last executing test programs: 2m22.161864242s ago: executing program 2 (id=260): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0x115}, 0xc) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="000014000a000100000000000000000008000f0004"], 0x30}, 0x1, 0x0, 0x0, 0x850}, 0x48000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x11, 0x202, 0x8, 0x5, 0x10, r1, 0x6, '\x00', r4, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) getsockopt$packet_buf(r5, 0x107, 0x6, 0x0, &(0x7f0000000000)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @loopback, 0x0, 0x400, 0xf001, 0x400, 0x24f3, 0x400008, r4}) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, 0x0, 0x4008000) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="1c0000001a005f0014f9f40700090400810080ff0001400000000000", 0x1c) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x96, 0x4) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f0000000c00)=[{r8, 0x3440}], 0x1, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2m22.044091137s ago: executing program 2 (id=262): r0 = syz_open_dev$video4linux(&(0x7f0000000600), 0xa, 0x60081) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) (async) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) (async) socket$kcm(0x2, 0x3, 0x106) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048042e9a09e18000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a320000000014000000110001000000000000000000"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0x14}], 0x1}, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x42) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f00000000c0)) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r5, 0x0, 0x0, 0x4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x15, &(0x7f0000000300)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0xa, 0x2, &(0x7f0000000400)=""/2, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xc, 0x3, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000300), &(0x7f0000000440)=[{0x5, 0x3, 0x4}, {0x0, 0x4, 0xf, 0xc}], 0x10, 0x2b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0xb) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r9, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_RESET(r10, 0x5514) (async) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r11, 0xffffffffffffffff, 0x0) openat$cgroup(r8, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000001cc0)={0x0, 0x0, 0x2, '\x00', &(0x7f0000001c80)=0x4}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r12, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f089066000000e00002f00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0xc0, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) 2m22.040266151s ago: executing program 2 (id=263): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20) r2 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r2, 0xd3fc6000) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x400, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41800, 0x14bc0}}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000100)={'nicvf0\x00', @multicast}) 2m21.982522388s ago: executing program 2 (id=264): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 2m21.972760494s ago: executing program 2 (id=265): r0 = fsopen(&(0x7f0000000940)='ramfs\x00', 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000380)=0x2cd) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x1, 0x0, 0x10, 0xc9, {{0x10, 0x4, 0x2, 0x1, 0x40, 0x68, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @private=0xa010102, {[@ssrr={0x89, 0x17, 0x8, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @rand_addr=0x64010102]}, @lsrr={0x83, 0xf, 0xfc, [@loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x3, 0xa}]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc000000080005"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r4 = fsmount(r0, 0x0, 0x6) ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, &(0x7f0000000100)={0x3, [0xe122, 0x4, 0xec4]}) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) pwritev2(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="f0a4fd39ec0986e1e10a87249e4551fcd7d528bd691f985125b8b9ffd3526cb3752ee23ab56adb4ba0f17eeb4d98a9284c27ba1d320552e8f9c2903289011f7ca96e61af4fc4923409e70a7fca11a5242e5313ead362a3309958ae54219835ca6839fda785e34a3ab1f3", 0x6a}, {&(0x7f0000000140)="24b8d2df708d6aadfcd44e7493c1a826df85901e152a22540ee5598815ffdcc0ba39605ab8ba330369f982e55d44aec723a7b87d26ec7645be7fefba5cf46513c2abc18158af31683c32ab73a27f1bf13608c6dd269dd66c6e057c467b0c2b3c4d8f59a5ab2f2d3fbd065b987c6020bb1e46897ae704658f874dcec1984ff96e643fb9e95a9274c9211128f7d2dd335315066b4356258ff99892ce5a52c40798326468c783d190a39f272b40e1ab34568833b1fa72c185ff71d536e729d63871e3f1acd7f631c1a9f594d259cece", 0xce}, {&(0x7f00000002c0)="10ab8e21b582a97459a5161b07962432655db795089aed134dcd133647a728db712d01f99cf988e0cc287b6bd53c030cb20413bb27d0682e06476e810f5177255e24514d4f3e56d5a13552cbe168307d99c935277f985809ceee1b4e579e152f5598c2f72f3494faa782bb0500285cb27ca4acf99efeaba1ff2fb1f85666e7d425895db329fb5309e2917e553d", 0x8d}], 0x3, 0x5405, 0x0, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fsopen(&(0x7f0000000940)='ramfs\x00', 0x1) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000380)=0x2cd) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x1, 0x0, 0x10, 0xc9, {{0x10, 0x4, 0x2, 0x1, 0x40, 0x68, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @private=0xa010102, {[@ssrr={0x89, 0x17, 0x8, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @rand_addr=0x64010102]}, @lsrr={0x83, 0xf, 0xfc, [@loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x3, 0xa}]}}}}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc000000080005"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) (async) fsmount(r0, 0x0, 0x6) (async) ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, &(0x7f0000000100)={0x3, [0xe122, 0x4, 0xec4]}) (async) fchdir(r4) (async) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) (async) pwritev2(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="f0a4fd39ec0986e1e10a87249e4551fcd7d528bd691f985125b8b9ffd3526cb3752ee23ab56adb4ba0f17eeb4d98a9284c27ba1d320552e8f9c2903289011f7ca96e61af4fc4923409e70a7fca11a5242e5313ead362a3309958ae54219835ca6839fda785e34a3ab1f3", 0x6a}, {&(0x7f0000000140)="24b8d2df708d6aadfcd44e7493c1a826df85901e152a22540ee5598815ffdcc0ba39605ab8ba330369f982e55d44aec723a7b87d26ec7645be7fefba5cf46513c2abc18158af31683c32ab73a27f1bf13608c6dd269dd66c6e057c467b0c2b3c4d8f59a5ab2f2d3fbd065b987c6020bb1e46897ae704658f874dcec1984ff96e643fb9e95a9274c9211128f7d2dd335315066b4356258ff99892ce5a52c40798326468c783d190a39f272b40e1ab34568833b1fa72c185ff71d536e729d63871e3f1acd7f631c1a9f594d259cece", 0xce}, {&(0x7f00000002c0)="10ab8e21b582a97459a5161b07962432655db795089aed134dcd133647a728db712d01f99cf988e0cc287b6bd53c030cb20413bb27d0682e06476e810f5177255e24514d4f3e56d5a13552cbe168307d99c935277f985809ceee1b4e579e152f5598c2f72f3494faa782bb0500285cb27ca4acf99efeaba1ff2fb1f85666e7d425895db329fb5309e2917e553d", 0x8d}], 0x3, 0x5405, 0x0, 0x15) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) 2m21.969664129s ago: executing program 2 (id=266): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004000) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) 2m6.866302455s ago: executing program 32 (id=266): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004000) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) 1m51.759774487s ago: executing program 4 (id=605): ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f0000000100)={{0x10000, 0x3, 0xff, 0x9e, 0x81}, &(0x7f0000000040)=[{}]}) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x100000000, 0x101203) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f00000002c0)={r0, &(0x7f00000001c0)='(\x00', 0x40000, &(0x7f0000000200)={@align=0x2, {0x2, 0x9, 0x6ff, 0x100000000}}, 0x8001, &(0x7f0000000240), &(0x7f0000000280)=0xfff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_bond\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1cc, r1, 0x400, 0x70bd29, 0xfffffff2, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x95}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x7ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0xb30f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x56c}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x200}, {0xc, 0x90, 0x8}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x8000}, 0x40080c0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000740)="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") r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r2, 0x6812aa8b51d8b971, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8040) syz_open_dev$evdev(&(0x7f0000000980), 0xffffffffffff41e3, 0xa00) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x4008800) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xac, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0xac}, 0x1, 0x0, 0x0, 0x4880}, 0x803) ioctl$I2C_RETRIES(r0, 0x701, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000003400)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000033c0)={&(0x7f0000000dc0)={0x25dc, r5, 0x400, 0x70bd29, 0x5, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x72}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_SCAN_SUPP_RATES={0x84, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x7d, 0x3, "6b505a102d07019fd26e2f40e0ac51c454ff6a626508e0316343a3089a8a35a7e0ddc5d49bef03f6102d8851720f11feee53664e0d1c48f2401f7253a26aae879b4612d5d4cbf3e29559ed7489c6213d0865208f2db74d529dc36136c2a8ad63ea8a70fd4872c3485c01903094286fcca15c8ac8ec703debc2"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2458, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x16, 0x3, "62eb966626bb2d2bddd35270287cccdb3ead"}, @NL80211_BAND_2GHZ={0x1004, 