593f632922aee469496bd1beff40d5111eb67f5c73aa95dc70fa6da69", [{0x3ff, 0x3ff, {0x1, 0xf}}, {0xe26d, 0x9, {0x2, 0x9}}, {0x1, 0x8000, {0x1, 0x6}}, {0x800, 0xac, {0x0, 0x9}}, {0x1000, 0x4, {0x2, 0x9}}, {0x9, 0x2, {0x0, 0x9}}, {0x8, 0x4, {0x1}}, {0x8, 0x7, {0x1, 0x7}}, {0x1, 0xfff, {0x2, 0x8}}, {0x9, 0x3, {0x1, 0x18}}, {0x8466, 0x17c, {0x1, 0x3}}, {0xf, 0x4, {0x2, 0x29c}}, {0x8, 0x5, {0x1, 0x9b}}, {0x6, 0xb, {0x1, 0xc}}, {0xc374, 0x101, {0x1, 0xff}}, {0x9, 0x10, {0x0, 0xb}}, {0x2, 0x4, {0x1, 0x3}}, {0x4, 0x6, {0x1}}, {0x4, 0x8, {0x1, 0x5}}, {0x3c7, 0xae, {0x3, 0x800}}, {0x2, 0xfd66, {0x0, 0x7fff}}, {0x100, 0xe70, {0x2, 0x5}}, {0xd8a4, 0x7, {0x1, 0x3}}, {0xb86, 0x5, {0x1, 0x80000000}}, {0x20, 0x2, {0x1, 0x3}}, {0xa, 0x8, {0x2, 0xd}}, {0x1, 0x2, {0x0, 0x2}}, {0xc6b8, 0x26, {0x3, 0x7a}}, {0x400, 0xa04, {0x3, 0x7}}, {0x6, 0x6, {0x2, 0x1}}, {0x1, 0x6, {0x3, 0x8}}, {0x7, 0x1, {0x1, 0x5}}, {0x5, 0x200, {0x2, 0x4}}, {0xfff6, 0xe92, {0x0, 0x1b94}}, {0x401, 0x0, {0x2, 0x80}}, {0x9, 0x4, {0x0, 0x2}}, {0x3, 0x7, {0x2, 0x100}}, {0xfffd, 0xe1, {0x1, 0x6}}, {0x5, 0x8000}, {0x1, 0x0, {0x1, 0x949a}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0x16, 0x10, 0x8, 0x3, 0x0, 'syz1\x00', "f2e34deeeea263d892679472cbda53ddad8a684f799c01d57b9b577d59404514", "94b418e5e5764d3c9689bd13289bfe46273ebfce2049a10979b0fee3584af640", [{0x5, 0xf, {0x1, 0xe5}}, {0x101, 0x5a, {0x3, 0x5}}, {0x8, 0x2000, {0x1, 0x6}}, {0x80, 0x100, {0x3, 0x1}}, {0x7, 0x55e3, {0x1}}, {0x200, 0x8580, {0x121d8cc0fbea3334, 0x1}}, {0xa, 0x2, {0x0, 0x80000001}}, {0x5, 0xa5f8, {0x3, 0x1}}, {0x2, 0x460, {0x2, 0xf}}, {0x40d, 0x5, {0x2, 0x631}}, {0xa774, 0x4, {0x2}}, {0x2, 0x0, {0x2, 0x7}}, {0x9511, 0x2, {0x2, 0x3}}, {0x0, 0x2db3, {0x0, 0x1000}}, {0x6, 0xffff, {0x2, 0x8}}, {0x30ad, 0x4, {0x1, 0x708}}, {0x1, 0xd, {0x1, 0x6}}, {0x9, 0xf7a, {0x2, 0x80}}, {0x1000, 0xc0, {0x1}}, {0x2, 0xfff7, {0x2, 0x6}}, {0x7ff, 0x9, {0x3, 0x5}}, {0x1, 0x7, {0x3, 0x9}}, {0x9, 0x400, {0x3}}, {0xf, 0x76a, {0x2, 0x4}}, {0x800, 0x401, {0x3, 0x7ff}}, {0x7, 0xad, {0x2, 0xffff}}, {0x101, 0x2, {0x2, 0x3}}, {0x3, 0x4, {0x1, 0x6f3}}, {0xfeff, 0xff81, {0x1, 0xa11e}}, {0xc, 0x4, {0x2, 0x6}}, {0x4, 0x6, {0x2, 0xb9d1}}, {0x6, 0xff, {0x3, 0x619}}, {0x100, 0x7, {0x0, 0xf761}}, {0xd9b0, 0x3, {0x0, 0x9b}}, {0x87, 0x6, {0x1, 0x80000001}}, {0x6, 0x0, {0x2}}, {0xd, 0xfffd, {0x1, 0x7}}, {0x3, 0x5, {0x0, 0xa}}, {0x7, 0x3, {0x2, 0x8}}, {0x6, 0x5, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0xd, 0x9, 0x1065, 0xfffe, 0x26, 'syz1\x00', "86dbd723cf2fd9167c469f08d32976dd6fe077702104ec3760ebe1a272ecbb80", "e749fbb1544a8313586a8578f721c7c438bf21c468542c7d80fe6008566c4afb", [{0xbb, 0xfd4d, {0x0, 0x1}}, {0x5, 0x7, {0x3, 0xd516}}, {0x7ff, 0x862, {0x3, 0x1c6a}}, {0x8, 0xa6, {0x0, 0x10}}, {0x1, 0x8, {0x3, 0x4}}, {0x5, 0x4, {0x2, 0x7}}, {0x9, 0x81, {0x3, 0x2}}, {0x2, 0x902, {0x1, 0x8}}, {0x4, 0xfff, {0x3, 0x7}}, {0x3, 0x55a, {0x2, 0x1}}, {0xdb34, 0xfff, {0x2, 0x4}}, {0x5, 0xfffa, {0x3, 0x1}}, {0x9653, 0x4, {0x0, 0x4}}, {0x6, 0xfffe, {0x3}}, {0x3, 0x3, {0x0, 0x473}}, {0x0, 0x8, {0x0, 0xbc47}}, {0x9, 0x0, {0x3, 0x9}}, {0x1, 0x0, {0x2, 0x3}}, {0x7, 0x8, {0x3}}, {0x6, 0x4, {0x1, 0x1}}, {0x8, 0xf, {0x3, 0x5}}, {0x6, 0x6, {0x3, 0x7}}, {0x101, 0x8, {0x2, 0x5}}, {0x0, 0xffd3, {0x3, 0x8c}}, {0x2, 0x3, {0x2, 0x2}}, {0x3, 0xfc00, {0x3, 0x3}}, {0x6, 0x7f, {0x1, 0x1ff}}, {0x5, 0x8, {0x3, 0x2}}, {0x2, 0x1ff, {0x2, 0x9}}, {0x7, 0x1, {0x0, 0x3}}, {0x101, 0x1, {0x3, 0x2}}, {0x0, 0xdde, {0x0, 0x8}}, {0x2, 0x7, {0x2, 0x2}}, {0x2, 0xfffa, {0x0, 0xcac}}, {0xfff0, 0x7, {0x1, 0xffffff01}}, {0xfff4, 0x0, {0x1, 0x3a7a2a33}}, {0x7, 0x3ff, {0x0, 0x3}}, {0xeca4, 0x4, {0x0, 0x3}}, {0x5, 0x0, {0x3, 0x4}}, {0x3, 0x2, {0x0, 0x800}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x6, 0x8, 0xdc2, 0x6, 0x15, 'syz1\x00', "e44b0eee560cbac0e5e3582d185bc6949f74bcf73bd3b71b97be31626dbc42f6", "f40a1252733459b309988e421eae0f42412ba760ef0f47da7b627ed9ee8c1e29", [{0x0, 0x100, {0x2}}, {0x0, 0xfff, {0x3, 0x5}}, {0x9, 0x8, {0x2, 0x1}}, {0x800, 0x7, {0x0, 0x7fff}}, {0x5, 0xe, {0x2, 0x200}}, {0x1fc4, 0x6, {0x0, 0x3ff}}, {0x10, 0xd3, {0x0, 0x2}}, {0x891, 0x8000, {0x3, 0xc}}, {0x37, 0x4, {0x2, 0xd201}}, {0xc822, 0x6, {0x2, 0x9e6}}, {0x3, 0x957, {0x0, 0x7}}, {0x8000, 0x2, {0x0, 0x400}}, {0x2, 0x2, {0x2, 0x5}}, {0x81, 0x1da6, {0x1}}, {0xfffc, 0xc, {0x3, 0x2}}, {0x3, 0xde, {0x1, 0x4336}}, {0x0, 0xd, {0x3, 0xfffffffb}}, {0x8, 0x8, {0x3}}, {0xffac, 0x6, {0x0, 0xbef}}, {0x2, 0x9, {0x2, 0x7135}}, {0xfc, 0x2ff, {0x3, 0x648}}, {0x5, 0x7, {0x2}}, {0xc260, 0x4, {0x1, 0x40}}, {0x7, 0x9, {0x1, 0x200}}, {0x6, 0xd, {0x1, 0x2}}, {0x4, 0xfff2, {0x3, 0x88}}, {0x8, 0x4, {0x0, 0xffffffff}}, {0x8, 0x10, {0x1, 0x8000}}, {0x8000, 0x5, {0x0, 0x9}}, {0x9, 0x6, {0x0, 0x5}}, {0x946, 0xac, {0x3, 0x4d2}}, {0x1, 0x3, {0x2, 0x9}}, {0xe852, 0x1, {0x1, 0x2}}, {0x5, 0x1, {0x3, 0x23bc}}, {0x9, 0x7, {0x3, 0x8}}, {0x8000, 0x80, {0x3, 0x9}}, {0x5, 0x9, {0x2, 0x8001}}, {0x2, 0x1, {0x1, 0x7}}, {0x8, 0xffff, {0x0, 0x18}}, {0x3, 0xfff9, {0x1, 0x7fff}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x80}, 0x40) 977.444984ms ago: executing program 5 (id=1288): mkdir(&(0x7f0000000100)='./file0\x00', 0x1bd) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x2, 0x9, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000280)={r3}) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000bc0)=@allocspi={0x224, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0xffffffffffffffff}, {@in6=@empty, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffa}, {0x0, 0xa}, 0x70bd25, 0xfffffff9, 0x2}}, [@lastused={0xc, 0xf, 0x3480000000}, @tfcpad={0x8, 0x16, 0x74}, @migrate={0xe8, 0x11, [{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x23}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x6c, 0x1, 0x0, 0x3505, 0xa, 0xa}, {@in=@remote, @in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0x64010100, 0x3c, 0x3, 0x0, 0x3504, 0xa, 0x2}, {@in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x32, 0x2, 0x0, 0x3501, 0xa, 0xa}]}, @mark={0xc, 0x15, {0x35075d, 0x9}}, @lifetime_val={0x24, 0x9, {0x7, 0x1, 0x20000000, 0x2}}]}, 0x224}}, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)=r4) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x8d7cf4b23b4c15ad, 0x201, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000980)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000380)={0x0, 0xcdf, 0xf}) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e06080d0802"], 0x9) r6 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',privport,access=', @ANYRESDEC]) 896.004723ms ago: executing program 1 (id=1289): unshare(0x2c020400) (async) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x86c421, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/10]) (async, rerun: 64) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0xf27, 0x80000000, 0x2, 0xa, 0xe, 0x5, 0x8, 0x3, 0x8, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x100006, 0x101, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xe66, 0x3, 0x8, 0x4085, 0x0, 0xfffffff8]}) (async) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x9, 0x800) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x40184152, &(0x7f0000000280)={0x0, &(0x7f0000001500)=[&(0x7f0000000040)="798d34ed1ea18099dbbce4bf46fd08f1742f28824b5f5900fd2e9470cc79013be0f3de619a7af0e5b09c604685dd650330eddbc1c9892209d2440411453c9106b81ee4f5cfc98d434dd4f411dda6057d44e4d28e8cc6f75ad8806317f5d2d44eb249930d7298bb265be0308c33bbaa6e9615f0d9518dd57359156524588098ad17bad3148665677f95bbbf8a0f2e72247431f1ca1cc34629ad3cc85a68382db384d5bf00d97e73402e7e00c735e91f6e3a5803bcbb03b1d03d8591b13f599abcfebbfadbc64ee96ed935a2266f43a47956316edca082267bfecf53720d61a5f4cc", &(0x7f00000016c0)="71be278598d986c7a6aeae14f4c46a40c65c421f64c395c57e3f0fbd732f7ad4ac05dd5942375cf0e9f420d6bfadae569f16b927dad6129ef26901b831b64705a97717485b39ff940e679f3da3eeb4d12b06427f1d59461b1c1046ef6c81053cfd8fa3e13d66eacecbc1b9a10264d46ac460a9ccdaa689c32a356fb0416d5061a1cfa22e61c71890ff44a8ce72a5901d854700d8ddfeb01512dc261266cacf46a4dbb4a3fa3cea4647434ef883e7a694dab94d69117cbd33fe218ea994f2d6dfd615fe79af363544dfc041cf1fc0e2c417b020dd332362c799", &(0x7f0000000180)="ff9c692f9236a2c273e56de61d93ac77ed5ed85a56ebd9a3752969d600e8805ecdf7ca0cb85c14dd9377f9c5fccafce9d80b17626a1352076686bc7e403f1f9d870abd729d2c992b46a59a6f6d641905ed15edf845d3e9743107ec613b9b980031f9f7a3d41f54a3e925a8649e9b798dbba4e509066acf36402a51fe69eaa2895cda6701386cbe34e9", &(0x7f0000001600)="007c9a69bca5b63b0757786571836d9a077bf94d2297e17d5b40840a108ef0332afa618f0d735ed80b897127494950d590284258f8f33e5d3c3d126f55a7d5125f886c56b65d0471a65acbdceee4870a40af2bcfd620706184fc3c5d5b4b80c800031f8f49a07a59c9ee64eb08c01368a0b2f906b44b65a517bd50c00d4d00"/141, &(0x7f0000000300)="8e3b813eabaaa2ce9f9db88f73abc841a3c026816ea4bb7650fae60dfe2f2497a6755830d6f6ac97fb46d036c7ac83c570b46e471fd26a16739a5a2d9c121f9cab4d58f8668790ddddf66f4abbb7e451656b8974c2fa8219ada66459b42f613a6b56ba5e838a6d734d543fc3481dd1567badcf7418e8a15f5b10ed224bde5894db13c52d772e3e72626337a9f2a53f18099d91ea267425b7f0b456e92e680e88e042b534a493d9c557a14530b259eb2b608b78698e1be6655d", &(0x7f0000000440)="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", &(0x7f0000001440)="2526f85b24268a00d4cc55a46304069cf4243e68e03e961fa63aafc9ac8f5a24b0e7e0d550f6cf65358b6f0d2bb3c2d2a16ae998ab74d3247ac86b009694edc5ac6db4141c9a6607ee497e35831593867f425981b3b7617f6c9ae23119c71ceef03d0d76d1d3fde6a2995a564e1a894075799acfae032428be6f85679249b5f545c930bca36390971bae117d4fde26dc824fd286958d1fe05cf0094d1412c386b5c7c785e6"], 0x4}) (async, rerun: 32) r2 = syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0xf5ca, 0x100, 0x4}, 0x0, 0x0) (async, rerun: 32) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) lseek(0xffffffffffffffff, 0x7, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) sendto$inet6(r6, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffb, @empty, 0x3}, 0x1c) (async) writev(r6, &(0x7f0000003800)=[{&(0x7f0000000400)=',', 0x1}], 0x1) r7 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r7, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @loopback, 0x3}, r8}}, 0x30) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001580)={{0x1, 0x1, 0x18, r1, {0x700000}}, './file0\x00'}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f00000015c0)) (async) ioctl$CDROMRESUME(r9, 0x5302) 895.442743ms ago: executing program 5 (id=1290): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084524, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x204, &(0x7f0000000040)={0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000140)='net/dev\x00') r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0xb, 0x0, 0x0, 0x2, 0x0, 0x4070bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x7}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES64=r2], 0x9c}, 0x1, 0x0, 0x0, 0x4840}, 0x10) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0xec5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x4000) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7fff, 0x80, 0x240}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0x3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route(r4, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@ipmr_delroute={0x5c, 0x19, 0x200, 0x70bd2a, 0x25dfdbfd, {0x80, 0xf4e2c98473a63bb7, 0x14, 0x8, 0xff, 0x0, 0x0, 0xb, 0x200}, [@RTA_SPORT={0x6, 0x1c, 0x4e23}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_PREFSRC={0x8, 0x7, @loopback}, @RTA_SPORT={0x6, 0x1c, 0x4e22}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x3, 0x81, r12}}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x22, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8848}, 0x800) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x2) socket$key(0xf, 0x3, 0x2) ioctl$TCFLSH(r9, 0x40087101, 0x1) connect$ax25(r6, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) 892.546018ms ago: executing program 1 (id=1291): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x4, 0x20040) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000040)={{0x9, 0x2, 0x6, 0x9, 'syz0\x00', 0x101}, 0x1, [0x4, 0x3, 0x469, 0x5, 0x9, 0xfff, 0x3, 0x0, 0x5, 0x1, 0x7, 0xffffffffffffff7f, 0x8600000000000000, 0x4, 0xc2, 0x5, 0x492, 0xa238, 0x8, 0x8, 0x80000000, 0xb, 0x7, 0x5, 0x5, 0x0, 0x7d52, 0x4, 0x0, 0x1fcb, 0xbb0d, 0x338, 0x3, 0xa58c, 0x5, 0xffffffffffffffff, 0xea49, 0x2000000000000000, 0x1, 0x4f60, 0xc, 0x5, 0x4, 0x6, 0x4, 0xae5b, 0x6, 0x200, 0xd, 0x8, 0x6, 0xcca, 0x7, 0xffffffffffffff00, 0xf, 0x920f, 0x8001, 0xd9, 0x2, 0x400, 0x8, 0x1, 0x2, 0x202000, 0x7fff, 0x9, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x100000001, 0x5ae, 0x6, 0x1, 0x401, 0x5, 0x8000000000000000, 0x8, 0x4, 0xd, 0x9, 0x400, 0x5f4a, 0x100000001, 0x5, 0x1, 0x9, 0x846, 0xfffffffffffffff3, 0x5, 0x5, 0x5, 0x8000000000000001, 0x0, 0x8, 0x80000000, 0x2, 0xe55, 0x6, 0x8, 0x7, 0x2, 0xfffffffffffffffa, 0x9, 0xffffffff000000, 0x3ff, 0x2, 0x8, 0x5, 0x10, 0x7, 0x5, 0x3, 0x1ff, 0x1, 0x3, 0x1ff, 0x7, 0x401, 0x7fff, 0x2, 0x80000000, 0x7f, 0xfffffffffffffffe, 0x8, 0x5, 0xdc]}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000540)={0x8, 0x6, 0x101, 0x2, '\x00', 0x5}) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) r1 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x7ff, 0x2002) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000005c0)=0x5) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r2, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r4 = socket$inet(0x2, 0x2, 0x6) bind$inet(r4, &(0x7f0000000780)={0x2, 0x4e22, @remote}, 0x10) r5 = landlock_create_ruleset(&(0x7f00000007c0)={0x241a, 0x2, 0x1}, 0x18, 0x3) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000800)={0x500, r1}, 0x0) r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f0000000840)=""/250) r7 = signalfd(r5, &(0x7f0000000940)={[0x7]}, 0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r7, 0x40405514, &(0x7f0000000980)={0x8, 0x4, 0x8, 0x4, 'syz1\x00', 0x5c1}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r2, 0x400, 0x70bd2c, 0x7, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3554ba46}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x98}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1f1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8051}, 0x20040005) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r7, 0xc0585609, &(0x7f0000000b00)={0x400, 0xb, 0x4, 0x0, 0x1, {0x0, 0x2710}, {0x1, 0x0, 0x2, 0xab, 0xfc, 0x2, "909739da"}, 0xfffffffb, 0x4, {}, 0x51, 0x0, r7}) quotactl_fd$Q_GETQUOTA(r9, 0xffffffff80000701, 0x0, &(0x7f0000000b80)) socketpair(0x1d, 0x4, 0x13dc0b46, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000000c40)={r8}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r10, {0x7, 0x8}}, './file0\x00'}) clock_adjtime(0x6, &(0x7f0000000cc0)={0x0, 0x9, 0x6, 0x6, 0x0, 0x180000000000000, 0x7, 0x7, 0xffffffffffffff7f, 0xa, 0x2, 0x8000000000000001, 0xf, 0x9, 0x2, 0x6, 0x6, 0xcf1b, 0x0, 0x7fffffff, 0x1, 0xff, 0x8, 0x2, 0xc, 0x10}) syz_open_dev$dri(&(0x7f0000000dc0), 0xe828, 0x109102) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r13, 0x40405514, &(0x7f0000000e00)={0x0, 0x1, 0x0, 0x2, '\x00', 0x6}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r12, {0x8}}, './file0/file0\x00'}) ioctl$FS_IOC_GETFSSYSFSPATH(r14, 0x80811501, &(0x7f0000000e80)={0x80}) ioctl$SG_GET_ACCESS_COUNT(r13, 0x2289, &(0x7f0000000f40)) 749.843379ms ago: executing program 5 (id=1292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) (async) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000300), &(0x7f0000000340)=r2}, 0x20) io_uring_setup(0x2e0c, &(0x7f0000000040)={0x0, 0x5a58, 0x2000, 0x3, 0x23c}) (async, rerun: 64) r3 = io_uring_setup(0x1074, &(0x7f0000000340)={0x0, 0xa0a8, 0x40, 0x3, 0x46}) (rerun: 64) close(r3) r4 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) (async, rerun: 32) sendto$inet6(r4, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) (async, rerun: 32) clock_nanosleep(0x7, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 749.367519ms ago: executing program 1 (id=1293): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f00000004000000080000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000200000018190000be19202e737f78248375f7e6194f9c6d677067b70a0007000000f04be327916600000010e42834e4bbef0a53fdf129d51ef3fe5226ab52446a3f09227890b8f235c1aae797f21cceea9e1f93dfd998fa19d92f588e35d8143e4754d0a0c62f256b", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007028b3d1e11ccf4d6dd000008000000b703fffffffffff185000000f6"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x8900, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB="0800a000ea08000008009f000d001f753008d8dacdf67ae4a18b4330a1c69a78d767a628e2b3dbdc89d3d7dc2b461c9d7239422a2d58ace3cc4bcd5c734e07e1987a86ac6678a17528dcf3d1a9c7df038598f8999c8a214ba82ead77c6a10fabd2790abb5cda210600000000000000ceffdf77aeed522871be82e865f504acf2f405000000000000003400"/148], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x2100, 0x285) socket$inet_icmp(0x2, 0x2, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000480)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 410.327401ms ago: executing program 0 (id=1294): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x28d) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000}, 0x50) getsockopt$inet6_int(r1, 0x29, 0x18, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x1000}]}) io_setup(0x1, &(0x7f0000000100)=0x0) r5 = eventfd(0x2) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000300)={0xfffffffffffffffa, r1, 'id1\x00'}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x381200, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) ioctl$SG_IO(r8, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffe, 0x0, 0x6b, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0), &(0x7f0000002240)=""/4103, 0x0, 0x10010, 0x0, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r10, 0x40045532, &(0x7f0000000040)) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r12 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_PREPARE(r12, 0x4140, 0x0) eventfd2(0x9, 0x80801) io_submit(r4, 0x5, &(0x7f0000000700)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xd, r3, &(0x7f0000000240)="0e4be2a1e73210b679f3b83e4d9045", 0xf, 0x4, 0x0, 0x2, r5}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x7f, r3, &(0x7f00000002c0)="b010fa23b6c219ee4ea9dbb0f7e4399761467db3ff1d2424a6094acd8d", 0x1d, 0x2, 0x0, 0x3, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x2800, r1, &(0x7f00000003c0)="8e4e005b54d33957fe19bb468ac7f8266ab08bcb67b76b2a673871b5497038dcee08282ed8be64fd2006f110277fc85d72159bd62e2c193085717252718a0e2c05a398fd2f79cd4eb6549e3dfcc05eee6da72805f3402fd8db7ef5dc2f0c8f7118cf386419c98857ac0fb0e13f9b11c33a8e9c17f9d129d9c0294e4fd35aa796d5ba734af74b6a63ff9847", 0x8b, 0xffffffffffffff53, 0x0, 0x1, r7}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x13, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="3f61a545d8deb925fb81c0a8ba07c1ab40bfb8c6c9f5791a45819b21586a797cd3821a81bf91dcad55f354d66da49dc2d98d41f558aa35fbcb014a56b52102fcbc70baf01635c37848b5963069496d4591e3272c0ea2b3d6a1732f7354dc663c7595c2a81aa6c396783167a696caabcd50a50ad4f257e1d9eb5142a9cd1e03a6d7a9a3ead895654a524330baa915ecbefead187bed9434d6467ffeb95970e60572a6a349abcd85a5ed227bd0c214706d52931b", 0xb3, 0x4, 0x0, 0x2}]) r13 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r13, 0x40946400, 0x0) 260.490697ms ago: executing program 0 (id=1295): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010002f8ffffffb702000008000000b703003600000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4203, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0xd0e107db848e3898, 0x8000, 0x3, 0xab4f, {{0x11, 0x4, 0x1, 0xb, 0x44, 0x64, 0x0, 0xf5, 0x29, 0x0, @loopback, @rand_addr=0x64010100, {[@lsrr={0x83, 0x27, 0x9b, [@local, @multicast2, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @multicast2, @loopback]}, @rr={0x7, 0x7, 0xb8, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000a40)={'syztnl2\x00', r4, 0x20, 0x7f10, 0x7, 0x1, {{0x31, 0x4, 0x3, 0x7, 0xc4, 0x66, 0x0, 0x9, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}, {[@generic={0x94, 0x6, "11a0f592"}, @cipso={0x86, 0x21, 0x0, [{0x6, 0x8, "f306f53a9723"}, {0x1, 0xa, "026f71dee15cb41b"}, {0x5, 0x2}, {0x7, 0x7, "aaa92ec062"}]}, @end, @end, @timestamp={0x44, 0x1c, 0x8a, 0x0, 0x0, [0x7, 0x81, 0x3, 0x200, 0x5, 0x0]}, @timestamp_prespec={0x44, 0xc, 0x45, 0x3, 0x3, [{@remote, 0x80}]}, @ssrr={0x89, 0x1b, 0x77, [@local, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1, @multicast1, @empty, @rand_addr=0x64010122]}, @generic={0x88, 0x9, "4414afe1beffe9"}, @timestamp_prespec={0x44, 0x14, 0x7d, 0x3, 0xa, [{@multicast2, 0x6}, {@broadcast, 0x7}]}, @timestamp={0x44, 0x24, 0x4c, 0x0, 0x8, [0x7fffffff, 0x100, 0x0, 0x80000000, 0x8001, 0x5, 0x2df, 0xd]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xfd, 0x401, 0x70, @loopback, @local, 0x80, 0x8000, 0x4, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x6, 0x29c8, 0x8, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7, 0x1, 0x5}}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000001410521700000000000000009500000000000019a819367bc600"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r8, r10, 0x25, 0x4, @val=@tcx={@void, @value=r8}}, 0x1c) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[@ANYBLOB="1be67730f8a659444a2f25f953093aabff00b4734a0d64dfe5c8cb41b7c1380805e8accb68338fc8c9e451fb3a1b841c9c44ac657beca4c41890928ee513ba9f", @ANYRES16=r3, @ANYBLOB="100025bd7000fbdbdf25020000003c0001800800030001000000080003000000000014000200776730000000000000000000000000001400020064766d727031000000000000000000002800018008000100", @ANYRES32=r4, @ANYBLOB="14000200776c616e300000000000000000000000080003000100000038000180140002006e69637666300000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="200001801400020076657468315f746f5f626174616476000800030003000000"], 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) fstat(r0, &(0x7f0000000640)) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='w(\x00\x00', @ANYRES16=r13, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) accept4(r1, 0x0, 0x0, 0x80800) 0s ago: executing program 1 (id=1296): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xc0, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x8000, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x400, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x1}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') (async, rerun: 64) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) (rerun: 64) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x58}}, 0x8000002) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2000}, &(0x7f0000000100)=0x8) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) kernel console output (not intermixed with test programs): ctl+0x10/0x10 [ 65.969720][ T6547] __x64_sys_ioctl+0x18e/0x210 [ 65.969734][ T6547] do_syscall_64+0xcd/0xf80 [ 65.969750][ T6547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.969761][ T6547] RIP: 0033:0x7fb5be38f3cb [ 65.969770][ T6547] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 65.969780][ T6547] RSP: 002b:00007fb5bf1e1f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.969791][ T6547] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fb5be38f3cb [ 65.969797][ T6547] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 65.969803][ T6547] RBP: 00007fb5bf1e2fe0 R08: 0000000000000000 R09: 00312e6364755f79 [ 65.969809][ T6547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.969815][ T6547] R13: 00007fb5bf1e1fb0 R14: 0000200000000000 R15: 00007fb5be710320 [ 65.969828][ T6547] [ 65.969841][ T6547] kobject: kobject_add_internal failed for raw_gadget with -EEXIST, don't try to register things with the same name in the same directory. [ 65.975172][ T6548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.978471][ T6547] Adding module 'raw_gadget' to sysfs failed (-17), the system may be unstable. [ 66.015174][ T6549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6549 comm=syz.1.160 [ 66.031213][ T6547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6547 comm=syz.1.160 [ 66.201485][ T851] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 66.571676][ T6559] __nla_validate_parse: 4 callbacks suppressed [ 66.571687][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 66.582452][ T6559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.163'. [ 66.692159][ T6578] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 66.893308][ T6594] ======================================================= [ 66.893308][ T6594] WARNING: The mand mount option has been deprecated and [ 66.893308][ T6594] and is ignored by this kernel. Remove the mand [ 66.893308][ T6594] option from the mount to silence this warning. [ 66.893308][ T6594] ======================================================= [ 66.930421][ T6597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.933539][ T6597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.123536][ T6604] QAT: Stopping all acceleration devices. [ 67.144683][ T6597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.148824][ T6597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.179115][ T6597] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 67.201448][ T6615] netlink: 'syz.0.180': attribute type 1 has an invalid length. [ 67.244830][ T6615] gre1: entered promiscuous mode [ 67.248168][ T6615] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 67.253966][ T6615] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 67.260809][ T6615] bond3: (slave gre1): making interface the new active one [ 67.264337][ T6615] bond3: (slave gre1): Enslaving as an active interface with an up link [ 67.274321][ T6621] geneve2: entered promiscuous mode [ 67.276316][ T6621] geneve2: entered allmulticast mode [ 67.279686][ T104] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.288683][ T104] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.291307][ T104] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.294164][ T104] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.405840][ T6626] netlink: 568 bytes leftover after parsing attributes in process `syz.1.183'. [ 67.485101][ T6630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.184'. [ 67.727551][ T6632] tmpfs: Bad value for 'nr_inodes' [ 67.755776][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'. [ 67.759864][ T6635] veth1_macvtap: left promiscuous mode [ 67.904571][ T6640] macsec0: entered promiscuous mode [ 67.906916][ T6640] macsec0: entered allmulticast mode [ 68.105359][ T6644] loop4: detected capacity change from 0 to 524287936 [ 68.183211][ T6646] tipc: Started in network mode [ 68.185077][ T6646] tipc: Node identity 84e, cluster identity 4711 [ 68.187218][ T6646] tipc: Node number set to 2126 [ 68.241489][ T6648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6648 comm=syz.0.190 [ 68.247212][ T6648] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.267473][ T6648] pimreg: entered allmulticast mode [ 68.271717][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'. [ 68.275532][ T6648] bridge_slave_1: left allmulticast mode [ 68.277921][ T6648] bridge_slave_1: left promiscuous mode [ 68.281331][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.289533][ T6648] bridge_slave_0: left allmulticast mode [ 68.293244][ T6648] bridge_slave_0: left promiscuous mode [ 68.295881][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.668211][ T6665] fuse: Bad value for 'user_id' [ 68.670408][ T6665] fuse: Bad value for 'user_id' [ 68.783006][ T6673] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 69.572800][ T6691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.202'. [ 69.576640][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 69.580729][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 69.585061][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 69.634304][ T6697] x_tables: duplicate underflow at hook 1 [ 70.446671][ T6714] SET target dimension over the limit! [ 70.684364][ T6727] xt_hashlimit: max too large, truncated to 1048576 [ 70.727510][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 70.727526][ T40] audit: type=1400 audit(1768199835.319:381): avc: denied { setopt } for pid=6728 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.958883][ T40] audit: type=1400 audit(1768199835.549:382): avc: denied { write } for pid=6741 comm="syz.3.218" name="001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 70.971524][ T142] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.973366][ T6743] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 70.988778][ T40] audit: type=1400 audit(1768199835.569:383): avc: denied { map } for pid=6741 comm="syz.3.218" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 71.089913][ T6759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.129666][ T6762] overlayfs: failed to resolve './bus': -2 [ 71.140753][ T6762] overlayfs: failed to resolve './bus': -2 [ 71.151447][ T142] usb 5-1: Using ep0 maxpacket: 8 [ 71.162278][ T142] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 71.165674][ T142] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.169111][ T142] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 71.181564][ T142] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.184743][ T142] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.190701][ T142] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 71.194309][ T142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.471506][ T6207] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 71.623148][ T6207] usb 8-1: config index 0 descriptor too short (expected 28277, got 36) [ 71.626657][ T6207] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.630842][ T6207] usb 8-1: config 0 has no interfaces? [ 71.634067][ T6207] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 71.637878][ T6207] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.647450][ T6207] usb 8-1: config 0 descriptor?? [ 71.962348][ T6774] usbtmc 5-1:16.0: simple usb_control_msg returned 0 [ 71.965678][ T40] audit: type=1400 audit(1768199836.559:384): avc: denied { getopt } for pid=6728 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 72.166137][ T1344] usb 5-1: USB disconnect, device number 2 [ 72.179698][ T40] audit: type=1400 audit(1768199836.769:385): avc: denied { read write } for pid=5937 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.193637][ T40] audit: type=1400 audit(1768199836.779:386): avc: denied { open } for pid=5937 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.203841][ T40] audit: type=1400 audit(1768199836.779:387): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.219735][ T40] audit: type=1400 audit(1768199836.809:388): avc: denied { read write } for pid=6775 comm="syz.1.227" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 72.231074][ T40] audit: type=1400 audit(1768199836.809:389): avc: denied { open } for pid=6775 comm="syz.1.227" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 72.266200][ T6779] __nla_validate_parse: 3 callbacks suppressed [ 72.266216][ T6779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.228'. [ 72.320740][ T6779] netlink: 'syz.1.228': attribute type 3 has an invalid length. [ 72.324750][ T6780] netlink: 'syz.1.228': attribute type 3 has an invalid length. [ 72.328327][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.228'. [ 72.716055][ T40] audit: type=1400 audit(1768199837.309:390): avc: denied { execute } for pid=6787 comm="syz.0.230" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=14791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.220795][ T6804] nfs: Unknown parameter 'fowq^ner<18446744073709551615' [ 73.398765][ T5293] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 73.697970][ T6826] netlink: 'syz.0.245': attribute type 10 has an invalid length. [ 73.713904][ T6826] veth0_vlan: left promiscuous mode [ 73.716542][ T6826] veth0_vlan: entered promiscuous mode [ 73.720013][ T6826] team0: Device veth0_vlan failed to register rx_handler [ 73.787238][ T6827] syz.0.245 uses obsolete (PF_INET,SOCK_PACKET) [ 74.187562][ T1335] usb 8-1: USB disconnect, device number 2 [ 74.487634][ T6848] openvswitch: netlink: Flow actions attr not present in new flow. [ 74.491794][ T5945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.496315][ T5945] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.499927][ T5945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.503488][ T5945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.506003][ T5945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.618142][ T6861] gtp0: entered promiscuous mode [ 74.667661][ T6847] chnl_net:caif_netlink_parms(): no params data found [ 74.780878][ T6847] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.791476][ T6847] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.793829][ T6847] bridge_slave_0: entered allmulticast mode [ 74.796699][ T6847] bridge_slave_0: entered promiscuous mode [ 74.802349][ T6847] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.804565][ T6847] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.806844][ T6847] bridge_slave_1: entered allmulticast mode [ 74.809437][ T6847] bridge_slave_1: entered promiscuous mode [ 74.824270][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 74.825439][ T6847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.830017][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 74.831652][ T6847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.848080][ T6847] team0: Port device team_slave_0 added [ 74.851184][ T6847] team0: Port device team_slave_1 added [ 74.863966][ T6847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.866203][ T6847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.874196][ T6847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.878645][ T6847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.880818][ T6847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.888880][ T6847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.912505][ T6847] hsr_slave_0: entered promiscuous mode [ 74.914763][ T6847] hsr_slave_1: entered promiscuous mode [ 74.916816][ T6847] debugfs: 'hsr0' already exists in 'hsr' [ 74.918625][ T6847] Cannot create hsr debugfs directory [ 74.987185][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 75.043810][ T6847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.048334][ T6847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.052452][ T6847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.056583][ T6847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.080034][ T6847] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.082690][ T6847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.085281][ T6847] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.087627][ T6847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.120235][ T6915] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 75.122934][ T6915] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 75.128435][ T6915] vhci_hcd vhci_hcd.0: Device attached [ 75.131305][ T6917] vhci_hcd: unknown pdu 2 [ 75.134734][ T13] vhci_hcd vhci_hcd.3: stop threads [ 75.137440][ T13] vhci_hcd vhci_hcd.3: release socket [ 75.137511][ T6847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.139231][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 75.153251][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.157075][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.167635][ T6847] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.175407][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.177671][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.183984][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.186985][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.224937][ T6922] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 75.228206][ T6922] netlink: 184 bytes leftover after parsing attributes in process `syz.1.267'. [ 75.328681][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.269'. [ 75.329079][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.269'. [ 75.357919][ T6847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.409360][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 75.412883][ T6931] netlink: 'syz.1.269': attribute type 30 has an invalid length. [ 75.412959][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 75.418960][ T6930] netlink: 'syz.1.269': attribute type 30 has an invalid length. [ 75.553409][ T6847] veth0_vlan: entered promiscuous mode [ 75.561117][ T6847] veth1_vlan: entered promiscuous mode [ 75.587044][ T6847] veth0_macvtap: entered promiscuous mode [ 75.593716][ T6847] veth1_macvtap: entered promiscuous mode [ 75.607178][ T6847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.618080][ T6847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.626432][ T4638] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.630267][ T4638] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.636560][ T4638] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.647435][ T4638] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.689805][ T6946] netlink: 'syz.3.271': attribute type 1 has an invalid length. [ 75.696966][ T4638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.699819][ T4638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.724741][ T6946] bond2: (slave geneve3): making interface the new active one [ 75.728625][ T6946] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 75.741995][ T13] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 75.757202][ T13] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 75.761897][ T13] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 75.764867][ T13] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 75.768884][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.771776][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.800875][ T6949] netlink: 'syz.3.272': attribute type 13 has an invalid length. [ 75.814465][ T6949] gretap0: refused to change device tx_queue_len [ 75.817108][ T6949] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 75.843116][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 75.843128][ T40] audit: type=1400 audit(1768199840.439:413): avc: denied { ioctl } for pid=6952 comm="syz.4.273" path="/dev/ptyqc" dev="devtmpfs" ino=139 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 75.892333][ T40] audit: type=1400 audit(1768199840.489:414): avc: denied { bind } for pid=6963 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.924141][ T40] audit: type=1400 audit(1768199840.519:415): avc: denied { wake_alarm } for pid=6967 comm="syz.0.278" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.985210][ T6974] vxlan0: entered promiscuous mode [ 75.986902][ T6974] vxlan0: entered allmulticast mode [ 75.989032][ T74] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.993695][ T74] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.996237][ T74] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.999409][ T74] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.021629][ T40] audit: type=1400 audit(1768199840.619:416): avc: denied { create } for pid=6976 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 76.028083][ T40] audit: type=1400 audit(1768199840.619:417): avc: denied { write } for pid=6976 comm="syz.0.282" path="socket:[15300]" dev="sockfs" ino=15300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 76.059940][ T40] audit: type=1400 audit(1768199840.649:418): avc: denied { bind } for pid=6980 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 76.060042][ T6980] delete_channel: no stack [ 76.135421][ T40] audit: type=1804 audit(1768199840.729:419): pid=6989 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.288" name="/newroot/79/file0" dev="tmpfs" ino=433 res=1 errno=0 [ 76.196267][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.199039][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.277984][ T40] audit: type=1400 audit(1768199840.869:420): avc: denied { unlink } for pid=7001 comm="syz.3.293" name="#b" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 76.288880][ T40] audit: type=1400 audit(1768199840.879:421): avc: denied { create } for pid=7001 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.295798][ T40] audit: type=1400 audit(1768199840.879:422): avc: denied { write } for pid=7001 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.340374][ T7008] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000005' [ 76.591826][ T5293] Bluetooth: hci4: command tx timeout [ 77.025080][ T7054] netlink: 'syz.1.307': attribute type 2 has an invalid length. [ 77.265826][ T7081] netlink: 'syz.1.316': attribute type 1 has an invalid length. [ 77.291254][ T7081] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.295773][ T7081] bond1: (slave bond2): making interface the new active one [ 77.298301][ T7081] bond1: (slave bond2): Enslaving as an active interface with an up link [ 77.308098][ T7081] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 77.314815][ T7081] __nla_validate_parse: 7 callbacks suppressed [ 77.314827][ T7081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.316'. [ 77.320269][ T7081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.411537][ T5972] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 77.507114][ T7089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.318'. [ 77.507152][ T7090] netlink: 16 bytes leftover after parsing attributes in process `syz.1.318'. [ 77.521757][ T7089] netlink: 44 bytes leftover after parsing attributes in process `syz.1.318'. [ 77.524419][ T7090] netlink: 44 bytes leftover after parsing attributes in process `syz.1.318'. [ 77.572962][ T5972] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 77.576175][ T5972] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 77.585976][ T5972] usb 8-1: config 0 interface 0 has no altsetting 0 [ 77.590813][ T5972] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 77.595267][ T5972] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 77.598628][ T5972] usb 8-1: Product: syz [ 77.602483][ T5972] usb 8-1: Manufacturer: syz [ 77.604240][ T5972] usb 8-1: SerialNumber: syz [ 77.607249][ T5972] usb 8-1: config 0 descriptor?? [ 77.612048][ T5972] hub 8-1:0.0: bad descriptor, ignoring hub [ 77.614745][ T5972] hub 8-1:0.0: probe with driver hub failed with error -5 [ 77.619207][ T5972] usb 8-1: selecting invalid altsetting 0 [ 77.644046][ T7095] SELinux: Context system_u:object_r:sound_device_t:s0 is not valid (left unmapped). [ 77.669943][ T7095] bond3: (slave bond_slave_1): Device is not our slave [ 77.672844][ T7095] bond3: option active_slave: invalid value (bond_slave_1) [ 77.676781][ T7095] bond3 (unregistering): Released all slaves [ 77.835872][ T7101] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 77.839479][ T7101] SELinux: failed to load policy [ 77.992440][ T7108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.323'. [ 78.005323][ T7108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.323'. [ 78.364376][ T7150] fuse: Bad value for 'rootmode' [ 78.396924][ T7152] 9p: Bad value for 'wfdno' [ 78.459768][ T7161] kAFS: No cell specified [ 78.574456][ T7156] netlink: 40 bytes leftover after parsing attributes in process `syz.4.339'. [ 78.649627][ T7173] syz.1.345: attempt to access beyond end of device [ 78.649627][ T7173] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 78.654307][ T7173] gfs2: error -5 reading superblock [ 78.667475][ T7173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.345'. [ 78.670636][ T7173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.345'. [ 78.674583][ T5945] Bluetooth: hci4: command tx timeout [ 78.752850][ T7182] Cannot find add_set index 46338 as target [ 79.331351][ T7218] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54899 sclass=netlink_xfrm_socket pid=7218 comm=syz.0.359 [ 79.350175][ T7220] capability: warning: `syz.1.360' uses deprecated v2 capabilities in a way that may be insecure [ 79.551563][ T5293] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 79.561630][ T5293] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.767891][ T7235] 9pnet_virtio: no channels available for device syz [ 79.770579][ T7235] 9pnet_virtio: no channels available for device syz [ 79.773512][ T7235] 9pnet_virtio: no channels available for device syz [ 80.203789][ T6027] usb 8-1: USB disconnect, device number 3 [ 80.255541][ T7268] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 80.751650][ T5293] Bluetooth: hci4: command tx timeout [ 80.889039][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 80.889050][ T40] audit: type=1400 audit(1768199845.479:457): avc: denied { map } for pid=7290 comm="syz.1.382" path="pipe:[16855]" dev="pipefs" ino=16855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 81.155055][ T40] audit: type=1400 audit(1768199845.749:458): avc: denied { map } for pid=7302 comm="syz.0.384" path="socket:[16876]" dev="sockfs" ino=16876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 81.485680][ T40] audit: type=1400 audit(1768199846.079:459): avc: denied { map } for pid=7312 comm="syz.4.387" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.493617][ T40] audit: type=1400 audit(1768199846.079:460): avc: denied { create } for pid=7309 comm="syz.3.386" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 81.776226][ T7328] Invalid source name [ 81.777715][ T7328] UBIFS error (pid: 7328): cannot open "ubifs", error -22 [ 81.886469][ T7337] netlink: 'syz.4.394': attribute type 12 has an invalid length. [ 81.965543][ T7342] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 82.841475][ T5293] Bluetooth: hci4: command tx timeout [ 83.299423][ T7356] NILFS (nbd3): device size too small [ 83.419686][ T7366] netlink: 'syz.4.402': attribute type 39 has an invalid length. [ 83.425474][ T7366] veth0_macvtap: left promiscuous mode [ 83.744576][ T7380] binder: BINDER_SET_CONTEXT_MGR already set [ 83.747614][ T7380] binder: 7379:7380 ioctl 4018620d 2000000002c0 returned -16 [ 84.152186][ T7405] __nla_validate_parse: 5 callbacks suppressed [ 84.152196][ T7405] netlink: 16 bytes leftover after parsing attributes in process `syz.4.412'. [ 84.206808][ T7410] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.266164][ T7410] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.336816][ T7410] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.427577][ T40] audit: type=1400 audit(1768199849.019:461): avc: denied { map } for pid=7420 comm="syz.3.418" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.446514][ T7410] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.550180][ T1145] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.559691][ T61] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.571341][ T61] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.582654][ T61] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.739631][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'. [ 84.760909][ T7456] netlink: 64 bytes leftover after parsing attributes in process `syz.3.428'. [ 84.768103][ T7456] block nbd0: not configured, cannot reconfigure [ 84.770750][ T40] audit: type=1400 audit(1768199849.359:462): avc: denied { append } for pid=7455 comm="syz.3.428" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.810110][ T7460] netlink: 44 bytes leftover after parsing attributes in process `syz.1.429'. [ 84.817870][ T7460] netlink: 35 bytes leftover after parsing attributes in process `syz.1.429'. [ 84.821839][ T7460] netlink: 'syz.1.429': attribute type 5 has an invalid length. [ 84.825414][ T7460] netlink: 'syz.1.429': attribute type 6 has an invalid length. [ 84.829426][ T7460] netlink: 35 bytes leftover after parsing attributes in process `syz.1.429'. [ 84.891200][ T40] audit: type=1400 audit(1768199849.479:463): avc: denied { ioctl } for pid=7455 comm="syz.3.428" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.947349][ T40] audit: type=1400 audit(1768199849.539:464): avc: denied { create } for pid=7468 comm="syz.0.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.952525][ T7469] netlink: 40 bytes leftover after parsing attributes in process `syz.0.433'. [ 84.955766][ T40] audit: type=1400 audit(1768199849.549:465): avc: denied { write } for pid=7468 comm="syz.0.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 85.083299][ T40] audit: type=1326 audit(1768199849.679:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7475 comm="syz.1.435" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fb5be386667 code=0x0 [ 85.158126][ T9] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 85.205247][ T7485] overlayfs: failed to clone upperpath [ 85.246654][ T7477] virtio-fs: tag not found [ 85.313243][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.316757][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.324449][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.328162][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.542416][ T9] usb 9-1: usb_control_msg returned -32 [ 85.545223][ T9] usbtmc 9-1:16.0: can't read capabilities [ 85.923134][ T7494] serio: Serial port ptm0 [ 85.976420][ T7502] input: syz1 as /devices/virtual/input/input23 [ 85.995122][ T40] audit: type=1400 audit(1768199850.579:467): avc: denied { read } for pid=5327 comm="acpid" name="event4" dev="devtmpfs" ino=2884 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.002602][ T40] audit: type=1400 audit(1768199850.579:468): avc: denied { open } for pid=5327 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2884 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.009729][ T40] audit: type=1400 audit(1768199850.579:469): avc: denied { ioctl } for pid=5327 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2884 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.059404][ T7511] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 86.071948][ T7494] serio: Serial port ptm0 [ 86.327823][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 86.433679][ T54] cfg80211: failed to load regulatory.db [ 86.574563][ T7553] binder: 7552:7553 ioctl c0306201 2000000001c0 returned -14 [ 86.577280][ T7553] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 86.585672][ T7553] binder: 7552:7553 ioctl c0306201 2000000001c0 returned -14 [ 86.635867][ T40] audit: type=1400 audit(1768199851.229:470): avc: denied { write } for pid=7557 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.692135][ T40] audit: type=1400 audit(1768199851.289:471): avc: denied { bind } for pid=7560 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.715532][ T40] audit: type=1400 audit(1768199851.289:472): avc: denied { name_bind } for pid=7560 comm="syz.3.457" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 86.722404][ T40] audit: type=1400 audit(1768199851.289:473): avc: denied { node_bind } for pid=7560 comm="syz.3.457" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 86.728778][ T40] audit: type=1400 audit(1768199851.299:474): avc: denied { setopt } for pid=7560 comm="syz.3.457" lport=28196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.753323][ T40] audit: type=1400 audit(1768199851.349:475): avc: denied { getopt } for pid=7562 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.797757][ T7566] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 86.856429][ T40] audit: type=1400 audit(1768199851.449:476): avc: denied { block_suspend } for pid=7565 comm="syz.0.459" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.018968][ T7571] IPv6: sit1: Disabled Multicast RS [ 87.024101][ T7571] sit1: entered allmulticast mode [ 87.371523][ T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 87.406258][ T7579] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 87.409072][ T7579] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 87.414756][ T7579] vhci_hcd vhci_hcd.0: Device attached [ 87.418009][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 87.423830][ T7579] netlink: 'syz.3.464': attribute type 30 has an invalid length. [ 87.427124][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.464'. [ 87.432447][ T7580] vhci_hcd: cannot find the pending unlink 1023 [ 87.435297][ T7580] vhci_hcd: connection closed [ 87.435545][ T74] vhci_hcd vhci_hcd.3: stop threads [ 87.439771][ T74] vhci_hcd vhci_hcd.3: release socket [ 87.442241][ T74] vhci_hcd vhci_hcd.3: disconnect device [ 87.521527][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 87.527099][ T29] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 87.530642][ T29] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 87.534038][ T29] usb 6-1: Product: syz [ 87.536133][ T29] usb 6-1: Manufacturer: syz [ 87.538129][ T29] usb 6-1: SerialNumber: syz [ 87.541583][ T29] usb 6-1: config 0 descriptor?? [ 87.749688][ T29] usb 6-1: USB disconnect, device number 3 [ 87.986374][ T5985] usb 9-1: USB disconnect, device number 2 [ 87.987843][ T7604] netlink: 'syz.0.471': attribute type 1 has an invalid length. [ 87.998137][ T7597] delete_channel: no stack [ 88.087556][ T7614] erspan1: entered allmulticast mode [ 88.225116][ T5293] Bluetooth: hci0: unexpected cc 0x203c length: 9 > 1 [ 88.228708][ T5293] Bluetooth: hci0: unexpected event for opcode 0x203c [ 88.232639][ T7627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28645 sclass=netlink_route_socket pid=7627 comm=syz.0.480 [ 88.461438][ T5985] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 88.621468][ T5985] usb 9-1: Using ep0 maxpacket: 32 [ 88.625424][ T5985] usb 9-1: config 14 has an invalid interface number: 219 but max is 0 [ 88.628721][ T5985] usb 9-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 88.632422][ T5985] usb 9-1: config 14 has an invalid interface association descriptor of length 5, skipping [ 88.636712][ T5985] usb 9-1: config 14 has no interface number 0 [ 88.639484][ T5985] usb 9-1: config 14 interface 219 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 32 [ 88.643747][ T5985] usb 9-1: config 14 interface 219 altsetting 3 endpoint 0xF has invalid maxpacket 1128, setting to 64 [ 88.647840][ T5985] usb 9-1: config 14 interface 219 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 88.652747][ T5985] usb 9-1: config 14 interface 219 altsetting 3 endpoint 0x8 has invalid maxpacket 495, setting to 64 [ 88.657388][ T5985] usb 9-1: config 14 interface 219 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 88.662232][ T5985] usb 9-1: config 14 interface 219 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 88.666673][ T5985] usb 9-1: config 14 interface 219 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 88.667605][ T7645] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 88.671220][ T5985] usb 9-1: config 14 interface 219 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 88.675816][ T7645] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 88.679243][ T5985] usb 9-1: config 14 interface 219 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 88.688728][ T5985] usb 9-1: config 14 interface 219 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 88.694168][ T5985] usb 9-1: config 14 interface 219 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 88.698790][ T5985] usb 9-1: config 14 interface 219 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 88.703360][ T5985] usb 9-1: config 14 interface 219 has no altsetting 0 [ 88.708448][ T5985] usb 9-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=51.20 [ 88.712348][ T5985] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.715667][ T5985] usb 9-1: Product: syz [ 88.717551][ T5985] usb 9-1: Manufacturer: syz [ 88.719511][ T5985] usb 9-1: SerialNumber: syz [ 88.729398][ T7607] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 89.175229][ T7657] __nla_validate_parse: 4 callbacks suppressed [ 89.175240][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 89.189623][ T7657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.489'. [ 89.198264][ T7659] tipc: Enabling of bearer rejected, failed to enable media [ 89.413242][ T7671] smc: net device bond0 applied user defined pnetid SYZ2 [ 89.416563][ T7671] netlink: 14 bytes leftover after parsing attributes in process `syz.0.494'. [ 89.433902][ T7671] smc: removing net device bond0 with user defined pnetid SYZ2 [ 89.438523][ T7671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.445349][ T7671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.450411][ T7671] bond0 (unregistering): Released all slaves [ 89.541565][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 89.694793][ T9] usb 8-1: config 0 has no interfaces? [ 89.696590][ T9] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 89.699416][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.703236][ T9] usb 8-1: config 0 descriptor?? [ 89.768754][ T7683] program syz.1.496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.922727][ T1344] usb 8-1: USB disconnect, device number 4 [ 90.259962][ T7719] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.264949][ T7719] xt_hashlimit: max too large, truncated to 1048576 [ 90.268190][ T7719] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 90.290894][ T1344] libceph: connect (1)[c::]:6789 error -13 [ 90.293239][ T1344] libceph: mon0 (1)[c::]:6789 connect error [ 90.333665][ T1344] libceph: connect (1)[b::]:6789 error -13 [ 90.335828][ T1344] libceph: mon0 (1)[b::]:6789 connect error [ 90.508433][ T7729] 9p: Bad value for 'rfdno' [ 90.510088][ T7730] 9p: Bad value for 'rfdno' [ 90.552999][ T1344] libceph: connect (1)[c::]:6789 error -13 [ 90.555150][ T1344] libceph: mon0 (1)[c::]:6789 connect error [ 90.592678][ T1344] libceph: connect (1)[b::]:6789 error -13 [ 90.595511][ T1344] libceph: mon0 (1)[b::]:6789 connect error [ 90.621359][ T7740] netlink: 'syz.0.512': attribute type 39 has an invalid length. [ 90.732543][ T7740] netlink: 'syz.0.512': attribute type 39 has an invalid length. [ 90.735265][ T7740] netlink: 'syz.0.512': attribute type 39 has an invalid length. [ 90.737798][ T7740] netlink: 'syz.0.512': attribute type 39 has an invalid length. [ 90.740310][ T7740] netlink: 'syz.0.512': attribute type 39 has an invalid length. [ 90.742968][ T7740] netlink: 'syz.0.512': attribute type 39 has an invalid length. [ 90.745516][ T7740] netlink: 'syz.0.512': attribute type 39 has an invalid length. [ 90.748009][ T7740] netlink: 'syz.0.512': attribute type 39 has an invalid length. [ 90.870015][ T7748] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 90.907231][ T5293] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 91.043015][ T5985] gspca_main: vicam-2.14.0 probing 04c1:009d [ 91.047582][ T5985] usb 9-1: Direct firmware load for vicam/firmware.fw failed with error -2 [ 91.052348][ T5985] usb 9-1: Falling back to sysfs fallback for: vicam/firmware.fw [ 91.061675][ T1344] libceph: connect (1)[c::]:6789 error -13 [ 91.063291][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 91.063300][ T40] audit: type=1400 audit(1768199855.649:491): avc: denied { firmware_load } for pid=5985 comm="kworker/3:3" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 91.063819][ T1344] libceph: mon0 (1)[c::]:6789 connect error [ 91.082316][ T7717] ceph: No mds server is up or the cluster is laggy [ 91.084637][ T7724] ceph: No mds server is up or the cluster is laggy [ 91.160074][ T7771] netlink: 56 bytes leftover after parsing attributes in process `syz.1.521'. [ 91.165350][ T7771] netlink: 56 bytes leftover after parsing attributes in process `syz.1.521'. [ 91.175848][ T7771] zonefs (loop1) ERROR: Not a zoned block device [ 91.246727][ T5293] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 91.250675][ T5293] Bluetooth: Wrong link type (-22) [ 91.253102][ T5293] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 91.255753][ T5293] Bluetooth: Wrong link type (-22) [ 91.678125][ T40] audit: type=1400 audit(1768199856.269:492): avc: denied { setattr } for pid=7790 comm="syz.1.527" name="RAWv6" dev="sockfs" ino=19691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.685056][ T7791] netlink: 92 bytes leftover after parsing attributes in process `syz.1.527'. [ 91.685079][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.527'. [ 91.837434][ T7799] batman_adv: batadv0: Adding interface: dummy0 [ 91.840181][ T7799] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.851097][ T7799] batman_adv: batadv0: Interface activated: dummy0 [ 91.854663][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 91.863686][ T7799] batadv0: mtu less than device minimum [ 91.867094][ T7799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.872054][ T7799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.877271][ T7799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.882504][ T7799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.886977][ T7799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.890554][ T7799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.894325][ T7799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.899212][ T7799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.904713][ T7799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.989923][ T40] audit: type=1400 audit(1768199856.579:493): avc: denied { append } for pid=7807 comm="syz.4.533" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 92.045074][ T7813] netlink: 36 bytes leftover after parsing attributes in process `syz.4.535'. [ 92.052823][ T7813] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.056893][ T7813] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.382350][ T7826] netlink: 830 bytes leftover after parsing attributes in process `syz.4.538'. [ 92.566004][ T7830] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.568616][ T7830] bridge0: port 2(bridge_slave_1) entered listening state [ 92.571335][ T7830] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.573651][ T7830] bridge0: port 1(bridge_slave_0) entered listening state [ 92.673577][ T7836] input: syz0 as /devices/virtual/input/input28 [ 92.933801][ T7844] use of bytesused == 0 is deprecated and will be removed in the future, [ 92.937322][ T7844] use the actual size instead. [ 92.972004][ T40] audit: type=1400 audit(1768199857.569:494): avc: denied { setopt } for pid=7846 comm="syz.3.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.981905][ T40] audit: type=1400 audit(1768199857.579:495): avc: denied { connect } for pid=7846 comm="syz.3.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.094083][ T7853] kAFS: unable to lookup cell 'syz0' [ 93.243815][ T40] audit: type=1400 audit(1768199857.839:496): avc: denied { append } for pid=7868 comm="syz.3.551" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 93.336157][ T7876] validate_nla: 58 callbacks suppressed [ 93.336170][ T7876] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 93.390206][ T40] audit: type=1400 audit(1768199857.979:497): avc: denied { ioctl } for pid=7881 comm="syz.3.557" path="socket:[19365]" dev="sockfs" ino=19365 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.614895][ T7906] tipc: Started in network mode [ 93.617054][ T7906] tipc: Node identity 2084e, cluster identity 4711 [ 93.619592][ T7906] tipc: Node number set to 133198 [ 93.759472][ T7914] overlay: filesystem on ./bus not supported as upperdir [ 93.955123][ T40] audit: type=1400 audit(1768199858.549:498): avc: denied { map } for pid=7924 comm="syz.3.569" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 93.967741][ T40] audit: type=1400 audit(1768199858.559:499): avc: denied { execute } for pid=7924 comm="syz.3.569" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 94.001109][ T7928] loop4: detected capacity change from 0 to 524288000 [ 94.098035][ T40] audit: type=1400 audit(1768199858.689:500): avc: denied { mounton } for pid=7931 comm="syz.3.572" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 94.109118][ T7934] overlay: filesystem on ./bus is read-only [ 94.121297][ T7936] fuse: Unknown parameter '\Xye) fg_id' [ 94.122399][ T7937] fuse: Unknown parameter '\Xye) fg_id' [ 94.215998][ T7942] netlink: 'syz.3.574': attribute type 4 has an invalid length. [ 94.232896][ T7944] fuse: Unknown parameter '_)YE;0x000000000000000300000000000000000000' [ 94.592765][ C3] bridge0: port 1(bridge_slave_0) entered learning state [ 94.596556][ C3] bridge0: port 2(bridge_slave_1) entered learning state [ 94.747956][ T7970] netem: change failed [ 94.879733][ T7982] __nla_validate_parse: 5 callbacks suppressed [ 94.879750][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.585'. [ 94.888776][ T7982] overlayfs: failed to clone upperpath [ 94.967944][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'. [ 95.134879][ T7999] QAT: failed to copy from user cfg_data. [ 95.270523][ T8013] netlink: 16 bytes leftover after parsing attributes in process `syz.0.594'. [ 95.309651][ T8015] bond3 (unregistering): Released all slaves [ 95.337705][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 95.694315][ T8044] fuse: Unknown parameter 'rnot' [ 95.803818][ T8046] efs: cannot read volume header [ 95.905954][ T8052] netlink: 40 bytes leftover after parsing attributes in process `syz.4.607'. [ 96.356167][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 96.356182][ T40] audit: type=1400 audit(1768199860.949:506): avc: denied { setopt } for pid=8074 comm="syz.3.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 96.532577][ T40] audit: type=1400 audit(1768199861.129:507): avc: denied { bind } for pid=8081 comm="syz.3.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.534970][ T8083] netlink: 432 bytes leftover after parsing attributes in process `syz.3.615'. [ 96.671598][ C3] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.674686][ C3] bridge0: topology change detected, propagating [ 96.677760][ C3] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.680501][ C3] bridge0: topology change detected, propagating [ 96.982757][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 97.121050][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'. [ 97.137530][ T104] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.141351][ T104] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.142453][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'. [ 97.146582][ T104] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.155570][ T104] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.273615][ T40] audit: type=1400 audit(1768199861.869:508): avc: denied { mounton } for pid=8105 comm="syz.1.624" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.440456][ T8109] net_ratelimit: 11 callbacks suppressed [ 97.440468][ T8109] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 97.472485][ T8111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=8111 comm=syz.3.626 [ 97.975040][ T8122] tipc: Enabling of bearer rejected, failed to enable media [ 98.174576][ T8140] netlink: 40 bytes leftover after parsing attributes in process `syz.0.636'. [ 98.211324][ T8144] fuse: Bad value for 'fd' [ 98.390890][ T40] audit: type=1400 audit(1768199862.979:509): avc: denied { getopt } for pid=8160 comm="syz.0.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.420576][ T8167] openvswitch: netlink: Flow actions attr not present in new flow. [ 98.564952][ T8179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.568130][ T8179] batadv0: mtu less than device minimum [ 98.571473][ T8179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.576898][ T8179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.582322][ T8179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.587499][ T8179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.592820][ T8179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.598078][ T8179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.603302][ T8179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.617473][ T8179] batadv_slave_0: entered promiscuous mode [ 98.619455][ T8179] batadv_slave_0: entered allmulticast mode [ 98.818177][ T40] audit: type=1400 audit(1768199863.409:510): avc: denied { create } for pid=8203 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 98.825949][ T40] audit: type=1400 audit(1768199863.409:511): avc: denied { setopt } for pid=8203 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 99.048568][ T40] audit: type=1400 audit(1768199863.639:512): avc: denied { bind } for pid=8214 comm="syz.1.