0x0, "09bbb61ce74f661a47bd9bad90462b13adb4316a994a804cba1be30165e3266fc6fcb0f0563115e7d8fe7642116f748a62fab78897c2bf95da60258021d2821afda95fcdc5a61629837d3e2a14048fb62d33f8fa3f11888c8becf8cbd19165775b8cf8a610028ed25c0904c69966c5cdf69c8901ef67110ca5aa1f867f60c3d82fffeefa5a889007b6f365c1c443a94e06a75202d93f554c65203f7d57c4e8634d6c1917c1bc2c06626ce26c40ce9cd4cd3643f7d56ee161e23025b54b88cb4ccff860bc8a078586adcc323d21f617992f187fab5ee16fe8104b5435c109e82bc5e57be72f5152c7b2c76dcfe011ab169bef2fc0aa0fe6d15b8c1bbe418730736f458201499772351f3ce4cd0bdefdf8f0a33a4d8aa45607a2233514205d5c02172a8e5445256e9a3ad4e832f7bd44792b51da61038a2d2b8aaf5758be1b2ed10b03436f14ce92c7fadb7e4d13731a3bf7bf106a7d61dcaf830731c7c9fd6e704eff8ba90ec23f9912287d488ad973acc62319baa32adb3a31b9ca36b936be6ad63dd0177adf47201914e57e54626a84ab8578a14cf6d27f8ee7028d04f7bc8268387e125cb8001d5dc80c930d494f95eae04d7b8b25b7de2551c31dd5e12964b896b0ae47307f0e69e4d0f7237bc8acf820bcb5bcf569ea8f8dfd9580c5feb22365c05f8923b50bd7144265634a5a5b3ad6e46a3a96a060e3fabaadee52644e804976cb06bce5ba9d4f6fb0182efcba3a91828a676a27a0ed6c8e81916d15c0a09e0725d8fba19f7a666b9116b08ef02a86f72fb1d0ed5b0b77c0aa3499b20e6e5c81ed98969c8f1621157d13eb470ca45d736bece0a9d17449721355ca6e24f6aedcf7b9e47b246d1eb4c10df4111c24806925f38e0efab4f629e32bb0493aa8771370ecb811b439a7fbdca62dc121648dc567d9397421803f940651d77c672e0a533d47631f55fdcc11179193adeab56032bd24e4458c095593de2473c1aa21e3875d7d19f814e729175d839aae1f004198a016583c24b8886a5057e754f7abe71a173e4cfc20ddf44fc2d92a13045976679a9fde6f1b2b17919a2a4bada8c754eea526679d03ccc567fa7c8b273184c4404c3ae71ec7ebc205bb39e37acbb29b4e0d92ecf0d46c1faab077a80645d92049650648e4b2ebcf9c2d9bfedb53d6a66d26810397a0227846a0bce0af4dfd9d1c2cfd7e67f81c31df5605445fb751275fbd035e15c90d59177df253c25fc830fc679b0fec1e47a333d41f6af72846b3d4af4a612949ce9c2921a0702a758b83d816fa19e49c6390ffbaf7d4fecc24a7fdd9366c016efcfe8ca77a6c1274273e75d19f2412a35d2f93db140004fce941094080637e58b4879e1eb8981f87cd3b9d2b8759542acdb160d1944205855cd158137f5d7856399d07beb2c26c007d2389670d10cb8a08e08153b995ac7b3dd888c352a0fccce438aa9fe379e1988815cf79cbde46c2548fe33cdba5efdfc83473887cb9f587abbbb92836018f73eb6f500a03fcd680626ab52a75755b2aab9980d289bc53bbc72d34ff77f55a1629bb10a8bc22647b9bdc2635f2202e2f97746923e9e23904488be2f78501ff9949d4b2c7272bfe03369bdaa8ea081363fdd055d4623daf6684b2344985ae5a22ae3de3857f37bc34c08e475dba527e98d10d7070ad97a8fabe790e13a53fe0a22a9813e9bae03d76b86f12e172e990092203352eb51b4880c212f1a1d0251c297c5266fdcf8f5e324ede6ac9cf01d2c8fee1ac89e3990d8dd1c98e06fe55646a122139324cf37ff895cea458962e299a0bd161d0ca2d66c8571af713e7677f61dc6f95aca8982d05227816ce13a423037b10734c93c4f22dec6ced66d78ac4f02160d489e0b9deae10160b11108bf93b5b06868f56ff1db474b12c8e54887ab4a012341fb1f8d77fd359c75e4b259d226a186136105925304102d6a2c01a52b3f3d8c0a30a07aa24c74d461cdb00cdb13597e244b317ff6b22e04c5151f14dec8446365b1c46f09a3620e0cf48600131c81c64648917d8dfad072f033e69a07c36ee396dee1490c42c9dcf135804f632c98a551748d0aa4acfcfed0434344959391f6ad03ea2398f23f5e6100bc84d63dc5102b05ff8d82ccf77000b39f9765e4bd6f7a6a2c836711dd18386dafc2188120ffb6f9e4e617bf721761fc4a9a251d880a300f5ddd1c3f7ebf50c13eb6369a2e6b0161026f0e18cc096cf66332cf13e183bfaa5e7eec0df4c3d81a9dc0f21c17a7354e7580f184b17d4bdd37c8b775ee46d949f228a2595f605e6240104b78c29d687bfadc5bbb77df9aad72cbd26373a922d15561c7ac0243fb247b0f91be766603c5d008f56df80757d1d6b73b82085a2e5418a9762d5d80bc1c7ac1bf8860419bf177002b7c76a2058c5a2772becd8c52186ed9273bbd33d21236c9937f09f1122502819d8500f945515579e3f077b517c4247d3e0e6a978d80d489846298ff3cd0eed09bd42583e6bbe66eafca0bfd681e81c2c99bb16d4ba5db892486bbc47a53e4bc3f4ea2be529c5bb9f4c2026f9b550dbc51aeb0903e80955b2c5540dae591b3d5d93d5e88cc6313014e0bc08e47fa56e593ec0f78a65d039fb2ad2eaa21f94b374c0896d523cd60d472243faacc0476651a4e6f0706becfd169748c0b538c205eae23f8d09ed4ea362e12722d57f1fecb3e833ce4c0c4ffb303836aa8625f1078408e7ad8b163d0ca11a7bbcf040f53baea06ceb92860817a6cfbfa715f8e55e3e0c130266604a4261bc0bbb23cbb8efefd5118fc96b7d62c4e2434e0fd67bab1ed3759276fe3b761f8d0fb0431c2afa4ce026962b7055e208d4d6e9c0049442b2f6c132fbc9c95b351c8d5feb1014fe873fde232886ccc098b31905246098c1fbd9a0ea191324fe34c936a52a36bacf10ef92ba3f3d2ebbee69d6763d4285fa2594ead80e371d52aeece5bfdeecfb55cd8088bcf9988e7e93f131beb943777d9b28b5c002c45f47974701ca9145e7cb2492920df32d38f89559323e6a4a0fa9e248c55d1034158f4eef17ebc1aa1693c9e2cd35991dd9b10d04c8d738e6a60fce40a8c99db3407bec6f5072a52c0de0c76355252e34f34d2e6394ef10d7990454fab841a96602948e04b32d3bb41b6f83d40319e88a614ffaede5e243e3797daba6530a39a1983b89fc1cd67b242c9725def7b545beaf359107f470eca01dba512c619b1349dbc89a295979ce028f2ca487ceccf4c376e554bc20a61e038017b64faafe7bed2944eb858cdf26aa4e2a34b7adde0c3d7fbd36246847c87a5ed3a860ff270f5494ccfaf5e427f27f8959da0b3e62b01b80b698d77cd88decd9041210d9c628b8ff797b34b0073fa260a416563f8a7b607cf18f03034970d090aabf0fbe7736b8e8d744b67f2cf4bb26d4c3cd51c845198ac755a3fdc645dde873269ecb5afbcb4dee92c90dac57de54004e8f38332f6eec3ca6bf59f29139e081a151d1a76104413a6f715e41b0583eeaa93beb28ad9564192bd7c56965fdba0552c3620d06362ec4302210bb6262d02d66de759f17899cc873c0a6a3fb6c2cb0a00d8c82cb82cb50500dc4e4b0e2dccc5abe17f4221c6081985ad16f71b361ce38b889342d3f06d7a160774472d6f26fedc7de736af950ee262fd39cb5a1566cfeaa4923dc48b49f4a46d4ac64f275abb4cef62a9764369da0d1dfa52c87c13c4f9c3e3a2c7a76b5d2253667e9a1eb6144f133014df579972c9439d568d8635b7eb741589d9f5eb1bbc5a82e7f2aa0a09a52c9fdb56474d7401a2dbc6e79b54c68aea66000636b38b43a63dbb24032b5f4af5bc5f38a4ae1dfc387c7f0ce5bef2803503af78eb68483a88aeb3779040513345ec4d599fdd794a1afc88cbf0220336f98fb5dc224b30843c386137b9183e81ff8fb2adfe83bc8f8f949a108729f6d0ea8135257048938c4324bcf084df414f532bab7bfd0f9b4e4fcd5bc4ae730c612ffc15a24b0ef854b870c238c23e4a23cd172bf8e8e01c58742ba28eb549d1640d118150334d9ea42054ec1e2397c4bf65f8fe28c7d45a63eb6c14c81acc6d7156a0a74722dd1c7fa4aada8bbb366c31d6832fea25fcb71f3cc556b69b9a1b0eef0afee7639641cb8735f80b70398132b954e961c5d95d6240d70a8defe48009979d85249316ecc25411f3cf8d29058a710577b8019040f3113f0c88c4545c6cd76837ef203c51590cbc66950727146678ecb9a7480458787f1fabcc824c414d1ab957dbe71418e14cda384b293c5ee8537de14e7897a5706090863fcefb722b37af3c778ce7a04d6a55127f508c02ea542d8823e93ab4992b7c485b08aee45e59d93bff8fa3f6a1226ac2dfa35906cb23bac56bf3edcc64bb4ed0add9276a80449d8a9ed52be23d642a41df818ba7c8bdfe9a1b2cca79991e501bbed92d989d7792b12addccd526a2367a4294d0785ef0a8c26d4f3c52c9869bc610989ec1e4d519571057a012be8383e2c5dd9a6688e625aa83e656094f0542801d62401425c4f72974abca8dbaad071631e89b216f7c4103c88e7d240abcb6da6fe34222c96e23dd1f236eb2a4698fc92b4ee8936f9cec379f78930594e65339fcdacf12988c02b6bf9263c0b2fb571245c68be16decf61f9f195b25bbbd13b1d39fefc7394e5384180203eb4bae1bc4896b2e4667d796d7e1159ad3d8c9d961f83e531c47ee0396738c31754d47def3d8ab59d22a4aa722cbccf8ee019dbb26c2f1b68ff04ad996e7b72472089d1c8699b617b95a00074b891281bb71d1fe4ad909886c9259e3240a63b046cccddb50a09e2a7cfbb9230eae2a691b24f40dfb18b5a141a84b064b1d7c37911b3a58d4985ee2c28efc0102400063f886da3602a81fbefe63aa6775edd184fa3993e150b3a536ff7a2ec31ff158f62e7916c1df310e561c8810139826a5aaecd8a5973295a64f73f95c9e0e030bda7dff79c04664b559e7727a8bd3ab25ba6e8cdaee5eaa265c01cbfd65648c98efc6019a05e5023a5695890b621ab2b6062d89ddb0d33f0ca57a484ec61b95a852f6fc7abaa498edb78b2dc01f75f81d66f3e095307e692f42c9952497aaee87e4a9e45ce3ab7624fca6fce3927309efe5da3aebd5f64fff50aed37e3c281f8f5c94d299135c45853832f1093c7ec860c2df15d6e47dab550c62c0cfd2071d45185962390626694f7278c6c4e5128e42110a3d8fc6ddae61cc6c656310723efb48ac4c5a0af6bdcfb963171c769fe77bf2915cb12c159433c777ac62448292a85b1e0899bfa039e14dd4770cdfedfdbe3e2cd0af8104640176a50d20d280d762f86463747bb7cb3468245912b3be65b32e8901836c8613ff2be2dd98251fc9f13f0963df6b0bc0ea4a81d6c326ea1047169a7308b037cd9d5bb601da0f3aa92fda00ea30b820c6712f6ed86c2bd53ef46b07608c43d5e3717127181a07aeee9b130bda43cf2d493831eb4597eb574d424897a54b7f397202066a83f2f3319c5505a1974eada9963fc699fd3702443a137aa842fe6dacc773cba01a87d11d846344ab98ff38dcabfe715440c46645934eba5591412ceed1c321acc37df7b0ef773022a7e8b689df64e1bcb74efa0839637d413968e094bcc57913632e57ffa2792764635afbf51f1c9059c19f864ee652ef17ebd3fa503e545e399d9a1b8e0856d95320deaaa9ca15432ee0137beffd1ef403aebc590406adf6e7205a14f3bec9aba563479604a5d2ed9f8d451e02e14efb68ad55301eb107e9c4a099e3183306759fb13"}, @NL80211_BAND_5GHZ={0xa2, 0x1, "3c6256235d0540cb2b671734dc705f518cb667a3ee119626a7120c2a89b4d68f3a1a3eda2d4a8f9afd6c8a27943953a0dd8bb0c67e02d084a31bb208163c8979f65f60da5e792829f7f4821eca63baa0ee8b34297fc9d1a7722fda2f68a8efef96039fdd93afb572530c96da20bfec80678e87f44cd77e8aeb284ec9303de6a2e9055e101a0c5516b0e7def06793003c52ae377098795f84fda5cc53629e"}, @NL80211_BAND_60GHZ={0xd6, 0x2, "06075584d4b57c8975a2b8f6119a3a6a3940eac5140e20a539fb0dd250e82bc99c0296106e2e7bc590b8671b8820095aaeb35bb406da9b306c3c0111e0396ea0c6fa16b08569f5d3a486d4a99f1c1c7b0bb4c6cf3f25cf569fffeec60c18077d0d66133464f42494be2ccb8b704a8a64998d8b8702722394e822f3a5e2b7f14dfe20fa273eddda6e697c720369bc6b3b7a403a26d8f41c473638e2700d0ff951caf06c77b52e1f2ee1ecf8ea9796520b6d5b1a36cc02768e86dd5aa827b0488818c67947b0366d396680ba6170377d8dc645"}, @NL80211_BAND_2GHZ={0x6e, 0x0, "6ea4dda0d9e644fcc97061f9dea31ce5e951a38fe1193978d66a666e8a9bc1775364fd9f0fc3d37b12d023e3b4e37f98ca9f58522e1fdcd2183a510e14c74246495cb7fd0357fe939e25e644d926dd0ec16b16d9092f643ac11004c08ffa9619bbdfd4328f77c08cf1e5"}, @NL80211_BAND_2GHZ={0xeb, 0x0, "fdc3cd3743c5b969c759715de5342846c46d8b71c298810be03aa5448d7ecad23be5e3879faed0e8037afc46424f9ec136135eba8ca809893689cdc573c70363fec89165aa84062d3998da505bb73e25cb97556bd7ba9c9a4f69f7c4fb2bf60857b5d42c7aab417c823149688b03ac338f1c8a354cedbab010ae26469de43752ffe52ee65f8e543699afec2159bc61f7ed3c0ff47bae11abd856e0dddfa0b893a4c244bb2c8aacc3fe99f4041490ab332273cb9aee41f497f2fe945e620db98cda0e05eb2a44ec5244e37796138e13e840ba8eef55cefd6f82ceaca51baaa1630635dd1f8c8b4c"}, @NL80211_BAND_6GHZ={0x71, 0x3, "28f00e4ba70dffdf683f7e461626b5a76eeafeacbb1c26e1c7e85805506a851517e846854e4a6f013d98bf711cde451262be9ee87d649d0bfc02bb4ccbffba53ae2404ce49b7336fcb776dea998a6b74bd142f799d2ee6da9603b73d923dd3a00ef7709f00d9729e1924cd2750"}, @NL80211_BAND_2GHZ={0xe6, 0x0, "aba040f588f435a74e163936eacb819507457be14581294ee39666ae5caf986a5f5aa8fb7fd752533d9c3529b9c0782075f28b119d51dc525693d72bff342bca73604078b1e7ea8ceb127cb8d2fce8eecc863351ca26db77b36b11a93233be8d201a5e6231414c61f30d346061d99b3f6a35b72c9c72cc0518be2a27cc80c77968fb1bfe26d35bc4b56241c3361a150f07e3d5b705d08715bbcc168e76890eda5fef36ef1918e015e9ad85b15169e53d63aa5b2beab442fa2929341e6994afb3e5dea0788edd10b1f9c22bf20c55a907fb9f7a67f50a8fa1e0320fd9e131bde570e4"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "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"}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xc8, 0x84, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x21, 0x1, @random="a26d264aa82f1c0bab353474ada1e1482e958f34ec2e022c3a5ed1b002"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x20, 0x1, @random="aa00c67edbd9ea6b9a7d2a18a8d68abf008543de5f5de64ab3bd34f6"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xdae}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7ff}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}]}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2004}]}, 0x25dc}, 0x1, 0x0, 0x0, 0x1}, 0x40011) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000003440)) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$XFS_IOC_FSGETXATTRA(r7, 0x801c582d, &(0x7f0000003480)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000003580)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x1c, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000035c0)={r0, 0xffffffffffffffff}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003740)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003880)={0x6, 0x17, &(0x7f0000003600)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x9}, @exit, @exit, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3ff}, @alu={0x4, 0x0, 0x8, 0xb, 0x9, 0x100, 0x8}, @exit], &(0x7f00000036c0)='GPL\x00', 0x7e1, 0x2c, &(0x7f0000003700)=""/44, 0x41000, 0x6, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000003780)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000037c0)={0x0, 0x1, 0x0, 0x7fff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000003800)=[r0, r0], &(0x7f0000003840)=[{0x4, 0x5, 0xf, 0x6}], 0x10, 0x55}, 0x94) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000003940)=""/175) chdir(&(0x7f0000003a00)='./file0\x00') ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000003a40)={0x6, 0x6, 0x8}) 1m51.754181734s ago: executing program 4 (id=607): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'netpci0\x00', {0x2, 0x4e20, @empty}}) 1m51.643468781s ago: executing program 4 (id=608): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xa101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123900, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x1b}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000180)={"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"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000340)={0x5, 0x100000, 0x0, r6}) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000600)) 1m51.219359317s ago: executing program 4 (id=613): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c}, 0x28) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) syz_emit_ethernet(0x200000, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10001}}]}, 0x38}}, 0x4000010) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@mmap={0xff, 0x0, 0x4, 0x0, 0x2, {}, {0x4, 0x0, 0xff, 0x4, 0x27, 0xc6, "cfc62ec1"}, 0x7fffffff, 0x1, {}, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 1m51.123713496s ago: executing program 4 (id=615): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f009, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000500)={0x4000000000000010, 0x100, [0x0, 0x400, 0x1, 0x5, 0x3, 0x9], [0x7, 0x5, 0x5488, 0x2, 0x7, 0x3], [0x8, 0x2, 0x0, 0x9, 0xf61, 0xd5], '\x00', {0x4, 0x0, [{0x6, 0x1e000000, 0xdf657b852b0add4, 0x5, 0x8, 0x16, 0x8001}, {0xd, 0x9, 0x4, 0x6, 0xfffffff7, 0xca07, 0xd}, {0x0, 0x1, 0x0, 0x4, 0x81, 0x5ae, 0x720}, {0x2, 0x4, 0x2, 0x29a0831d, 0x8000, 0x7, 0x8}]}}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x85) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) symlinkat(&(0x7f0000000380)='./file0\x00', r1, &(0x7f0000000400)='./bus\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x8000, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x4010, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x21042, 0x136) write$P9_RLERRORu(r5, 0x0, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r4, 0x0, &(0x7f00000000c0)=""/102}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r6, &(0x7f0000000000)=@known='system.posix_acl_default\x00') r7 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) 1m51.032871305s ago: executing program 4 (id=617): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) write$binfmt_script(r2, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendfile(r1, r2, &(0x7f0000000100)=0x1010, 0x10001) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x9c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bridge_slave_1\x00'}, {0x14, 0x35, 'bond_slave_0\x00'}, {0x14, 0x35, 'xfrm0\x00'}, {0x14, 0x35, 'geneve0\x00'}, {0x14, 0x35, 'nicvf0\x00'}, {0x14, 0x35, 'vcan0\x00'}]}]}, 0x9c}}, 0x40800) 1m35.729739749s ago: executing program 33 (id=617): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) write$binfmt_script(r2, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendfile(r1, r2, &(0x7f0000000100)=0x1010, 0x10001) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x9c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bridge_slave_1\x00'}, {0x14, 0x35, 'bond_slave_0\x00'}, {0x14, 0x35, 'xfrm0\x00'}, {0x14, 0x35, 'geneve0\x00'}, {0x14, 0x35, 'nicvf0\x00'}, {0x14, 0x35, 'vcan0\x00'}]}]}, 0x9c}}, 0x40800) 49.400865749s ago: executing program 1 (id=1303): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x5fa, 0x3, 0x2, {0x1, @pix_mp={0xcf6, 0x101c00, 0x3432564e, 0x5, 0x8, [{0x2a302c, 0x10000}, {0x1, 0xfffffffc}, {0x5, 0x9}, {0x7fff0, 0x10001}, {0x2, 0xffffffff}, {0x6, 0x5}, {0xe, 0x8}, {0x8, 0x10000}], 0x7f, 0x6, 0x2, 0x1}}, 0x82}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x3, 0xebe, 0x1, {0x1, @pix_mp={0x6, 0x8, 0x47504a50, 0x9, 0x6, [{0x2776463d, 0x7}, {0xfffffffc, 0x7f}, {0xffffffff, 0xffff}, {0x1, 0x42}, {0x7, 0x310cb2b8}, {0x7fffffff, 0x80}, {0x610, 0xfffffffc}, {0x7f, 0x6}], 0xa0, 0x7f, 0x1, 0x1, 0x5}}, 0x8}) 49.399708492s ago: executing program 1 (id=1305): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = socket(0x10, 0x803, 0x0) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r1, 0x0, 0xb, 0x0) (async, rerun: 64) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r1) (rerun: 64) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @remote, 0xe}, 0x1c, 0x0}}], 0x1, 0x4001c00) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 49.301942812s ago: executing program 1 (id=1308): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x12, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x400, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x11, r1, 0x10000000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r2, r0}) 49.092387869s ago: executing program 1 (id=1312): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x123f82, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) (async) umount2(&(0x7f0000000340)='./file0\x00', 0x8) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x8, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x9, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2f, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) (async) close(r2) socket$unix(0x1, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000200)="27030200dc0f14000e00033c0ff000000000ff840000000200000003125ce882cbf490d908f1523f00000000", 0x2c}, {&(0x7f0000002680)="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", 0xc9a}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde15", 0xb4}, {&(0x7f0000000980)="281a9d23fdff85", 0x7}, {&(0x7f0000003340)="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", 0x279}], 0x5}, 0x4005) (async) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x6, &(0x7f00000002c0)=[{0x7, 0x9, 0x7, 0x1456}, {0x1000, 0x7, 0x6, 0x800}, {0x400, 0x5, 0x1, 0x6f}, {0x2, 0x40, 0x6d, 0x9}, {0x2ba, 0x77, 0x2, 0x10}, {0x9, 0x7, 0x2, 0x7}]}) (async) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r10, 0x40045010, &(0x7f0000000000)=0x6728) write$dsp(r10, &(0x7f0000000080)="a583", 0x2) close_range(r9, 0xffffffffffffffff, 0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'multiq3\x00', [0xa3f3, 0x5, 0x29, 0x4, 0xb4, 0xcc5, 0x8, 0x3, 0x8, 0xe, 0x7ff, 0xffffffff, 0x1, 0x5725, 0x9, 0x80, 0xfffffffd, 0x1, 0x9, 0xb13285ce, 0x8b, 0xcaa9, 0x1, 0x464cb, 0x4bd, 0x1, 0x39, 0x8, 0x100006, 0x4, 0xfffffff8]}) 48.949006397s ago: executing program 1 (id=1315): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x5, @mcast2}, 0x1c) capset(&(0x7f0000000040)={0x19980330}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224effffffff", 0x58}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000300)=0xffffff7f, 0x4) r3 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000000191407"], 0x10}}, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) close(r3) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, &(0x7f0000000ac0)) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x11, 0x3, &(0x7f0000006380)=ANY=[@ANYBLOB="18000000010000000000f9ffffffffffffff753c", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000850000009e00000018220000", @ANYRES32, @ANYBLOB="00000000f8ffffff1801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff7f000085000000060000009500000000000000873306000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0xfffffffffffffe7c, 0x10, &(0x7f00000002c0)={0x0, 0x3, 0x4, 0x80c}, 0x10}, 0x94) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 48.423027505s ago: executing program 1 (id=1320): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x3ff) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44f90000", @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf250800000018000280100003800c000180080001000700000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}}, 0x10004000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async, rerun: 32) r6 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f0000000340)=ANY=[], 0x1) (async) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x14) (async, rerun: 64) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x32, r7}) r9 = socket(0xa, 0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0) (async) ioctl(r9, 0x8916, &(0x7f0000000000)) (async) ioctl(r9, 0x8936, &(0x7f0000000000)) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r10, 0xc03864bc, &(0x7f0000000180)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x3, 0x0, 0x0, 0x9, 0xb, 0x46d, 0x5508, 0xc336, 0x1, 0xb, 'syz1\x00'}) (async) flistxattr(r2, &(0x7f00000000c0)=""/183, 0xb7) (async, rerun: 32) r11 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010103}]}, &(0x7f0000000000)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x2, 0x802e}, 0x90) (async) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc0106442, 0x0) 48.315580294s ago: executing program 34 (id=1320): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x3ff) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44f90000", @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf250800000018000280100003800c000180080001000700000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}}, 0x10004000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async, rerun: 32) r6 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f0000000340)=ANY=[], 0x1) (async) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x14) (async, rerun: 64) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x32, r7}) r9 = socket(0xa, 0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0) (async) ioctl(r9, 0x8916, &(0x7f0000000000)) (async) ioctl(r9, 0x8936, &(0x7f0000000000)) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r10, 0xc03864bc, &(0x7f0000000180)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x3, 0x0, 0x0, 0x9, 0xb, 0x46d, 0x5508, 0xc336, 0x1, 0xb, 'syz1\x00'}) (async) flistxattr(r2, &(0x7f00000000c0)=""/183, 0xb7) (async, rerun: 32) r11 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010103}]}, &(0x7f0000000000)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x2, 0x802e}, 0x90) (async) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc0106442, 0x0) 3.432814906s ago: executing program 0 (id=2060): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002140), 0x40000, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000002200)=[{&(0x7f0000000b80)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000bc0)="3c6c0bf4", 0x4}], 0x1, &(0x7f0000000cc0)=[@dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x20, 0x80}], 0x1, 0x8000) waitid$P_PIDFD(0x3, r1, 0x0, 0x4, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r4, &(0x7f0000000480)="ef1e6b", &(0x7f0000000e00)=""/224}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000cc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000c80)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r5}, 0x4) rt_sigsuspend(0x0, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006100100000000000c0004400000000000000007140000001100010000000000000000000100000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001", @ANYRESDEC=r10], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) write$nci(r6, &(0x7f0000000540)=ANY=[], 0x14) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007ba8cc3b1a34a11e2056a83b261a8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r13, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.172104351s ago: executing program 6 (id=2067): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async, rerun: 32) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (rerun: 32) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f046}) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600), 0x4) (async, rerun: 32) open(&(0x7f0000000280)='.