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 99.054926][ T40] audit: type=1400 audit(1768199863.649:513): avc: denied { connect } for pid=8214 comm="syz.1.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 99.093778][ T5945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.099613][ T5945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.104410][ T5945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.108509][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.112544][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.114051][ T8219] SELinux: syz.1.664 (8219) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 99.248618][ T8216] chnl_net:caif_netlink_parms(): no params data found [ 99.318124][ T8216] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.321261][ T8216] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.324486][ T8216] bridge_slave_0: entered allmulticast mode [ 99.328300][ T8216] bridge_slave_0: entered promiscuous mode [ 99.334654][ T8216] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.337741][ T8216] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.340733][ T8216] bridge_slave_1: entered allmulticast mode [ 99.344763][ T8216] bridge_slave_1: entered promiscuous mode [ 99.370368][ T8216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.377016][ T8216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.400739][ T8216] team0: Port device team_slave_0 added [ 99.404261][ T8216] team0: Port device team_slave_1 added [ 99.418338][ T8216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.420523][ T8216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.428948][ T8216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.433371][ T8216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.435648][ T8216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.443856][ T8216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.466486][ T8216] hsr_slave_0: entered promiscuous mode [ 99.468746][ T8216] hsr_slave_1: entered promiscuous mode [ 99.470907][ T8216] debugfs: 'hsr0' already exists in 'hsr' [ 99.472946][ T8216] Cannot create hsr debugfs directory [ 99.560294][ T8216] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.566072][ T8216] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.569986][ T8216] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.574457][ T8216] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.591081][ T8216] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.593517][ T8216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.596003][ T8216] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.598262][ T8216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.628737][ T8216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.637294][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.640040][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.648373][ T8216] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.655103][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.657381][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.664560][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.667364][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.802759][ T8216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.926553][ T8245] overlayfs: failed to clone upperpath [ 99.974954][ T8216] veth0_vlan: entered promiscuous mode [ 99.981487][ T8216] veth1_vlan: entered promiscuous mode [ 100.003261][ T8216] veth0_macvtap: entered promiscuous mode [ 100.008693][ T8216] veth1_macvtap: entered promiscuous mode [ 100.023328][ T8216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.034295][ T8216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.043972][ T74] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.047359][ T74] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.051040][ T74] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.055315][ T74] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.107018][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.110783][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.135006][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.137514][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.155009][ T40] audit: type=1400 audit(1768199864.749:514): avc: denied { mounton } for pid=8216 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 100.273367][ T8261] ip6t_rpfilter: unknown options [ 100.276574][ T8261] ip6t_rpfilter: unknown options [ 100.321927][ T8265] capability: warning: `syz.5.670' uses 32-bit capabilities (legacy support in use) [ 100.434406][ T8273] IPv6: Can't replace route, no match found [ 100.437403][ T40] audit: type=1400 audit(1768199865.029:515): avc: denied { map } for pid=8270 comm="syz.5.672" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 100.632431][ T8291] overlay: Bad value for 'workdir' [ 100.661282][ T8296] __nla_validate_parse: 7 callbacks suppressed [ 100.661294][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'. [ 100.877822][ T9] IPVS: starting estimator thread 0... [ 100.962007][ T8318] IPVS: using max 44 ests per chain, 105600 per kthread [ 101.004615][ T8325] netlink: 'syz.0.688': attribute type 5 has an invalid length. [ 101.151611][ T5945] Bluetooth: hci2: command tx timeout [ 101.968790][ T8344] smc: adding net device bond0 with user defined pnetid SYZ2 [ 101.974079][ T8344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.995494][ T8346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.693'. [ 101.998301][ T8344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.693'. [ 102.001268][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 102.004657][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 102.063985][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 102.063998][ T40] audit: type=1400 audit(1768199866.659:519): avc: denied { bind } for pid=8361 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.072458][ T40] audit: type=1400 audit(1768199866.659:520): avc: denied { read } for pid=8361 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.675639][ T8370] netlink: 'syz.0.699': attribute type 9 has an invalid length. [ 103.231565][ T5945] Bluetooth: hci2: command tx timeout [ 103.267730][ T8388] netlink: 'syz.5.704': attribute type 5 has an invalid length. [ 103.413635][ T8397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=8397 comm=syz.5.708 [ 103.498255][ T40] audit: type=1326 audit(1768199868.089:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.0.713" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8da898f7c9 code=0x0 [ 103.530477][ T40] audit: type=1400 audit(1768199868.119:522): avc: denied { remount } for pid=8409 comm="syz.5.712" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 103.550589][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 103.554611][ T8411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.713'. [ 103.559841][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 103.563771][ T8411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.713'. [ 104.245028][ T8415] netlink: 'syz.1.714': attribute type 5 has an invalid length. [ 104.375820][ T40] audit: type=1400 audit(1768199868.969:523): avc: denied { append } for pid=8426 comm="syz.1.720" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.390339][ T8427] net_ratelimit: 12 callbacks suppressed [ 104.390355][ T8427] openvswitch: netlink: Duplicate or invalid key (type 0). [ 104.396330][ T8427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.449297][ T40] audit: type=1400 audit(1768199869.039:524): avc: denied { write } for pid=8433 comm="syz.5.723" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 104.478439][ T40] audit: type=1400 audit(1768199869.069:525): avc: denied { ioctl } for pid=8442 comm="syz.1.724" path="socket:[23867]" dev="sockfs" ino=23867 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.537292][ T40] audit: type=1400 audit(1768199869.129:526): avc: denied { connect } for pid=8445 comm="syz.1.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.688310][ T40] audit: type=1400 audit(1768199869.279:527): avc: denied { read } for pid=8470 comm="syz.0.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 104.771445][ T1344] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 104.943660][ T1344] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 104.946626][ T1344] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 104.950779][ T1344] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.955577][ T1344] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 104.959336][ T1344] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 104.963676][ T1344] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 104.966061][ T1344] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 104.969480][ T1344] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.973234][ T1344] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 104.976685][ T1344] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 104.980898][ T1344] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 104.983357][ T1344] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 104.986697][ T1344] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.991236][ T1344] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 104.994999][ T1344] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 105.001477][ T1344] usb 10-1: string descriptor 0 read error: -22 [ 105.004003][ T1344] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 105.007585][ T1344] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.015853][ T1344] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 105.311692][ T5945] Bluetooth: hci2: command tx timeout [ 105.332908][ T5972] usb 10-1: USB disconnect, device number 2 [ 105.739648][ T5945] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 105.878352][ T8483] overlayfs: failed to clone upperpath [ 106.046792][ T8496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.739'. [ 106.078447][ T8496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.739'. [ 106.085312][ T40] audit: type=1400 audit(1768199870.679:528): avc: denied { map } for pid=8495 comm="syz.0.739" path="socket:[23291]" dev="sockfs" ino=23291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.145854][ T8501] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=14102 sclass=netlink_xfrm_socket pid=8501 comm=syz.0.740 [ 106.241902][ T8504] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 106.321643][ T8521] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 106.324617][ T8521] SELinux: failed to load policy [ 106.498483][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'. [ 106.506733][ T8537] input: syz1 as /devices/virtual/input/input33 [ 106.660748][ T8560] netlink: 'syz.0.756': attribute type 1 has an invalid length. [ 106.664428][ T8558] netlink: 'syz.0.756': attribute type 1 has an invalid length. [ 106.695137][ T8558] netlink: 32 bytes leftover after parsing attributes in process `syz.0.756'. [ 106.695137][ T8560] netlink: 32 bytes leftover after parsing attributes in process `syz.0.756'. [ 106.742948][ T8560] bond4: (slave bridge5): making interface the new active one [ 106.746469][ T8560] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 106.749935][ T8566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.756'. [ 106.769811][ T8558] bond4: (slave bridge6): Enslaving as an active interface with a down link [ 106.888386][ T8586] netlink: 'syz.0.763': attribute type 5 has an invalid length. [ 106.894837][ T8586] netlink: 'syz.0.763': attribute type 5 has an invalid length. [ 107.086895][ T8609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.767'. [ 107.156398][ T8620] fuse: Bad value for 'rootmode' [ 107.196096][ T8625] netlink: 4376 bytes leftover after parsing attributes in process `syz.0.770'. [ 107.199002][ T8625] netlink: 4376 bytes leftover after parsing attributes in process `syz.0.770'. [ 107.394342][ T5945] Bluetooth: hci2: command tx timeout [ 107.509471][ T8648] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 107.514284][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 107.514297][ T40] audit: type=1400 audit(1768199872.109:540): avc: denied { relabelto } for pid=8647 comm="syz.0.777" name="cpu.stat" dev="tmpfs" ino=1675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 107.528275][ T40] audit: type=1400 audit(1768199872.109:541): avc: denied { associate } for pid=8647 comm="syz.0.777" name="cpu.stat" dev="tmpfs" ino=1675 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 107.538310][ T40] audit: type=1400 audit(1768199872.109:542): avc: denied { append } for pid=8647 comm="syz.0.777" path="/308/cpu.stat" dev="tmpfs" ino=1675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 107.561841][ T40] audit: type=1400 audit(1768199872.159:543): avc: denied { unlink } for pid=5931 comm="syz-executor" name="cpu.stat" dev="tmpfs" ino=1675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 108.181931][ T8657] 8021q: adding VLAN 0 to HW filter on device bond5 [ 108.335229][ T8660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.781'. [ 108.347635][ T8660] bridge7: entered promiscuous mode [ 108.591534][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.591537][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 108.596302][ T54] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 109.628905][ T8673] team0: Port device team_slave_0 removed [ 109.636522][ T8673] team0: Port device team_slave_1 removed [ 109.640249][ T8673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.650177][ T8673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.654978][ T8673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.657219][ T8673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.660585][ T8673] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 109.676166][ T8674] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 109.685982][ T8673] team0: Mode changed to "activebackup" [ 109.688554][ T8673] vlan0: entered promiscuous mode [ 109.692943][ T8673] tipc: Enabled bearer , priority 0 [ 109.695884][ T8674] tipc: Enabling of bearer rejected, already enabled [ 110.039106][ T8686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.671601][ T54] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 110.671632][ T5945] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.673585][ T54] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 112.751471][ T54] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 112.753680][ T54] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 113.121564][ T40] audit: type=1800 audit(1768199877.719:544): pid=8694 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.793" name="nullb0" dev="tmpfs" ino=1520 res=0 errno=0 [ 113.218373][ T8697] netlink: 'syz.0.794': attribute type 8 has an invalid length. [ 114.018409][ T8699] __nla_validate_parse: 2 callbacks suppressed [ 114.018426][ T8699] netlink: 20 bytes leftover after parsing attributes in process `syz.0.795'. [ 114.292749][ T8706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8706 comm=syz.0.798 [ 114.305818][ T8707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8707 comm=syz.0.798 [ 114.451704][ T8720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.800'. [ 114.911590][ T5945] Bluetooth: hci4: command 0x0c1a tx timeout [ 114.911635][ T54] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 114.915909][ T54] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 115.085899][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 115.237472][ T8743] bond6: Unable to set up delay as MII monitoring is disabled [ 115.240727][ T8743] bond6 (unregistering): Released all slaves [ 115.429742][ T40] audit: type=1400 audit(1768199880.019:545): avc: denied { relabelfrom } for pid=8746 comm="syz.0.808" name="" dev="pipefs" ino=25846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 115.546298][ T8759] netlink: 'syz.0.811': attribute type 11 has an invalid length. [ 116.088500][ T8761] trusted_key: encrypted_key: insufficient parameters specified [ 116.239145][ T8767] tipc: Enabled bearer , priority 10 [ 116.991592][ T54] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 116.991600][ T5945] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.995596][ T54] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 117.026556][ T5293] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 117.028255][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.819'. [ 117.033826][ T5293] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 117.036328][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.819'. [ 117.044009][ T5293] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 117.046800][ T5293] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 117.049305][ T5293] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 117.067989][ T5945] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 