\x00', 0x0, 0xd6) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='C', 0x1}], 0x1}}], 0x1, 0x200400c1) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r1], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x6c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bond={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x8}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x3}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x4}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0xb}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 3.111482722s ago: executing program 6 (id=2069): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x814) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.pending_reads\x00', 0x80000, 0x10) r3 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x40000, 0x8, 0x15}, 0x18) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000240)="410f49bd00300000b9690b0000b801a20000ba000000000f300f01c40f201066bad104ed0f20d835200000000f22d82e42c80030e066b8f8008ec8f2430f79d4410f67c0", 0x44}], 0x1, 0x72, &(0x7f0000000300)=[@flags={0x3, 0x1000}, @cr0={0x0, 0x20000010}], 0x2) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000380)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000340)=0x4}) syz_emit_ethernet(0x112, &(0x7f00000003c0)={@random="d0df98e3a4a8", @broadcast, @void, {@mpls_mc={0x8848, {[{0x9}, {0x4, 0x0, 0x1}], @generic="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"}}}}, &(0x7f0000000500)={0x1, 0x3, [0x61e, 0xf0, 0x66c, 0x115]}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000640)={r4, &(0x7f0000000540)=')\x00', 0x4000, &(0x7f0000000580)={@_ha_fsid={[0x5, 0x1ff]}, {0x10, 0xfff2, 0x9, 0x5}}, 0xffff0000, &(0x7f00000005c0), &(0x7f0000000600)}) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000680)={0x1, 0x0, [{0x116, 0x0, 0xdb}]}) ioctl$SNDCTL_FM_4OP_ENABLE(r5, 0x4004510f, &(0x7f00000006c0)=0x2) r6 = landlock_create_ruleset(&(0x7f0000000700)={0x1, 0x11, 0x3}, 0x18, 0x1) vmsplice(r6, &(0x7f0000000940)=[{&(0x7f0000000740)="ff182fe887729942a81541f4c5225fcd8bca3a4a9471bdb80679ce2ddca711299f265245625dc8decb7ee217bea99a1388", 0x31}, {&(0x7f0000000780)="091e081f55703431a4433f579b3cc86a117de2f49fa84b704561a49cd15a9ba4c1fc18", 0x23}, {&(0x7f00000007c0)="51ec9343704132de60b5416072f79e6219a6e0ef4e4fc2118c1cb0d7982b7a241dc94852b27dced466a8ea9f4526b1f69670ae8196ec686b07eea7c210ed18aef1908af4f42fb0ad4261a1c7f3623009d3b712133bb593ddc3f5456f42ca88", 0x5f}, {&(0x7f0000000840)="979d5c458a075863a721b6d2d4f53a862fdb014dcb500ae5272420e6251d63e386e8e4df707b2fe1ae80acea0e267448f2a4eb6e41358410190139abb2ba1e877da1bc919a37bff6c64476bd6936d709b13fcbc016c82d5b10ea00701725d6e0146c12d7ae765867f45827bccd176afef353498f244aa58b8c5d362f4071fd915ee2da89f143fd5fef2844360c2019cca41b811cee775dd0e86a0443f85c8abe1314a4b21ea149b99fd50277aa0c7b8965bc1f5e06a3a32035f28ff405d15469c01f8c410923e1c87c52630586298bf46dea240362608b217fcf66ec2c799a62bf38b3b3d0305b379a512a43b428930f", 0xf0}], 0x4, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000009c0)={0x6, &(0x7f0000000980)=[{0x40, 0x11, 0x5, 0xc}, {0x300, 0xc6, 0x71, 0xe9}, {0x7b, 0xe}, {0x8, 0x80, 0x0, 0x7fffffff}, {0x2, 0x7, 0x4, 0x1}, {0x5, 0xf, 0x5, 0xfc0}]}) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000a00)=0x5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan0\x00'}) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000b40)={'batadv_slave_1\x00', &(0x7f0000000a80)=@ethtool_rxnfc={0x0, 0xe, 0x7, {0xd, @sctp_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x4e21, 0x4e23, 0x7}, {0x0, @multicast, 0xc029, 0xcda8, [0xffffff7f, 0xd]}, @ah_ip4_spec={@multicast1, @rand_addr=0x64010100, 0x3, 0x3}, {0x0, @empty, 0xd, 0x3, [0x8, 0xfff]}, 0x1, 0x4}, 0x1, [0x7]}}) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000bc0), r3) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x30, r8, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0xe}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r5) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r9, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x42}, @val={0x8}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x4040010) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000e00)=0x0) prlimit64(r10, 0x4, &(0x7f0000000e40)={0x0, 0x1a}, &(0x7f0000000e80)) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0xfdcef9a6dde496d2}, 0xc, &(0x7f0000001040)={&(0x7f0000000f00)={0x114, r9, 0x31c, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xed, 0xac, "76f12dd6c0c47b973c516511bd83fc8e03e6175fc48cbcd3c9aac903f7e4314e0419bc6681d599ce89f2a324b176e1aaf6217b0ceeac848e038a24b2508f2c9a2539c49b5e8bdf756366f1ec6e16058a7eb75232148c319939ff4d98813e33b551fdf5b46e1771d797934c13364fd180411bf91b76bff1c83170ea1479f76b4e4349027f82d95deb04912a837e3b1736ba85a2514867976f3c5250a68689c038176dfdb64887523855b02b3fcad79f6e7986b1141037fc47b167fa629c0d870ad415240ecc7d7079e08a8c5ca28c06c69b7f7d7aad369f495dcca0a8d73643958f18a143b64b02f9d8"}]}, 0x114}, 0x1, 0x0, 0x0, 0x4005}, 0x80) r12 = openat$cgroup(r3, &(0x7f00000010c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r12, &(0x7f0000001100)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) 3.052433724s ago: executing program 3 (id=2071): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x8, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84) (async, rerun: 32) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x300000d, 0x3) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000c40)="ab", 0x1}], 0x1, 0x9, 0x7) (async, rerun: 64) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000280)={0x28, 0x4, 0x0, {0x0, 0x6}}, 0x28) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0/file0/file0\x00'}) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_io_uring_setup(0x238, &(0x7f0000000380)={0x0, 0x80ff, 0x400, 0x1, 0x265}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local}}) (async) io_uring_enter(r6, 0x3532, 0x32c9, 0x45, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r10, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r4, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff050000000000000002000000000000000300000000000000020000000000000005000000080000000600000000000000090000a367d70edc8464cd0000000000ff0000000000000003000000000000000000000000000000ffffff7f570000000300000000800000ff030000", @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="040000000400000000000000000000000000200037050000000000002b"], 0x0, 0x0, 0x0}) (async, rerun: 64) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000500)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@allow_other}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@audit}, {@subj_role={'subj_role', 0x3d, '#'}}]}}) (rerun: 64) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000040)={0x0, 0x2, 0x1b}) 3.051722166s ago: executing program 3 (id=2072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1715, 0x4b7bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x32, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80854}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x0, 0x2, 0xffffffff}, {0x81}, {0x3, 0x4, 0x80}, {0x16, 0x0, 0xff}]}) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x4e24, 0x7, @empty}, 0x0, {[0x2, 0x0, 0x0, 0x0, 0x0, 0x1e9]}}, 0x5c) fstatfs(0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000005e6bf02f000000180001801400020076657468315f746f5f626174616476000c000380"], 0x38}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x5, 0x4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 402.042636ms ago: executing program 3 (id=2078): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESHEX=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES16=r0, @ANYRES16=r0]) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) umount2(&(0x7f0000000480)='./file0\x00', 0x9) 396.583935ms ago: executing program 6 (id=2079): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000400)='>', 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1b, 0xb, &(0x7f00000006c0)=ANY=[@ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xdf521a04d83de2f) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000400)='>', 0x1, 0xffffffffffffffff) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)) (async) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1b, 0xb, &(0x7f00000006c0)=ANY=[@ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xdf521a04d83de2f) (async) 392.544429ms ago: executing program 3 (id=2081): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 387.36111ms ago: executing program 0 (id=2082): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="6000508011000a004abee339084eeef16f162471f4000000080003000aac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 332.424738ms ago: executing program 6 (id=2083): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x84) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) removexattr(&(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000100)=@random={'security.', 'overlay\x00'}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) lseek(r0, 0x0, 0x4) 325.174249ms ago: executing program 6 (id=2085): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r0, 0x1, 0x7, 0x0, &(0x7f0000000980)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001200010200"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00 '], 0x28}}, 0x0) (async) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515b97c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x2000c804) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x40046f41, &(0x7f0000000100)=0x100000) 305.553622ms ago: executing program 5 (id=2086): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x7, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x2d, 0x1001, r2, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r3, 0x40085874, &(0x7f0000000140)={r1, 0x9}) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={{&(0x7f0000600000/0x3000)=nil, 0x3000}}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0x300, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {}, {0x6, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x2}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000f800030000000000fb150705e837282efe0868327a31a705ec9785474c52960473971372bf4ee11e8ea38db3109a"], 0x830600) socket$packet(0x11, 0x2, 0x300) r6 = socket(0x26, 0xa, 0x6) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) socket$inet(0x2, 0x2, 0x0) 232.685971ms ago: executing program 6 (id=2087): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) unshare(0x6020400) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) openat$cgroup_pressure(r6, &(0x7f0000000300)='cpu.pressure\x00', 0x2, 0x0) read(r2, &(0x7f00000006c0)=""/247, 0xf7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000080), &(0x7f0000000380)=r6}, 0x5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)}, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r8, @ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r12 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r12, &(0x7f00000000c0)=ANY=[@ANYBLOB='target '], 0x15) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x4, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7ff5, 0x1}, {0x6, 0x6}, {0xfff6, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xc7}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 232.32471ms ago: executing program 5 (id=2088): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10102, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, 0x25, 0x101, 0x70bd22, 0xfffffffc, {0xa}, [@typed={0x17, 0x10d, 0x0, 0x0, @binary="b669019f45719e4c0d95279ada9accde47f193"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) 172.942422ms ago: executing program 0 (id=2089): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01144e", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x1}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a, 0x0, 0x1}, 0x20) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x180000c) socket$alg(0x26, 0x5, 0x0) 172.541625ms ago: executing program 0 (id=2090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)={0x158, r1, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x4c}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1708e41f5bec5a10ddb6b7fa160c08b762541ee5e86070f8"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "de686c43bcc5409836ab3f89f90dc4196f8ac02a5c5abbee"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2ecb9fc2bb9666cdce97ba0b63e6cc63485cc55ae67b30e3"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "86d80e1af5cfe71a750618db66a84e7f4781afcca3152bf3"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "85cfe64d51d5b4c9c36d6ef42977920f174cf8d80c8c950a"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x158}, 0x1, 0x0, 0x0, 0x40004}, 0x20000010) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x926}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe0000010000000014000f00"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0) ioctl$RNDADDENTROPY(r6, 0x40085203, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000001eaf"]) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = gettid() sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r8}]}, 0x3c}}, 0x8000) capset(&(0x7f00000002c0)={0x399f1316, r8}, &(0x7f0000000180)={0x0, 0x1000, 0x0, 0x80, 0x5}) syz_open_dev$sndctrl(&(0x7f0000000140), 0x6, 0x410000) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) open_tree(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x89901) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r11, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) getsockopt$IP_VS_SO_GET_DESTS(r9, 0x0, 0x484, &(0x7f0000000380)=""/197, &(0x7f0000000040)=0xc5) r14 = inotify_add_watch(r9, &(0x7f0000000600)='./file0\x00', 0x81000828) inotify_rm_watch(r9, r14) 172.178862ms ago: executing program 3 (id=2091): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xa, 0x148, 0x120, 0x60, 0x1f8, 0x2a8, 0x2a8, 0x1f8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x10}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xb6, 0x8, [0xb, 0x24, 0x24, 0x19, 0x3e, 0x19, 0x31, 0x3b, 0x5, 0x40, 0x12, 0x33, 0x3b, 0x3f, 0x3b, 0x7], 0x0, 0x7fff, 0x1}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x67, 0x0, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x1, 0x81, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2f0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%ps \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r6, 0x8, 0x801076469c94fa06, 0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r8, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002a00)={0x38, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x38}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}, @nested={0x10, 0x4, 0x0, 0x1, [@nested={0x4, 0xc9}, @typed={0x8, 0x135, 0x0, 0x0, @fd}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x57, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x33, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x6c, 0xffffffff, 0x8, 0x60000, r2, 0xfffffffc, '\x00', r3, r11, 0x2, 0x5, 0x4, 0x9}, 0x50) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.upper\x00', &(0x7f00000001c0)='\x00', 0x1, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026", 0x39}], 0x2}], 0x1, 0x40800) close(r13) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040014}, 0x20005804) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x74]}}]}) 171.942101ms ago: executing program 5 (id=2092): mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0x82000000) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000100)={0x0, &(0x7f0000000040)="2e5749b0079e639cae3613a68b776a7c76867ac7113b45cc3cdd3e6c456881e2784576a78dc7d0dbb9df5b93d9f27f395e58f5f5272d429dc8a1dd0cb653b6f7fcdd7eab445124f89d3f7c59c5a7342bb187bf0fc4064d61193935f7bd5b0cafd5e64b6e939e2e771ae0b7dcae28752d43899f690b610574b1a0328057cb7c5bb4", 0x81}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000140)={0x0, 0x5d72, 0x20, 0x0, 0x123, 0x0, r0}, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pS \x00'}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r0, 0x4, 0xff, 0x7}) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000002c0)=0x7fffffff, 0x4) close_range(r0, r1, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r2, 0x19, &(0x7f0000000300)={0x6, 0x2, 0x5}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x2040, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0xf) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x4, 0x20}, &(0x7f00000003c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000440)={r5, 0x2c, &(0x7f0000000400)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x7f, @empty, 0xcd53}]}, &(0x7f0000000480)=0x10) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/105, 0x69}], 0x1) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000580)={0x77359400}, 0x10) writev(r0, 0x0, 0x0) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f00000005c0)={@multicast2, @empty, 0x1, "d85baa976a0e4f6a7702430ba88aa39fcd637b65d35a63c8c0a1da64f5f69736", 0x55, 0x1779, 0x5c4, 0x7}, 0x3c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000600), 0x13f, 0x1}}, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000680)={0x81, 0xf, 0x8206, 0x7, 0x0, 0x6, 0xc0000000, 0x957, r6}, &(0x7f00000006c0)=0x20) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000700)={0x1ff, 0x5}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000940)={{r2, &(0x7f0000000740)='/proc/self/net/pfkey\x00', 0x10002, &(0x7f0000000780)={@align=0x8000000000000000, {0x1, 0xb, 0xc, 0x7f}}, 0x2, &(0x7f00000007c0)={@_ha_fsid}, &(0x7f0000000800)=0x5}, {[0x0, 0xfffffffb, 0x0, 0x4]}, 0x0, 0xd6, &(0x7f0000000840)=""/214}) read$FUSE(r2, &(0x7f00000009c0)={0x2020}, 0x2020) ioctl$TIOCL_SELLOADLUT(r7, 0x541c, &(0x7f0000002a00)={0x5, 0x7f, 0x1, 0x8}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x5c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff84c4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8004) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000002c40)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x18, 0x1401, 0x200, 0x7fff, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000002c80)={{0x0, 0x1, 0x2, 0x971, 0x0, 0x8, 0x4fc3, 0x2, 0x380, 0x4, 0x4, 0x0, 0x919, 0x6, 0x8000000000000001}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000002d40)={r8, 0x2}) 81.292135ms ago: executing program 5 (id=2093): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) (async) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090386dd6000195800183afffe80000000000000000000a100000018ff0200000000000000000000000000018800907849000000fc000000000000000000000000000001"], 0x0) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001000390400000000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="01980400419a04001800128008000100677470000c00028008000100", @ANYRES32], 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x118) (rerun: 64) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) utime(&(0x7f0000000640)='./file0\x00', &(0x7f0000000540)={0x4, 0x3}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b80)=ANY=[@ANYBLOB="768cea31fc8c146c26716c9881f3411c743efe1576d4618fff79a49565c03cde29114af031348fa077ff6275ff4b8172ed5c6401f206e071c62eb181bbccd2194c73bcfc10b869c4581a8a40c6", @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040050000400"], 0x58}, 0x1, 0x1000000}, 0x24040840) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x20, 0x7, 0x4, 0x3, {{0x4c, 0x4, 0x3, 0x18, 0x130, 0x66, 0x0, 0x7a, 0x2f, 0x0, @private=0xa010105, @multicast1, {[@cipso={0x86, 0x49, 0xffffffffffffffff, [{0x7, 0xf, "0c116dc44167583eb49c4c897a"}, {0x5, 0x10, "d6418047a7b6d29920ad5ad23fcf"}, {0x5, 0x12, "fb5a2b0485b2516423591b980f6ae0a5"}, {0x7, 0x9, "3d37160346d06e"}, {0x5, 0x9, "438c3c5eb382b9"}]}, @rr={0x7, 0x1b, 0xed, [@multicast1, @rand_addr=0x64010101, @broadcast, @remote, @remote, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x54, 0x8c, 0x1, 0xb, [{@remote, 0x3}, {@broadcast, 0x8}, {@multicast1, 0xf7}, {@rand_addr=0x64010100}, {@remote, 0x1}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x3, 0x0}, 0x8001}, {@multicast2, 0x1}, {@local, 0x401}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @end, @noop, @cipso={0x86, 0x62, 0x0, [{0x7, 0x6, "13d3501c"}, {0x7, 0xc, "409418573adab333e6b3"}, {0x2, 0x6, "538cc1fb"}, {0x5, 0x11, "3a2a4525f26bf7bed1acab492b90f0"}, {0x0, 0x11, "30df10183e2fc321f08083e4551aa4"}, {0x5, 0x7, "e3cbc3a707"}, {0x1, 0x7, "bb8a210362"}, {0x1, 0xfffffffffffffd4c}, {0x6, 0x12, "5188a6c7bae1772f7a0d3f2245b7c76c"}]}]}}}}}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r9 = socket(0x10, 0x3, 0x0) (rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r9) (async, rerun: 64) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async, rerun: 64) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="04002abd7000fedbdf25510000000c00990001000000790000000a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff0000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r10, {0xffe0, 0xb}, {0xfff3, 0xffff}, {0xf, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000580)={'vxcan1\x00'}) 80.666013ms ago: executing program 0 (id=2094): r0 = syz_open_dev$sg(&(0x7f0000001600), 0xb, 0x40042) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000001b80)={0x301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) syz_emit_ethernet(0xfc0, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x0) 78.337699ms ago: executing program 5 (id=2095): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x20080) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0x7, 0xffff9337}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000500)={0x8f, 0x0, 0x2}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000002300)={[0x35, 0x7, 0x0, 0x180, 0x5fffffffffffffff, 0x10, 0xf4, 0x3ff, 0x80, 0x2, 0x6, 0x7fff, 0x0, 0x9, 0x0, 0xbdb], 0x51001, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000180)={0x2, 0x80, 0x100, 0xd, 0x10, 0x1003e8, 0x2, 0x0, 0x20, 0xfffffffd, 0x20, 0xffffffff, &(0x7f0000000000)=[0x5, 0x1000], 0x2, 0x0}) 1.298966ms ago: executing program 3 (id=2096): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x3fffffffffffff7c, &(0x7f00000001c0), &(0x7f00000001c0)=[0x9, 0x1], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), 0x0, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r0, 0x80000, 0x3) 604.847µs ago: executing program 0 (id=2097): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000240)={r2, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, 0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x5, 0x0, 0x2000, &(0x7f000000a000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x344) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 5 (id=2098): fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xa0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x1000400, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x8, 0x1, 0x400, 0xfffffffb}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) kernel console output (not intermixed with test programs): 6286][ T50] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input23 [ 165.329881][T10295] fuse: Bad value for 'fd' [ 165.336283][T10217] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 165.383873][T10295] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 165.401961][T10295] kvm: pic: non byte read [ 165.405796][T10295] kvm: pic: level sensitive irq not supported [ 165.407078][T10295] kvm: pic: non byte read [ 165.414557][T10295] kvm: pic: single mode not supported [ 165.414574][T10295] kvm: pic: level sensitive irq not supported [ 165.419185][T10295] kvm: pic: non