117.070489][ T5945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 117.077002][ T5945] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 117.079868][ T5945] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 117.082744][ T5945] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 117.092913][ T8785] Can't find a SQUASHFS superblock on nullb0 [ 117.096836][ T8783] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 117.190978][ T8794] netlink: 36 bytes leftover after parsing attributes in process `syz.5.823'. [ 117.196257][ T8794] netlink: 16 bytes leftover after parsing attributes in process `syz.5.823'. [ 117.200431][ T8794] netlink: 36 bytes leftover after parsing attributes in process `syz.5.823'. [ 117.204000][ T8794] netlink: 36 bytes leftover after parsing attributes in process `syz.5.823'. [ 117.236291][ T8692] chnl_net:caif_netlink_parms(): no params data found [ 117.298095][ T8692] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.301072][ T8692] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.304144][ T8692] bridge_slave_0: entered allmulticast mode [ 117.307953][ T8692] bridge_slave_0: entered promiscuous mode [ 117.317385][ T8805] JFS: discard option not supported on device [ 117.323850][ T8805] Mount JFS Failure: -5 [ 117.325889][ T8692] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.328412][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.330723][ T8692] bridge_slave_1: entered allmulticast mode [ 117.336318][ T40] audit: type=1400 audit(1768199881.929:546): avc: denied { read } for pid=8800 comm="syz.5.824" name="file0" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 117.341649][ T8692] bridge_slave_1: entered promiscuous mode [ 117.345091][ T40] audit: type=1400 audit(1768199881.939:547): avc: denied { watch } for pid=8800 comm="syz.5.824" path="/45/file0" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 117.353877][ T8807] netlink: 52 bytes leftover after parsing attributes in process `syz.1.825'. [ 117.378262][ T8692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.388500][ T8692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.424515][ T8692] team0: Port device team_slave_0 added [ 117.427642][ T8692] team0: Port device team_slave_1 added [ 117.453851][ T8692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.456855][ T8692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.467344][ T8692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.473533][ T8692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.476593][ T8692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.486550][ T8692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.524110][ T8692] hsr_slave_0: entered promiscuous mode [ 117.526784][ T8692] hsr_slave_1: entered promiscuous mode [ 117.529273][ T8692] debugfs: 'hsr0' already exists in 'hsr' [ 117.531752][ T8692] Cannot create hsr debugfs directory [ 117.657470][ T8692] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 117.662080][ T8692] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 117.671847][ T8692] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 117.676917][ T8692] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 117.692036][ T8692] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.694328][ T8692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.696952][ T8692] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.699295][ T8692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.727763][ T8692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.739430][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.745747][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.758183][ T8692] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.766988][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.770077][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.771949][ T8845] tmpfs: Unknown parameter 'n_inodes' [ 117.787745][ T185] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.790801][ T185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.852661][ T40] audit: type=1400 audit(1768232657.444:548): avc: denied { getopt } for pid=8850 comm="syz.1.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.898168][ T40] audit: type=1400 audit(1768232657.484:549): avc: denied { execute } for pid=8855 comm="syz.1.841" path="/sys/kernel/debug/bluetooth/6lowpan_enable" dev="debugfs" ino=3838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 117.954303][ T8863] batman_adv: batadv0: Adding interface: gretap2 [ 117.956778][ T8863] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.974282][ T8863] batman_adv: batadv0: Interface activated: gretap2 [ 117.976512][ T8863] batadv0: mtu less than device minimum [ 117.979625][ T8863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.985388][ T8863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.990792][ T8863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.995632][ T8863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.999535][ T8863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.004818][ T8863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.010000][ T8863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.015334][ T8863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.053901][ T8692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.068906][ T8871] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8871 comm=syz.1.844 [ 118.109942][ T8865] netlink: 'syz.0.843': attribute type 4 has an invalid length. [ 118.118858][ T8865] overlayfs: failed to clone upperpath [ 118.255982][ T8692] veth0_vlan: entered promiscuous mode [ 118.266949][ T8692] veth1_vlan: entered promiscuous mode [ 118.286260][ T8692] veth0_macvtap: entered promiscuous mode [ 118.290136][ T8692] veth1_macvtap: entered promiscuous mode [ 118.299980][ T8692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.309130][ T8692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.309259][ T40] audit: type=1400 audit(1768232657.894:550): avc: denied { getopt } for pid=8895 comm="syz.0.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 118.317637][ T61] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.323563][ T61] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.328298][ T61] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.333548][ T61] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.402411][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.412331][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.437848][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.440343][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.456266][ T40] audit: type=1400 audit(1768232658.044:551): avc: denied { mounton } for pid=8692 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 118.500825][ T40] audit: type=1400 audit(1768232658.084:552): avc: denied { map } for pid=8910 comm="syz.6.792" path="socket:[27696]" dev="sockfs" ino=27696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.524158][ T8914] binder: BINDER_SET_CONTEXT_MGR already set [ 118.527203][ T8914] binder: 8908:8914 ioctl 4018620d 2000000002c0 returned -16 [ 118.646670][ T8926] JFS: discard option not supported on device [ 118.649819][ T8926] Mount JFS Failure: -5 [ 118.706123][ T40] audit: type=1326 audit(1768265433.297:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.0.858" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da898f7c9 code=0x7fc00000 [ 118.769858][ T40] audit: type=1400 audit(1768265433.357:554): avc: denied { connect } for pid=8939 comm="syz.0.862" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 119.060844][ T8945] xt_TPROXY: Can be used only with -p tcp or -p udp [ 119.147534][ T8952] fuse: Unknown parameter 'rootmodHBdCe' [ 119.153357][ T5945] Bluetooth: hci5: command tx timeout [ 119.411517][ T60] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 119.433095][ T8954] netlink: 'syz.6.867': attribute type 2 has an invalid length. [ 119.436411][ T8954] __nla_validate_parse: 1 callbacks suppressed [ 119.436425][ T8954] netlink: 132 bytes leftover after parsing attributes in process `syz.6.867'. [ 119.550519][ T8957] gfs2: error -5 reading superblock [ 119.581560][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 119.585125][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 8 [ 119.588826][ T60] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 119.595387][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.599189][ T60] usb 6-1: config 0 descriptor?? [ 119.601871][ T8952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.629512][ T8963] input: syz1 as /devices/virtual/input/input35 [ 119.694497][ T40] audit: type=1400 audit(1768265434.287:555): avc: denied { listen } for pid=8968 comm="syz.5.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.702738][ T8969] program syz.5.874 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.706757][ T8969] 9pnet_fd: p9_fd_create_unix (8969): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 119.754085][ T8980] 8021q: VLANs not supported on ip6tnl0 [ 119.812391][ T60] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 119.816911][ T8980] overlayfs: failed to clone upperpath [ 119.819315][ T40] audit: type=1400 audit(1768265434.407:556): avc: denied { read } for pid=8979 comm="syz.0.877" lport=57537 faddr=::ffff:172.20.20.67 fport=65530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.858902][ T40] audit: type=1400 audit(1768265434.447:557): avc: denied { write } for pid=8977 comm="syz.5.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 119.929552][ T40] audit: type=1400 audit(1768265434.517:558): avc: denied { append } for pid=8989 comm="syz.6.880" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 119.939988][ T40] audit: type=1400 audit(1768265434.527:559): avc: denied { ioctl } for pid=8989 comm="syz.6.880" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 120.037476][ T60] usb 6-1: USB disconnect, device number 4 [ 120.050971][ T8997] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 120.090780][ T9001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.883'. [ 120.147351][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'. [ 120.162316][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'. [ 120.170715][ T9007] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 120.175122][ T9008] bridge0: entered allmulticast mode [ 120.217091][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 120.220010][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.887'. [ 120.222913][ T9010] netlink: 'syz.0.887': attribute type 11 has an invalid length. [ 120.225448][ T9010] netlink: 'syz.0.887': attribute type 7 has an invalid length. [ 120.307187][ T9015] overlayfs: failed to clone lowerpath [ 120.390209][ T9024] raw_sendmsg: syz.6.892 forgot to set AF_INET. Fix it! [ 120.508825][ T9032] overlayfs: failed to clone upperpath [ 120.509901][ T9033] overlayfs: failed to clone upperpath [ 120.718018][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.902'. [ 120.720787][ T9051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.724692][ T9051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.735990][ T9051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.738906][ T9051] batman_adv: batadv0: Interface deactivated: dummy0 [ 120.740996][ T9051] batman_adv: batadv0: Removing interface: dummy0 [ 120.743556][ T9051] batman_adv: batadv0: Interface deactivated: gretap2 [ 120.745711][ T9051] batman_adv: batadv0: Removing interface: gretap2 [ 120.930261][ T9063] TCP: TCP_TX_DELAY enabled [ 120.947138][ T9068] netlink: 40 bytes leftover after parsing attributes in process `syz.5.906'. [ 121.026754][ T9071] nfs4: Unknown parameter 'tmpfs' [ 121.045877][ T9084] netlink: 256 bytes leftover after parsing attributes in process `syz.0.912'. [ 121.051300][ T9084] unsupported nlmsg_type 40 [ 121.110406][ T9092] 9pnet_virtio: no channels available for device syz [ 121.118577][ T9087] syzkaller0: entered promiscuous mode [ 121.120750][ T9087] syzkaller0: entered allmulticast mode [ 121.122301][ T9092] 9pnet_virtio: no channels available for device syz [ 121.127431][ T9092] 9pnet_virtio: no channels available for device syz [ 121.130659][ T9092] 9pnet_virtio: no channels available for device syz [ 121.133938][ T9092] 9pnet_virtio: no channels available for device syz [ 121.137001][ T9092] 9pnet_virtio: no channels available for device syz [ 121.140167][ T9092] 9pnet_virtio: no channels available for device syz [ 121.143622][ T9092] 9pnet_virtio: no channels available for device syz [ 121.146531][ T9092] 9pnet_virtio: no channels available for device syz [ 121.149668][ T9092] 9pnet_virtio: no channels available for device syz [ 121.153161][ T9092] 9pnet_virtio: no channels available for device syz [ 121.156337][ T9092] 9pnet_virtio: no channels available for device syz [ 121.159364][ T9092] 9pnet_virtio: no channels available for device syz [ 121.232280][ T5293] Bluetooth: hci5: command tx timeout [ 122.104985][ T9106] afs: Unknown parameter '9' [ 122.108344][ T9107] fuse: Bad value for 'fd' [ 122.265541][ T9130] netlink: 2024 bytes leftover after parsing attributes in process `syz.5.927'. [ 122.421603][ T6078] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 122.426978][ T9142] netlink: 'syz.5.930': attribute type 1 has an invalid length. [ 122.430238][ T9142] netlink: 'syz.5.930': attribute type 1 has an invalid length. [ 122.434505][ T9143] netlink: 'syz.5.930': attribute type 1 has an invalid length. [ 122.437154][ T9143] netlink: 'syz.5.930': attribute type 1 has an invalid length. [ 122.580609][ T9147] loop3: detected capacity change from 0 to 7 [ 122.584545][ T6078] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 122.587219][ T6078] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 122.589787][ T6078] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 122.593280][ T6078] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 122.595408][ T6042] Dev loop3: unable to read RDB block 7 [ 122.596841][ T6078] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 122.599079][ T6042] loop3: unable to read partition table [ 122.599188][ T6042] loop3: partition table beyond EOD, [ 122.602445][ T6078] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 122.605112][ T6042] truncated [ 122.617268][ T6078] usb 6-1: string descriptor 0 read error: -22 [ 122.619290][ T6078] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 122.622284][ T6078] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.624938][ T9147] Dev loop3: unable to read RDB block 7 [ 122.626763][ T9147] loop3: unable to read partition table [ 122.629333][ T9147] loop3: partition table beyond EOD, truncated [ 122.631475][ T9147] loop_reread_partitions: partition scan of loop3 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 122.632289][ T6078] usb 6-1: config 0 descriptor?? [ 122.643519][ T9120] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.649474][ T6078] hub 6-1:0.0: bad descriptor, ignoring hub [ 122.651512][ T6078] hub 6-1:0.0: probe with driver hub failed with error -5 [ 122.657211][ T6078] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input38 [ 122.751444][ T9] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 122.829598][ T9151] net_ratelimit: 31 callbacks suppressed [ 122.829617][ T9151] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 122.891442][ T9] usb 11-1: device descriptor read/64, error -71 [ 122.907589][ C0] usb_acecad 6-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1 [ 123.099899][ T9161] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 123.141606][ T9] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 123.311584][ T9] usb 11-1: device descriptor read/64, error -71 [ 123.321924][ T5293] Bluetooth: hci5: command 0x040f tx timeout [ 123.423069][ T9] usb usb11-port1: attempt power cycle [ 123.781436][ T9] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 123.802163][ T9] usb 11-1: device descriptor read/8, error -71 [ 124.061468][ T9] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 124.091908][ T9] usb 11-1: device descriptor read/8, error -71 [ 124.115527][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 124.115538][ T40] audit: type=1400 audit(1768265438.707:567): avc: denied { ioctl } for pid=9172 comm="syz.0.940" path="socket:[25120]" dev="sockfs" ino=25120 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.172970][ T9177] openvswitch: netlink: Multiple metadata blocks provided [ 124.187134][ T9177] netlink: 'syz.0.942': attribute type 4 has an invalid length. [ 124.203111][ T9] usb usb11-port1: unable to enumerate USB device [ 124.221227][ T40] audit: type=1400 audit(1768265438.807:568): avc: denied { module_request } for pid=9178 comm="syz.0.943" kmod="net-pf-10-proto-5-type-2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 124.599599][ T40] audit: type=1400 audit(1768265439.187:569): avc: denied { setattr } for pid=9184 comm="syz.0.945" name="SCTPv6" dev="sockfs" ino=25154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.735760][ T9191] netlink: 'syz.0.947': attribute type 5 has an invalid length. [ 124.738968][ T9191] __nla_validate_parse: 3 callbacks suppressed [ 124.738980][ T9191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 124.774175][ T9191] bond7: down delay (7388458) is not a multiple of miimon (20), value rounded to 7388440 ms [ 124.778445][ T9191] bond7: peer notification delay (2365) is not a multiple of miimon (20), value rounded to 2360 ms [ 124.785727][ T9191] netlink: 'syz.0.947': attribute type 5 has an invalid length. [ 124.789036][ T9191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 124.801640][ T9191] bond7: down delay (7388458) is not a multiple of miimon (20), value rounded to 7388440 ms [ 124.804953][ T9191] bond7: peer notification delay (2365) is not a multiple of miimon (20), value rounded to 2360 ms [ 124.883898][ T9206] overlayfs: failed to clone upperpath [ 125.152998][ T9219] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=9219 comm=syz.0.956 [ 125.191780][ T5972] usb 6-1: USB disconnect, device number 5 [ 125.258222][ T9227] ALSA: seq fatal error: cannot create timer (-16) [ 125.262095][ T9229] ALSA: seq fatal error: cannot create timer (-16) [ 125.307147][ T40] audit: type=1400 audit(1768265439.897:570): avc: denied { ioctl } for pid=9234 comm="syz.5.962" path="socket:[25204]" dev="sockfs" ino=25204 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.308148][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.962'. [ 125.372112][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.965'. [ 125.380104][ T9241] netlink: 24 bytes leftover after parsing attributes in process `syz.5.965'. [ 125.391581][ T5945] Bluetooth: hci5: command 0x040f tx timeout [ 125.438735][ T40] audit: type=1400 audit(1768265440.027:571): avc: denied { relabelfrom } for pid=9244 comm="syz.5.