byte read [ 165.427312][T10295] kvm: pic: non byte read [ 165.431854][T10295] kvm: pic: non byte read [ 165.435386][T10295] kvm: pic: level sensitive irq not supported [ 165.436016][T10295] kvm: pic: non byte read [ 165.443657][T10295] kvm: pic: non byte read [ 165.447078][T10295] kvm: pic: single mode not supported [ 165.447838][T10295] kvm: pic: non byte read [ 165.473415][ T40] audit: type=1400 audit(2000000027.789:944): avc: denied { append } for pid=10247 comm="syz.1.1136" name="event4" dev="devtmpfs" ino=3106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 165.485499][ T50] usb 6-1: USB disconnect, device number 14 [ 165.509468][T10217] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 165.513225][T10217] usb 5-1: config 1 has no interface number 0 [ 165.516386][T10217] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 165.522019][T10217] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 165.528771][T10217] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.535490][T10217] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 165.540206][T10217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.543743][T10217] usb 5-1: Product: syz [ 165.545656][T10217] usb 5-1: Manufacturer: syz [ 165.548166][T10217] usb 5-1: SerialNumber: syz [ 165.553809][T10288] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 165.759287][T10288] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 165.763500][ T40] audit: type=1400 audit(2000000028.079:945): avc: denied { ioctl } for pid=10286 comm="syz.0.1144" path="socket:[33666]" dev="sockfs" ino=33666 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 165.777102][T10217] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 165.944321][ T40] audit: type=1326 audit(2000000028.259:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.5.1151" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628c59c799 code=0x7ffc0000 [ 165.948778][T10306] bond_slave_0: mtu less than device minimum [ 165.952367][ T40] audit: type=1326 audit(2000000028.259:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.5.1151" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628c59c799 code=0x7ffc0000 [ 165.961827][ T40] audit: type=1326 audit(2000000028.259:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.5.1151" exe="/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f628c59c799 code=0x7ffc0000 [ 165.967095][T10217] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 165.969666][ T40] audit: type=1326 audit(2000000028.259:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.5.1151" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628c59c799 code=0x7ffc0000 [ 165.971780][T10217] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 165.993079][T10217] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 165.995338][T10217] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 166.001878][T10217] usb 5-1: USB disconnect, device number 13 [ 166.005092][T10217] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 166.076779][T10217] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 166.189214][T10313] ipt_ECN: cannot use operation on non-tcp rule [ 166.196909][T10313] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1154'. [ 166.324676][T10319] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 166.330621][T10321] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 166.478676][T10337] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 166.481910][T10337] overlayfs: overlapping lowerdir path [ 166.498160][T10336] loop5: detected capacity change from 0 to 3 [ 166.500908][T10336] loop5: p1 < > p4 [ 166.502360][T10336] loop5: partition table partially beyond EOD, truncated [ 166.504955][T10336] loop5: p1 start 4 is beyond EOD, truncated [ 166.516901][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'. [ 166.545255][T10336] sit1: entered allmulticast mode [ 166.555459][T10342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1164'. [ 166.577975][T10342] dlm: no local IP address has been set [ 166.581551][T10342] dlm: cannot start dlm midcomms -107 [ 166.676942][T10351] netlink: 'syz.0.1167': attribute type 1 has an invalid length. [ 166.699913][T10351] 8021q: adding VLAN 0 to HW filter on device bond5 [ 166.712536][T10356] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 166.718306][T10356] 9pnet_virtio: no channels available for device syz [ 167.339860][T10379] xt_hashlimit: size too large, truncated to 1048576 [ 167.532040][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1178'. [ 167.534110][T10386] kvm: kvm [10385]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0xe3 [ 167.536700][T10396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1178'. [ 167.556899][T10386] kvm: kvm [10385]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x63 [ 167.602610][T10386] kvm: kvm [10385]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x423 [ 167.606556][T10386] kvm: kvm [10385]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0x422 [ 167.620244][T10386] kvm: kvm [10385]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x4e9 [ 167.623706][T10386] kvm: kvm [10385]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc1) = 0x490 [ 167.649622][T10386] kvm: kvm [10385]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x1d9 [ 167.656836][T10386] kvm: kvm [10385]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0x5c9 [ 167.749396][T10386] kvm: kvm [10385]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x7d0 [ 167.754134][T10386] kvm: kvm [10385]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0x715 [ 167.789005][T10407] netlink: 'syz.0.1181': attribute type 1 has an invalid length. [ 167.792099][T10407] netlink: 'syz.0.1181': attribute type 2 has an invalid length. [ 167.878947][T10417] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1183'. [ 167.982075][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1186'. [ 167.987814][T10426] openvswitch: netlink: Message has 4 unknown bytes. [ 167.990416][T10426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.083863][T10428] team0: Device vlan2 is already an upper device of the team interface [ 168.094681][T10430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.155175][T10430] netlink: 'syz.3.1188': attribute type 3 has an invalid length. [ 168.160137][ T6169] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 168.207563][T10441] sp0: Synchronizing with TNC [ 168.309276][T10447] bond6: (slave bond_slave_1): Device is not our slave [ 168.311655][T10447] bond6: option active_slave: invalid value (bond_slave_1) [ 168.318501][T10447] bond6 (unregistering): Released all slaves [ 168.336212][ T6169] usb 6-1: Using ep0 maxpacket: 8 [ 168.340627][ T6169] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.344549][ T6169] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 168.348550][ T6169] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.357521][ T6169] usb 6-1: config 0 descriptor?? [ 168.524060][ T5942] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 168.604580][ T6169] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 168.626457][ T6169] usb 6-1: USB disconnect, device number 15 [ 168.637567][T10463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.767033][T10487] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 168.837535][T10473] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 168.841147][T10473] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 168.844827][T10473] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 168.847451][T10473] UDF-fs: Scanning with blocksize 2048 failed [ 168.909341][T10473] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 168.912887][T10473] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 168.917009][T10473] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 168.920485][T10473] UDF-fs: Scanning with blocksize 4096 failed [ 168.923288][T10473] UDF-fs: warning (device sr0): udf_fill_super: No partition found (1) [ 169.006082][T10499] input: syz1 as /devices/virtual/input/input24 [ 169.033400][T10501] netlink: 'syz.5.1208': attribute type 2 has an invalid length. [ 169.077171][T10501] !: entered promiscuous mode [ 169.138363][T10510] netlink: 'syz.1.1210': attribute type 1 has an invalid length. [ 169.186790][T10510] bond5: (slave geneve3): making interface the new active one [ 169.189692][T10510] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 169.192813][ T9545] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 169.196900][ T9545] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 169.200620][ T9545] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 169.204148][ T9545] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 169.536039][ T6001] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 169.605249][T10542] netlink: 'syz.5.1218': attribute type 2 has an invalid length. [ 169.678816][T10549] Unsupported ieee802154 address type: 0 [ 169.686700][ T6001] usb 5-1: Using ep0 maxpacket: 32 [ 169.693671][ T6001] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 16 [ 169.700268][ T6001] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 169.704085][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.708027][ T6001] usb 5-1: Product: ᇠ[ 169.710032][ T6001] usb 5-1: Manufacturer: 묤ç•é·‘Β㢱빽傯ê¾áº™æ¤¢äœ®ã¶¬é´ ê£·è¼´ëµŸê„€é‹§Ëƒâ‘䊇欳胀ኊꨱ㎞ㆳ潀çè–愛ᇴ [ 169.714847][ T6001] usb 5-1: SerialNumber: syz [ 169.726880][T10529] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 169.964628][T10564] 9pnet_virtio: no channels available for device syz [ 169.972525][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 169.972537][ T40] audit: type=1400 audit(2000000032.289:991): avc: denied { map } for pid=10563 comm="syz.5.1225" path="/dev/video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 169.983420][ T40] audit: type=1400 audit(2000000032.299:992): avc: denied { execute } for pid=10563 comm="syz.5.1225" path="/dev/video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 169.993292][T10564] 9pnet_virtio: no channels available for device syz [ 170.001966][T10570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.005513][T10570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.099787][T10572] __nla_validate_parse: 2 callbacks suppressed [ 170.099799][T10572] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1228'. [ 170.138369][T10576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1229'. [ 170.148092][ T6001] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 170.150541][ T6001] usb 5-1: MIDIStreaming interface descriptor not found [ 170.184434][ T6001] usb 5-1: USB disconnect, device number 14 [ 170.234164][T10580] udevd[10580]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.236004][ T50] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 170.397565][ T50] usb 8-1: config index 0 descriptor too short (expected 28277, got 36) [ 170.401328][ T50] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.405173][ T50] usb 8-1: config 0 has no interfaces? [ 170.407981][ T50] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 170.412241][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.417294][ T50] usb 8-1: config 0 descriptor?? [ 170.626573][T10217] usb 8-1: USB disconnect, device number 15 [ 170.700540][T10585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.862580][T10587] Invalid option length (1048180) for dns_resolver key [ 170.867017][T10587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1232'. [ 170.881571][T10590] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=44 sclass=netlink_xfrm_socket pid=10590 comm=syz.5.1233 [ 170.891107][ T40] audit: type=1400 audit(2000000033.209:993): avc: denied { ioctl } for pid=10589 comm="syz.5.1233" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 170.896673][ T9545] wlan1: Trigger new scan to find an IBSS to join [ 170.908334][T10590] fuse: Unknown parameter 'roÉIV™þ¿Ó´YotmoDe' [ 171.237935][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.242532][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.256722][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.264729][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.272396][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.279054][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.284034][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.289973][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.295109][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.300090][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.307028][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.312176][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.317321][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.318625][T10616] fuse: Unknown parameter 'rootmo00000040000' [ 171.326220][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.330838][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.335507][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.340908][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.346434][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.351879][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.358160][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.362789][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.368231][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.373826][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.381832][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.388067][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.392914][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.398049][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.402718][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.407904][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.412957][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.417076][ T6585] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 171.421534][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.426345][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.432341][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.533369][ T40] audit: type=1400 audit(2000000033.849:994): avc: denied { append } for pid=10647 comm="syz.3.1248" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 171.566687][ T6585] usb 5-1: Using ep0 maxpacket: 8 [ 171.569863][ T6585] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 171.573496][ T6585] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 171.594733][ T6585] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.604887][ T6585] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.610754][ T6585] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 171.613706][ T6585] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.637244][T10654] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1250'. [ 171.640735][T10654] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1250'. [ 171.861055][T10654] [U]  [ 171.885377][ T6585] usb 5-1: GET_CAPABILITIES returned 0 [ 171.891458][ T6585] usbtmc 5-1:16.0: can't read capabilities [ 171.967231][T10668] kvm: emulating exchange as write [ 171.985736][T10671] syzkaller1: entered promiscuous mode [ 171.988587][T10671] syzkaller1: entered allmulticast mode [ 171.993772][T10671] overlayfs: conflicting options: userxattr,metacopy=on [ 172.099999][ T6585] usb 5-1: USB disconnect, device number 15 [ 172.166216][T10675] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1255'. [ 172.170388][T10675] xt_socket: unknown flags 0xd0 [ 172.176804][ T40] audit: type=1804 audit(2000000034.499:995): pid=10675 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1255" name="/newroot/139/file1" dev="tmpfs" ino=763 res=1 errno=0 [ 172.296013][T10685] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1260'. [ 172.299924][T10683] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.392986][T10683] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.411475][T10691] could not allocate digest TFM handle sha256-arm64-neon [ 172.482286][T10695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10695 comm=syz.1.1262 [ 172.488523][T10695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1262'. [ 172.514331][T10683] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.586140][ T29] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 172.595420][T10683] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.692888][T10698] ref_ctr_offset mismatch. inode: 0x740 offset: 0x2 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 172.715549][ T294] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.724713][ T294] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.732329][ T294] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.733087][T10698] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1263'. [ 172.748978][ T85] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.767791][ T29] usb 8-1: config 0 has no interfaces? [ 172.771813][ T29] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 172.775751][ T29] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 172.780222][ T29] usb 8-1: Product: syz [ 172.781955][ T29] usb 8-1: Manufacturer: syz [ 172.783580][ T29] usb 8-1: SerialNumber: syz [ 172.787623][ T29] usb 8-1: config 0 descriptor?? [ 172.865285][ T40] audit: type=1400 audit(2000000035.179:996): avc: denied { accept } for pid=10704 comm="syz.1.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 172.872862][T10705] 9pnet_virtio: no channels available for device syz [ 173.010338][ T6169] usb 8-1: USB disconnect, device number 16 [ 173.172526][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1272'. [ 173.191955][T10735] bond6: entered promiscuous mode [ 173.194565][T10735] 8021q: adding VLAN 0 to HW filter on device bond6 [ 173.312765][T10742] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 173.317478][T10744] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 173.401543][T10753] loop4: detected capacity change from 0 to 7 [ 173.411199][ C1] blk_print_req_error: 26 callbacks suppressed [ 173.411258][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.417074][ C1] buffer_io_error: 26 callbacks suppressed [ 173.417083][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 173.422553][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.427243][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 173.435312][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.439686][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 173.443522][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.447966][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 173.451875][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.456410][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 173.460490][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.464880][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 173.469089][T10753] ldm_validate_partition_table(): Disk read failed. [ 173.469162][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.476419][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 173.480095][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.484336][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 173.488163][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.492378][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 173.496283][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.500531][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 173.504412][T10753] Dev loop4: unable to read RDB block 0 [ 173.507778][T10753] loop4: unable to read partition table [ 173.510534][T10753] loop4: partition table beyond EOD, truncated [ 173.519408][T10753] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 173.828948][ T40] audit: type=1400 audit(2000000036.149:997): avc: denied { ioctl } for pid=10777 comm="syz.3.1285" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 173.829008][T10778] random: crng reseeded on system resumption [ 173.927626][ T294] wlan1: Trigger new scan to find an IBSS to join [ 173.934776][T10792] netlink: 'syz.1.1288': attribute type 16 has an invalid length. [ 173.934792][T10791] netlink: 'syz.1.1288': attribute type 16 has an invalid length. [ 173.937813][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 173.943285][T10792] netlink: 'syz.1.1288': attribute type 17 has an invalid length. [ 173.946020][T10791] netlink: 'syz.1.1288': attribute type 17 has an invalid length. [ 173.952851][T10792] sit0: left promiscuous mode [ 173.980375][T10792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.990498][T10791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.098930][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 174.102197][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.104894][ T9] usb 5-1: Product: syz [ 174.106796][ T9] usb 5-1: Manufacturer: syz [ 174.108449][ T9] usb 5-1: SerialNumber: syz [ 174.115727][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 174.142208][ T40] audit: type=1400 audit(2000000036.459:998): avc: denied { firmware_load } for pid=6585 comm="kworker/0:5" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 174.157153][ T6585] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 174.350982][T10812] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 174.367721][ T40] audit: type=1400 audit(2000000036.689:999): avc: denied { nlmsg_write } for pid=10775 comm="syz.0.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 174.371801][T10776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.374562][ T40] audit: type=1400 audit(2000000036.689:1000): avc: denied { audit_write } for pid=10775 comm="syz.0.1284" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 174.378960][T10776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.389829][T10776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.392878][T10776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.396647][ T1345] usb 5-1: USB disconnect, device number 16 [ 174.939203][T10818] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 174.942271][T10818] overlayfs: missing 'lowerdir' [ 175.084581][T10806] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 175.121883][T10820] 9pnet_virtio: no channels available for device syz [ 175.215958][ T6585] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 175.219777][ T6585] ath9k_htc: Failed to initialize the device [ 175.222744][ T1345] usb 5-1: ath9k_htc: USB layer deinitialized [ 175.364179][T10834] __nla_validate_parse: 1 callbacks suppressed [ 175.364192][T10834] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1300'. [ 175.443850][T10846] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1304'. [ 175.464000][T10846] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 175.506369][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 175.528593][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 175.528611][ T40] audit: type=1400 audit(2000000037.829:1002): avc: denied { append } for pid=10856 comm="syz.1.1308" name="pfkey" dev="proc" ino=4026533067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 175.565449][ T40] audit: type=1400 audit(2000000037.869:1003): avc: denied { map } for pid=10856 comm="syz.1.1308" path="/proc/1144/net/pfkey" dev="proc" ino=4026533067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 175.766696][ T6585] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 175.838460][ T40] audit: type=1400 audit(2000000038.159:1004): avc: denied { shutdown } for pid=10878 comm="syz.0.