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 125.447089][ T40] audit: type=1400 audit(1768265440.027:572): avc: denied { relabelto } for pid=9244 comm="syz.5.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 125.477615][ T13] syzkaller0: tun_net_xmit 76 [ 125.479893][ T13] syzkaller0: tun_net_xmit 48 [ 125.482060][ T9245] syzkaller0: create flow: hash 4267314404 index 1 [ 125.501903][ T1335] syzkaller0: tun_net_xmit 76 [ 125.507267][ T9244] syzkaller0: delete flow: hash 4267314404 index 1 [ 126.352664][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 126.383431][ T9257] efs: device does not support 512 byte blocks [ 126.385975][ T9257] device does not support 512 byte blocks [ 126.385975][ T9257] [ 126.605931][ T13] syzkaller0: tun_net_xmit 76 [ 126.607967][ T13] syzkaller0: tun_net_xmit 48 [ 126.614966][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.981'. [ 126.627142][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.981'. [ 127.214197][ T9312] trusted_key: encrypted_key: insufficient parameters specified [ 127.472282][ T5945] Bluetooth: hci5: command 0x040f tx timeout [ 127.555207][ T40] audit: type=1400 audit(1768265442.147:573): avc: denied { listen } for pid=9315 comm="syz.5.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 127.660316][ T9303] tipc: Enabling of bearer rejected, failed to enable media [ 127.743991][ T9325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.744303][ T40] audit: type=1400 audit(1768265442.337:574): avc: denied { write } for pid=9326 comm="syz.6.990" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 127.758726][ T40] audit: type=1400 audit(1768265442.337:575): avc: denied { read } for pid=9324 comm="syz.0.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 127.767591][ T9327] input: syz0 as /devices/virtual/input/input41 [ 127.823976][ T9333] netlink: 24 bytes leftover after parsing attributes in process `syz.6.994'. [ 127.857757][ T40] audit: type=1400 audit(1768265442.447:576): avc: denied { append } for pid=9332 comm="syz.6.994" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 127.904617][ T9340] overlayfs: upper fs does not support tmpfile. [ 127.966801][ T9355] bridge0: left allmulticast mode [ 127.970373][ T9355] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1001'. [ 127.973097][ T9356] openvswitch: netlink: Key type 31 is not supported [ 127.976414][ T5945] Bluetooth: hci5: unexpected event for opcode 0x2023 [ 127.980014][ T9356] smc: net device bond0 applied user defined pnetid SYZ0 [ 128.170556][ T9380] tmpfs: Too few inodes for current use [ 128.219973][ T9382] 9p: Could not find request transport: fdno=}M^%Ƶ`9=353aKǚcVJ`j+$ [ 128.219973][ T9382] IeoYl;0x0000000000000005 [ 128.299983][ T9396] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 128.363852][ T9401] mmap: syz.6.1016 (9401) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 128.781768][ T5972] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 128.859122][ T9447] netlink: 'syz.0.1030': attribute type 6 has an invalid length. [ 128.932724][ T5972] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.935849][ T5972] usb 6-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 128.939681][ T5972] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.943639][ T5972] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 128.948389][ T5972] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 128.954754][ T5972] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 128.958136][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 128.960796][ T5972] usb 6-1: Product: syz [ 128.963475][ T5972] usb 6-1: Manufacturer: syz [ 128.968311][ T5972] cdc_wdm 6-1:1.0: skipping garbage [ 128.970047][ T5972] cdc_wdm 6-1:1.0: skipping garbage [ 128.973697][ T5972] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 128.975560][ T5972] cdc_wdm 6-1:1.0: Unknown control protocol [ 129.098190][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.101886][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.183813][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 129.183828][ T40] audit: type=1400 audit(1768265443.777:583): avc: denied { mount } for pid=9430 comm="syz.1.1026" name="/" dev="autofs" ino=28718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 129.195492][ T40] audit: type=1400 audit(1768265443.787:584): avc: denied { mounton } for pid=9430 comm="syz.1.1026" path="/241/file0" dev="autofs" ino=28718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 129.202659][ T40] audit: type=1400 audit(1768265443.787:585): avc: denied { read write } for pid=9430 comm="syz.1.1026" name="cdc-wdm0" dev="devtmpfs" ino=2938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 129.209921][ T40] audit: type=1400 audit(1768265443.787:586): avc: denied { open } for pid=9430 comm="syz.1.1026" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 129.217493][ T40] audit: type=1400 audit(1768265443.787:587): avc: denied { ioctl } for pid=9430 comm="syz.1.1026" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2938 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 129.282193][ T6027] libceph: connect (1)[c::]:6789 error -101 [ 129.284635][ T6027] libceph: mon0 (1)[c::]:6789 connect error [ 129.317832][ T40] audit: type=1400 audit(1768265443.907:588): avc: denied { read } for pid=9478 comm="syz.0.1042" laddr=::ffff:172.20.20.17 lport=33067 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 129.339628][ T5972] usb 6-1: USB disconnect, device number 6 [ 129.525743][ T40] audit: type=1400 audit(1768265444.117:589): avc: denied { setcheckreqprot } for pid=9496 comm="syz.6.1045" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 129.531485][ T9497] SELinux: syz.6.1045 (9497) set checkreqprot to 1. This is no longer supported. [ 129.542252][ T6027] libceph: connect (1)[c::]:6789 error -101 [ 129.544590][ T6027] libceph: mon0 (1)[c::]:6789 connect error [ 129.579206][ T9499] pim6reg1: entered promiscuous mode [ 129.581521][ T9499] pim6reg1: entered allmulticast mode [ 129.713311][ T40] audit: type=1400 audit(1768265444.307:590): avc: denied { unmount } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 130.054692][ T6027] libceph: connect (1)[c::]:6789 error -101 [ 130.056965][ T6027] libceph: mon0 (1)[c::]:6789 connect error [ 130.118254][ T9481] ceph: No mds server is up or the cluster is laggy [ 130.180307][ T40] audit: type=1400 audit(1768265444.767:591): avc: denied { create } for pid=9520 comm="syz.1.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 130.225331][ T9528] tmpfs: Unknown parameter 'C޻ h7t)̆[C' [ 130.238640][ T9524] __nla_validate_parse: 8 callbacks suppressed [ 130.238650][ T9524] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1055'. [ 130.245505][ T9524] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1055'. [ 130.354674][ T9542] /dev/sg0: Can't lookup blockdev [ 130.428557][ T9551] overlay: filesystem on ./bus is read-only [ 130.433329][ T9551] loop2: detected capacity change from 0 to 7 [ 130.443004][ T6042] Dev loop2: unable to read RDB block 7 [ 130.444998][ T6042] loop2: AHDI p1 p2 p3 [ 130.446414][ T6042] loop2: partition table partially beyond EOD, truncated [ 130.449078][ T6042] loop2: p1 start 1601398130 is beyond EOD, truncated [ 130.451238][ T6042] loop2: p2 start 1702059890 is beyond EOD, truncated [ 130.457141][ T9551] Dev loop2: unable to read RDB block 7 [ 130.459632][ T9551] loop2: AHDI p1 p2 p3 [ 130.462245][ T9551] loop2: partition table partially beyond EOD, truncated [ 130.466238][ T9551] loop2: p1 start 1601398130 is beyond EOD, truncated [ 130.469165][ T9551] loop2: p2 start 1702059890 is beyond EOD, truncated [ 131.006873][ T40] audit: type=1400 audit(1768265445.597:592): avc: denied { ioctl } for pid=9564 comm="syz.6.1066" path="socket:[28359]" dev="sockfs" ino=28359 ioctlcmd=0x6686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 131.227088][ T9572] ipt_ECN: cannot use operation on non-tcp rule [ 131.230491][ T9575] netlink: 'syz.6.1070': attribute type 11 has an invalid length. [ 131.244955][ T9575] nfsd: Unknown parameter 'fd' [ 131.266915][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1072'. [ 131.284736][ T9585] fuse: Unknown parameter 'dl' [ 131.353182][ T9593] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1076'. [ 131.356049][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1076'. [ 131.386732][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1077'. [ 131.389772][ T9596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1077'. [ 131.525775][ T9603] /dev/sg0: Can't lookup blockdev [ 131.741673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 132.881955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 133.264187][ T9672] dlm: non-version read from control device 8224 [ 133.521775][ T9692] 9p: Bad value for 'version' [ 134.450162][ T9699] XFS (nullb0): Invalid superblock magic number [ 134.524700][ T9713] afs: Unknown parameter '/YNklN~#b v~ccj' [ 134.604561][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 134.604572][ T40] audit: type=1400 audit(1768265449.197:616): avc: denied { create } for pid=9724 comm="syz.1.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 134.618610][ T40] audit: type=1400 audit(1768265449.207:617): avc: denied { sys_admin } for pid=9724 comm="syz.1.1119" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 134.648273][ T9729] ip_vti0: entered promiscuous mode [ 134.650521][ T9729] ip_vti0: entered allmulticast mode [ 134.655839][ T9729] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1120'. [ 134.716121][ T9725] dvmrp8: entered allmulticast mode [ 134.721527][ T40] audit: type=1400 audit(1768265449.297:618): avc: denied { search } for pid=9741 comm="syz.0.1122" name="/" dev="configfs" ino=1155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.993877][ T9778] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1126'. [ 134.997180][ T9778] netlink: 'syz.1.1126': attribute type 10 has an invalid length. [ 135.014424][ T9778] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 135.113555][ T9797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.174274][ T40] audit: type=1400 audit(1768265449.767:619): avc: denied { read append } for pid=9795 comm="syz.1.1135" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 135.184636][ T40] audit: type=1400 audit(1768265449.767:620): avc: denied { open } for pid=9795 comm="syz.1.1135" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 135.213802][ T9731] cgroup: fork rejected by pids controller in /syz5 [ 135.227541][ T40] audit: type=1400 audit(1768265449.817:621): avc: denied { bpf } for pid=9795 comm="syz.1.1135" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 135.235064][ T40] audit: type=1400 audit(1768265449.817:622): avc: denied { perfmon } for pid=9795 comm="syz.1.1135" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 135.307221][ T9798] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 135.310164][ T9798] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 135.318997][ T9798] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 135.491692][ T40] audit: type=1400 audit(1768265450.087:623): avc: denied { mounton } for pid=9825 comm="syz.6.1140" path="/55/file0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 135.546480][ T40] audit: type=1326 audit(1768265450.137:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9825 comm="syz.6.1140" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5698f7c9 code=0x50000 [ 135.556861][ T40] audit: type=1326 audit(1768265450.137:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9825 comm="syz.6.1140" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5698f7c9 code=0x50000 [ 135.708144][ T9831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.765808][ T9831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.769793][ T9831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.980748][ T9834] 9pnet_virtio: no channels available for device syz [ 136.081808][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1144'. [ 136.084766][ T9839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1144'. [ 137.083648][ T9870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1152'. [ 137.232316][ T9882] pim6reg9: entered allmulticast mode [ 137.311537][ T5945] Bluetooth: hci5: command 0x040f tx timeout [ 137.633912][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.636095][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.590210][ T9942] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 138.805136][ T9946] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 138.968509][ T9962] syz_tun: entered allmulticast mode [ 138.972001][ T9961] syz_tun: left allmulticast mode [ 139.057703][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1187'. [ 139.060400][ T9969] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1187'. [ 139.312398][ T9981] overlayfs: failed to resolve './file0': -40 [ 139.401934][ T5293] Bluetooth: hci5: command 0x040f tx timeout [ 139.498963][ T9992] netlink: 'syz.1.1193': attribute type 1 has an invalid length. [ 139.506180][ T9992] netlink: 'syz.1.1193': attribute type 2 has an invalid length. [ 139.512353][ T9992] netlink: 'syz.1.1193': attribute type 1 has an invalid length. [ 139.515764][ T9992] netlink: 'syz.1.1193': attribute type 2 has an invalid length. [ 139.518929][ T9992] netlink: 'syz.1.1193': attribute type 1 has an invalid length. [ 139.522298][ T9992] netlink: 'syz.1.1193': attribute type 2 has an invalid length. [ 139.525479][ T9992] netlink: 'syz.1.1193': attribute type 1 has an invalid length. [ 139.529369][ T9992] netlink: 'syz.1.1193': attribute type 2 has an invalid length. [ 139.532788][ T9992] netlink: 'syz.1.1193': attribute type 1 has an invalid length. [ 139.535885][ T9992] netlink: 'syz.1.1193': attribute type 2 has an invalid length. [ 139.692077][T10016] block nbd5: NBD_DISCONNECT [ 139.718097][T10011] block nbd5: Disconnected due to user request. [ 139.720331][T10011] block nbd5: shutting down sockets [ 139.821960][ T5972] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 139.842601][T10020] kvm: kvm [10019]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x79f2 [ 139.868133][T10020] kvm: kvm [10019]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xf6e5 [ 139.914049][T10020] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1199'. [ 139.975296][ T5972] usb 6-1: config 0 has no interfaces? [ 139.979609][ T5972] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 139.983572][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.986958][ T5972] usb 6-1: Product: syz [ 139.988393][ T5972] usb 6-1: Manufacturer: syz [ 139.989992][ T5972] usb 6-1: SerialNumber: syz [ 139.993547][ T5972] usb 6-1: config 0 descriptor?? [ 140.043162][T10032] 8021q: adding VLAN 0 to HW filter on device bond8 [ 140.071224][T10032] veth9: entered promiscuous mode [ 140.076513][T10032] bond8: (slave veth9): Enslaving as an active interface with a down link [ 140.125726][T10042] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1205'. [ 140.194831][ T40] kauditd_printk_skb: 31691 callbacks suppressed [ 140.194842][ T40] audit: type=1400 audit(1768265454.787:32317): avc: denied { audit_read } for pid=10043 comm="syz.0.1206" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 140.399030][T10006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.403224][T10006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.444467][ T40] audit: type=1400 audit(1768265455.037:32318): avc: denied { getopt } for pid=10066 comm="syz.6.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.535428][ T40] audit: type=1400 audit(1768265455.127:32319): avc: denied { setattr } for pid=10071 comm="syz.6.1215" name="/" dev="9p" ino=72876135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.634941][ T40] audit: type=1400 audit(1768265455.227:32320): avc: denied { ioctl } for pid=10077 comm="syz.5.1218" path="socket:[29390]" dev="sockfs" ino=29390 ioctlcmd=0x3b88 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 140.908436][T10099] overlayfs: statfs failed on './file0' [ 140.944044][ T1344] usb 6-1: USB disconnect, device number 7 [ 140.986049][T10103] syzkaller1: entered promiscuous mode [ 140.988292][T10103] syzkaller1: entered allmulticast mode [ 140.999956][T10105] netlink: 372 bytes leftover after parsing attributes in process `syz.0.1228'. [ 141.006224][T10103] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1227'. [ 141.060576][T10108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10108 comm=syz.0.1229 [ 141.061590][T10109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10109 comm=syz.0.1229 [ 141.112800][T10111] bridge_slave_0: entered promiscuous mode [ 141.182731][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1234'. [ 141.202435][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1235'. [ 141.427646][T10143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1242'. [ 141.462742][T10146] loop2: detected capacity change from 0 to 7 [ 141.467510][ T6042] Dev loop2: unable to read RDB block 7 [ 141.469679][ T6042] loop2: AHDI p1 p2 p3 [ 141.471085][ T6042] loop2: partition table partially beyond EOD, truncated [ 141.474856][ T6042] loop2: p1 start 1818582900 is beyond EOD, truncated [ 141.477171][ T6042] loop2: p3 start 335544320 is beyond EOD, truncated [ 141.481578][ T5293] Bluetooth: hci5: command 0x040f tx timeout [ 141.494246][T10146] Dev loop2: unable to read RDB block 7 [ 141.496720][T10146] loop2: AHDI p1 p2 p3 [ 141.498524][T10146] loop2: partition table partially beyond EOD, truncated [ 141.502357][T10146] loop2: p1 start 1818582900 is beyond EOD, truncated [ 141.505276][T10146] loop2: p3 start 335544320 is beyond EOD, truncated [ 141.518127][ T40] audit: type=1400 audit(1768265456.107:32321): avc: denied { write } for pid=10147 comm="syz.1.1244" name="/" dev="9p" ino=72876135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.528528][T10150] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1245'. [ 141.546541][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1246'. [ 141.550742][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1246'. [ 141.566168][ T1152] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.566235][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1246'. [ 141.569295][ T1152] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.573045][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1246'. [ 141.589947][ T1152] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.593687][ T1152] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.596068][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1246'. [ 141.600363][T10162] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1246'. [ 141.667675][T10166] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 141.677875][T10166] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 141.694904][ T40] audit: type=1800 audit(1768265456.287:32322): pid=10166 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1248" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 141.777146][T10180] binder: Binderfs stats mode cannot be changed during a remount [ 141.779949][ T40] audit: type=1400 audit(1768265456.367:32323): avc: denied { remount } for pid=10179 comm="syz.1.1253" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 141.810228][ T40] audit: type=1326 audit(1768265456.397:32324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.0.1255" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8da898f7c9 code=0x0 [ 141.831001][T10182] team0: Port device team_slave_0 removed [ 142.241493][ T6027] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 142.401547][ T6027] usb 11-1: Using ep0 maxpacket: 16 [ 142.405554][ T6027] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.408952][ T6027] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.412514][ T6027] usb 11-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 142.416027][ T6027] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.421209][ T6027] usb 11-1: config 0 descriptor?? [ 142.486407][ T40] audit: type=1400 audit(1768265457.077:32325): avc: denied { read } for pid=10206 comm="syz.5.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 142.493865][ T40] audit: type=1400 audit(1768265457.077:32326): avc: denied { append } for pid=10206 comm="syz.5.1263" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 142.644873][ T6027] usbhid 11-1:0.0: can't add hid device: -71 [ 142.647197][ T6027] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 142.657870][ T6027] usb 11-1: USB disconnect, device number 6 [ 142.685348][ T8253] IPVS: starting estimator thread 0... [ 142.801807][T10225] IPVS: using max 44 ests per chain, 105600 per kthread [ 142.965612][T10241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.050832][T10247] misc userio: The device must be registered before sending interrupts [ 143.099034][T10256] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 143.103561][T10256] bond0: (slave gre0): Error -95 calling set_mac_address [ 143.112076][T10256] bond0: (slave rose0): Enslaving as an active interface with an up link [ 143.561677][ T5293] Bluetooth: hci5: command 0x040f tx timeout [ 143.566358][T10282] 9p: Unknown access argument 18446744073709551615: -34 [ 143.601850][ T8253] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 143.751463][ T8253] usb 11-1: Using ep0 maxpacket: 16 [ 143.754659][ T8253] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.760501][ T8253] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.764399][ T8253] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 143.768548][ T8253] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 143.771535][ T8253] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.776675][ T8253] usb 11-1: config 0 descriptor?? [ 144.240550][ T8253] input: HID 0955:7214 Haptics as /devices/virtual/input/input49 [ 144.266047][ T8253] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 144.268867][ T8253] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 144.446487][T10275] random: crng reseeded on system resumption [ 144.465498][T10275] team0: Device gtp0 is up. Set it down before adding it as a team port [ 144.519712][T10317] vlan0: entered allmulticast mode [ 144.523022][T10317] bond0: entered allmulticast mode [ 144.525347][T10317] bond_slave_0: entered allmulticast mode [ 144.527711][T10317] bond_slave_1: entered allmulticast mode [ 144.530104][T10317] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 144.530906][ T6638] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 144.531170][ T6207] usb 11-1: USB disconnect, device number 7 [ 144.533124][T10317] dummy0: entered allmulticast mode [ 144.537376][ T6638] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 144.546062][ T6638] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 144.546467][ T6207] ------------[ cut here ]------------ [ 144.550164][ T6638] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 144.551863][ T6207] workqueue: work disable count underflowed [ 144.551872][ T6207] WARNING: kernel/workqueue.c:4359 at enable_work+0x2ca/0x310, CPU#1: kworker/1:4/6207 [ 144.551927][ T6207] Modules linked in: [ 144.551954][ T6207] CPU: 1 UID: 0 PID: 6207 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.567920][ T6207] Tainted: [L]=SOFTLOCKUP [ 144.569633][ T6207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.573879][ T6207] Workqueue: usb_hub_wq hub_event [ 144.575893][ T6207] RIP: 0010:enable_work+0x2ca/0x310 [ 144.577994][ T6207] Code: ff e8 5a 10 3a 00 90 0f 0b 90 e9 b4 fe ff ff e8 4c 10 3a 00 e8 17 59 f3 09 e9 49 ff ff ff e8 3d 10 3a 00 48 8d 3d 36 d3 06 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 74 e7 a3 00 e9 f7 fd ff [ 144.585574][ T6207] RSP: 0018:ffffc9000417f348 EFLAGS: 00010093 [ 144.588001][ T6207] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8184d6e3 [ 144.591134][ T6207] RDX: ffff888057eda4c0 RSI: ffffffff8184d8b3 RDI: ffffffff908babf0 [ 144.593750][ T6207] RBP: ffff8880583eb738 R08: 0000000000000005 R09: 0000000000000000 [ 144.596265][ T6207] R10: 0000000000000000 R11: ffff888057edaff0 R12: 1ffff9200082fe6a [ 144.598808][ T6207] R13: ffffffff8fc4eb3f R14: ffff8880583eb698 R15: ffff8880583eb730 [ 144.601337][ T6207] FS: 0000000000000000(0000) GS:ffff8880d69f5000(0000) knlGS:0000000000000000 [ 144.604205][ T6207] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.606338][ T6207] CR2: 000055999e490a18 CR3: 0000000025989000 CR4: 0000000000352ef0 [ 144.608912][ T6207] Call Trace: [ 144.610017][ T6207] [ 144.610999][ T6207] ? __pfx_enable_work+0x10/0x10 [ 144.612631][ T6207] cancel_delayed_work_sync+0x96/0xf0 [ 144.614490][ T6207] thermal_zone_device_unregister+0x28e/0x4d0 [ 144.616446][ T6207] ? __pfx_shield_remove+0x10/0x10 [ 144.618125][ T6207] power_supply_unregister+0x10a/0x150 [ 144.619892][ T6207] shield_remove+0x75/0x130 [ 144.621548][ T6207] ? __pfx_shield_remove+0x10/0x10 [ 144.623261][ T6207] hid_device_remove+0xd1/0x260 [ 144.625207][ T6207] ? __pfx_hid_device_remove+0x10/0x10 [ 144.627222][ T6207] device_remove+0xcb/0x170 [ 144.628727][ T6207] device_release_driver_internal+0x44b/0x620 [ 144.630676][ T6207] bus_remove_device+0x22f/0x450 [ 144.632280][ T6207] device_del+0x396/0x9f0 [ 144.633711][ T6207] ? __pfx_device_del+0x10/0x10 [ 144.635300][ T6207] ? do_raw_spin_lock+0x12c/0x2b0 [ 144.636918][ T6207] hid_destroy_device+0x19c/0x240 [ 144.638544][ T6207] usbhid_disconnect+0xa0/0xe0 [ 144.640082][ T6207] usb_unbind_interface+0x1dd/0x9e0 [ 144.641760][ T6207] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 144.643579][ T6207] ? __pfx_usb_unbind_interface+0x10/0x10 [ 144.645414][ T6207] device_remove+0x125/0x170 [ 144.646930][ T6207] device_release_driver_internal+0x44b/0x620 [ 144.648921][ T6207] bus_remove_device+0x22f/0x450 [ 144.650546][ T6207] device_del+0x396/0x9f0 [ 144.651951][ T6207] ? __pfx_device_del+0x10/0x10 [ 144.653546][ T6207] ? kobject_put+0x218/0x6f0 [ 144.655052][ T6207] usb_disable_device+0x355/0x820 [ 144.656694][ T6207] usb_disconnect+0x2e1/0x9e0 [ 144.658225][ T6207] hub_event+0x1d84/0x52f0 [ 144.659683][ T6207] ? __lock_acquire+0x436/0x2890 [ 144.661279][ T6207] ? do_raw_spin_unlock+0x172/0x230 [ 144.662966][ T6207] ? __pfx_hub_event+0x10/0x10 [ 144.664532][ T6207] ? debug_print_object+0x1e0/0x2a0 [ 144.666208][ T6207] ? finish_task_switch.isra.0+0x202/0xbd0 [ 144.668090][ T6207] ? rcu_is_watching+0x12/0xc0 [ 144.669643][ T6207] process_one_work+0x9ba/0x1b20 [ 144.671249][ T6207] ? __pfx_process_one_work+0x10/0x10 [ 144.673088][ T6207] ? assign_work+0x1a0/0x250 [ 144.674608][ T6207] worker_thread+0x6c8/0xf10 [ 144.676121][ T6207] ? __kthread_parkme+0x19e/0x250 [ 144.677761][ T6207] ? __pfx_worker_thread+0x10/0x10 [ 144.679354][ T6207] kthread+0x3c5/0x780 [ 144.680652][ T6207] ? __pfx_kthread+0x10/0x10 [ 144.682154][ T6207] ? rcu_is_watching+0x12/0xc0 [ 144.683765][ T6207] ? __pfx_kthread+0x10/0x10 [ 144.685285][ T6207] ret_from_fork+0x983/0xb10 [ 144.686780][ T6207] ? __pfx_ret_from_fork+0x10/0x10 [ 144.688421][ T6207] ? __switch_to+0x7af/0x10d0 [ 144.689971][ T6207] ? __pfx_kthread+0x10/0x10 [ 144.691466][ T6207] ret_from_fork_asm+0x1a/0x30 [ 144.693047][ T6207] [ 144.694090][ T6207] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 144.696416][ T6207] CPU: 1 UID: 0 PID: 6207 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.699820][ T6207] Tainted: [L]=SOFTLOCKUP [ 144.701189][ T6207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.704541][ T6207] Workqueue: usb_hub_wq hub_event [ 144.706187][ T6207] Call Trace: [ 144.707261][ T6207] [ 144.708241][ T6207] dump_stack_lvl+0x3d/0x1f0 [ 144.709752][ T6207] vpanic+0x640/0x6f0 [ 144.711079][ T6207] ? enable_work+0x2ca/0x310 [ 144.712599][ T6207] panic+0xca/0xd0 [ 144.713841][ T6207] ? __pfx_panic+0x10/0x10 [ 144.715282][ T6207] ? check_panic_on_warn+0x1f/0xb0 [ 144.716937][ T6207] check_panic_on_warn+0xab/0xb0 [ 144.718551][ T6207] __warn+0x108/0x3c0 [ 144.719829][ T6207] __report_bug+0x2a0/0x520 [ 144.721322][ T6207] ? enable_work+0x2ca/0x310 [ 144.722822][ T6207] ? __pfx___report_bug+0x10/0x10 [ 144.724442][ T6207] ? __wait_for_common+0x1e0/0x4e0 [ 144.726099][ T6207] ? enable_work+0x2c3/0x310 [ 144.727593][ T6207] ? enable_work+0xf3/0x310 [ 144.729069][ T6207] ? find_held_lock+0x2b/0x80 [ 144.730593][ T6207] report_bug_entry+0xe1/0x290 [ 144.732132][ T6207] ? enable_work+0x2ca/0x310 [ 144.733640][ T6207] handle_bug+0x18a/0x260 [ 144.734980][ T6207] exc_invalid_op+0x17/0x50 [ 144.736434][ T6207] asm_exc_invalid_op+0x1a/0x20 [ 144.737991][ T6207] RIP: 0010:enable_work+0x2ca/0x310 [ 144.739615][ T6207] Code: ff e8 5a 10 3a 00 90 0f 0b 90 e9 b4 fe ff ff e8 4c 10 3a 00 e8 17 59 f3 09 e9 49 ff ff ff e8 3d 10 3a 00 48 8d 3d 36 d3 06 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 74 e7 a3 00 e9 f7 fd ff [ 144.745571][ T6207] RSP: 0018:ffffc9000417f348 EFLAGS: 00010093 [ 144.747450][ T6207] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8184d6e3 [ 144.749886][ T6207] RDX: ffff888057eda4c0 RSI: ffffffff8184d8b3 RDI: ffffffff908babf0 [ 144.752373][ T6207] RBP: ffff8880583eb738 R08: 0000000000000005 R09: 0000000000000000 [ 144.754918][ T6207] R10: 0000000000000000 R11: ffff888057edaff0 R12: 1ffff9200082fe6a [ 144.757434][ T6207] R13: ffffffff8fc4eb3f R14: ffff8880583eb698 R15: ffff8880583eb730 [ 144.759949][ T6207] ? enable_work+0xf3/0x310 [ 144.761428][ T6207] ? enable_work+0x2c3/0x310 [ 144.762958][ T6207] ? enable_work+0x2c3/0x310 [ 144.764484][ T6207] ? __pfx_enable_work+0x10/0x10 [ 144.766100][ T6207] cancel_delayed_work_sync+0x96/0xf0 [ 144.767826][ T6207] thermal_zone_device_unregister+0x28e/0x4d0 [ 144.769778][ T6207] ? __pfx_shield_remove+0x10/0x10 [ 144.771441][ T6207] power_supply_unregister+0x10a/0x150 [ 144.773214][ T6207] shield_remove+0x75/0x130 [ 144.774677][ T6207] ? __pfx_shield_remove+0x10/0x10 [ 144.776312][ T6207] hid_device_remove+0xd1/0x260 [ 144.777882][ T6207] ? __pfx_hid_device_remove+0x10/0x10 [ 144.779554][ T6207] device_remove+0xcb/0x170 [ 144.780996][ T6207] device_release_driver_internal+0x44b/0x620 [ 144.782947][ T6207] bus_remove_device+0x22f/0x450 [ 144.784564][ T6207] device_del+0x396/0x9f0 [ 144.785915][ T6207] ? __pfx_device_del+0x10/0x10 [ 144.787443][ T6207] ? do_raw_spin_lock+0x12c/0x2b0 [ 144.789053][ T6207] hid_destroy_device+0x19c/0x240 [ 144.790628][ T6207] usbhid_disconnect+0xa0/0xe0 [ 144.792187][ T6207] usb_unbind_interface+0x1dd/0x9e0 [ 144.793880][ T6207] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 144.795678][ T6207] ? __pfx_usb_unbind_interface+0x10/0x10 [ 144.797507][ T6207] device_remove+0x125/0x170 [ 144.799008][ T6207] device_release_driver_internal+0x44b/0x620 [ 144.800989][ T6207] bus_remove_device+0x22f/0x450 [ 144.802578][ T6207] device_del+0x396/0x9f0 [ 144.803919][ T6207] ? __pfx_device_del+0x10/0x10 [ 144.805470][ T6207] ? kobject_put+0x218/0x6f0 [ 144.807123][ T6207] usb_disable_device+0x355/0x820 [ 144.808679][ T6207] usb_disconnect+0x2e1/0x9e0 [ 144.810154][ T6207] hub_event+0x1d84/0x52f0 [ 144.811539][ T6207] ? __lock_acquire+0x436/0x2890 [ 144.813105][ T6207] ? do_raw_spin_unlock+0x172/0x230 [ 144.814693][ T6207] ? __pfx_hub_event+0x10/0x10 [ 144.816143][ T6207] ? debug_print_object+0x1e0/0x2a0 [ 144.817826][ T6207] ? finish_task_switch.isra.0+0x202/0xbd0 [ 144.819633][ T6207] ? rcu_is_watching+0x12/0xc0 [ 144.821105][ T6207] process_one_work+0x9ba/0x1b20 [ 144.822607][ T6207] ? __pfx_process_one_work+0x10/0x10 [ 144.824280][ T6207] ? assign_work+0x1a0/0x250 [ 144.825706][ T6207] worker_thread+0x6c8/0xf10 [ 144.827109][ T6207] ? __kthread_parkme+0x19e/0x250 [ 144.828707][ T6207] ? __pfx_worker_thread+0x10/0x10 [ 144.830294][ T6207] kthread+0x3c5/0x780 [ 144.831613][ T6207] ? __pfx_kthread+0x10/0x10 [ 144.833086][ T6207] ? rcu_is_watching+0x12/0xc0 [ 144.834577][ T6207] ? __pfx_kthread+0x10/0x10 [ 144.835978][ T6207] ret_from_fork+0x983/0xb10 [ 144.837375][ T6207] ? __pfx_ret_from_fork+0x10/0x10 [ 144.838893][ T6207] ? __switch_to+0x7af/0x10d0 [ 144.840280][ T6207] ? __pfx_kthread+0x10/0x10 [ 144.841703][ T6207] ret_from_fork_asm+0x1a/0x30 [ 144.843182][ T6207] [ 144.844764][ T6207] Kernel Offset: disabled [ 144.846175][ T6207] Rebooting in 86400 seconds..