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 175.946235][ T6585] usb 8-1: Invalid ep0 maxpacket: 64 [ 176.037033][T10888] syzkaller0: entered promiscuous mode [ 176.039476][T10888] syzkaller0: entered allmulticast mode [ 176.043314][T10887] netlink: 'syz.0.1317': attribute type 6 has an invalid length. [ 176.085956][ T6585] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 176.236946][ T6585] usb 8-1: Invalid ep0 maxpacket: 64 [ 176.240361][ T6585] usb usb8-port1: attempt power cycle [ 176.336142][ T5942] Bluetooth: hci3: command 0x0401 tx timeout [ 176.361147][T10899] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1319'. [ 176.365363][T10893] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1319'. [ 176.369359][T10893] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1319'. [ 176.566555][T10902] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 176.570937][T10902] overlayfs: missing 'lowerdir' [ 176.587378][ T6585] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 176.607111][ T6585] usb 8-1: Invalid ep0 maxpacket: 64 [ 176.653395][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.658301][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.661973][T10902] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1322'. [ 176.662357][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.665280][T10902] netem: unknown loss type 13 [ 176.669308][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.671110][T10902] netem: change failed [ 176.673981][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.746346][ T6585] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 176.766491][ T6585] usb 8-1: Invalid ep0 maxpacket: 64 [ 176.768627][ T6585] usb usb8-port1: unable to enumerate USB device [ 176.817249][T10921] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1325'. [ 176.834201][T10906] chnl_net:caif_netlink_parms(): no params data found [ 176.864052][T10923] xt_TCPMSS: Only works on TCP SYN packets [ 176.886974][ T60] wlan1: Trigger new scan to find an IBSS to join [ 176.906735][T10906] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.910438][T10906] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.912919][T10906] bridge_slave_0: entered allmulticast mode [ 176.916323][T10906] bridge_slave_0: entered promiscuous mode [ 176.921275][T10906] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.924748][T10906] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.930726][T10906] bridge_slave_1: entered allmulticast mode [ 176.936697][T10906] bridge_slave_1: entered promiscuous mode [ 176.957811][ T40] audit: type=1400 audit(2000000039.279:1005): avc: denied { bind } for pid=10929 comm="syz.0.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 176.962744][T10906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.966100][ T40] audit: type=1400 audit(2000000039.279:1006): avc: denied { mounton } for pid=10929 comm="syz.0.1328" path="/392/file0" dev="ramfs" ino=41398 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 176.972266][T10906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.996342][T10906] team0: Port device team_slave_0 added [ 176.996443][ T40] audit: type=1400 audit(2000000039.319:1007): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 177.000772][T10906] team0: Port device team_slave_1 added [ 177.033147][T10906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.035610][T10906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.044984][T10906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.058014][T10906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.061237][T10906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.074222][T10906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.133620][T10906] hsr_slave_0: entered promiscuous mode [ 177.137580][T10906] hsr_slave_1: entered promiscuous mode [ 177.140822][T10906] debugfs: 'hsr0' already exists in 'hsr' [ 177.143490][T10906] Cannot create hsr debugfs directory [ 177.162512][T10943] CUSE: unknown device info "" [ 177.164211][T10943] CUSE: zero length info key specified [ 177.287026][T10906] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 177.299318][T10906] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 177.307631][T10906] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 177.312163][T10906] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 177.333550][T10949] 8021q: adding VLAN 0 to HW filter on device bond7 [ 177.337923][T10949] team0: Port device bond7 added [ 177.387731][T10906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.402635][T10958] overlayfs: failed to clone lowerpath [ 177.408057][T10906] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.415078][ T9545] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.417564][ T9545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.424026][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.426505][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.554795][T10906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.733731][T10906] veth0_vlan: entered promiscuous mode [ 177.739459][T10906] veth1_vlan: entered promiscuous mode [ 177.753976][T10906] veth0_macvtap: entered promiscuous mode [ 177.759897][T10906] veth1_macvtap: entered promiscuous mode [ 177.768656][T10906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.775731][T10906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.781516][ T60] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.785590][ T60] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.792089][ T60] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.797205][ T60] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.831280][ T9545] wlan1: Creating new IBSS network, BSSID 86:2d:09:94:1e:9d [ 177.845779][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.851535][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.873319][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.877240][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.959513][ T40] audit: type=1400 audit(2000000040.279:1008): avc: denied { write } for pid=10973 comm="syz.0.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 177.961342][T10974] netlink: 'syz.0.1335': attribute type 10 has an invalid length. [ 177.971860][T10974] veth1_macvtap: left promiscuous mode [ 178.286046][ T6000] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 178.435986][ T6000] usb 5-1: Using ep0 maxpacket: 8 [ 178.440026][ T6000] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 178.445151][ T6000] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 178.450172][ T6000] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 178.454628][ T6000] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.460589][ T6000] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 178.464678][ T6000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.676391][ T6000] usb 5-1: GET_CAPABILITIES returned 0 [ 178.678410][ T6000] usbtmc 5-1:16.0: can't read capabilities [ 178.718270][T10996] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 178.727363][ T5942] Bluetooth: hci0: command tx timeout [ 178.879523][T10978] usb 5-1: usbtmc_ioctl_clear_in_halt returned -32 [ 178.884814][ T6000] usb 5-1: USB disconnect, device number 17 [ 178.896253][T11004] netlink: 'syz.3.1343': attribute type 21 has an invalid length. [ 178.899923][T11004] netlink: 'syz.3.1343': attribute type 6 has an invalid length. [ 178.904395][T11004] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1343'. [ 178.947537][ T40] audit: type=1800 audit(2000000041.259:1009): pid=11003 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.6.1344" name="/newroot/4/file0" dev="tmpfs" ino=38 res=0 errno=0 [ 179.032162][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1346'. [ 179.040517][ T40] audit: type=1400 audit(2000000041.359:1010): avc: denied { mount } for pid=11013 comm="syz.6.1347" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 179.052640][T11012] sctp: [Deprecated]: syz.3.1346 (pid 11012) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.052640][T11012] Use struct sctp_sack_info instead [ 179.101589][ T40] audit: type=1400 audit(2000000041.419:1011): avc: denied { connect } for pid=11016 comm="syz.3.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 179.292688][T11030] kvm: kvm [11026]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000074) = 0x81 [ 179.412072][T11035] raw_sendmsg: syz.6.1352 forgot to set AF_INET. Fix it! [ 179.493341][T11039] netlink: 'syz.6.1353': attribute type 1 has an invalid length. [ 179.785120][T11057] syzkaller0: entered promiscuous mode [ 179.790699][T11057] syzkaller0: entered allmulticast mode [ 179.796779][T11057] tipc: Started in network mode [ 179.799400][T11057] tipc: Node identity 0edc8db0558b, cluster identity 4711 [ 179.801997][T11057] tipc: Enabled bearer , priority 0 [ 179.805621][T11056] tipc: Resetting bearer [ 179.816725][T11056] tipc: Disabling bearer [ 180.334016][T11061] xt_cgroup: path and classid specified [ 180.470232][T11066] netlink: 'syz.3.1362': attribute type 2 has an invalid length. [ 180.499149][T11066] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 180.665947][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 180.665960][ T40] audit: type=1400 audit(2000000042.979:1020): avc: denied { append } for pid=11075 comm="syz.3.1365" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 180.720931][T11078] netlink: 'syz.0.1366': attribute type 1 has an invalid length. [ 180.737979][T11078] bond8: entered promiscuous mode [ 180.740590][T11078] 8021q: adding VLAN 0 to HW filter on device bond8 [ 180.784809][T11085] __nla_validate_parse: 4 callbacks suppressed [ 180.784828][T11085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1367'. [ 180.803201][ T5942] Bluetooth: unknown link type 128 [ 180.806029][ T5942] Bluetooth: hci0: command tx timeout [ 180.963007][T11090] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 181.108826][T11101] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1372'. [ 181.111947][T11101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1372'. [ 181.114996][T11101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1372'. [ 181.189736][T11103] openvswitch: netlink: IP tunnel dst address not specified [ 181.219870][T11107] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 181.223992][T11107] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 181.228899][T11107] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 181.231760][T11107] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 181.377071][ T5942] block nbd0: Receive control failed (result -32) [ 181.517573][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 181.560854][T11123] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1379'. [ 181.565291][T11123] Bluetooth: MGMT ver 1.23 [ 181.567621][T11123] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 181.666057][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 181.669708][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 181.672599][ T10] usb 5-1: can't read configurations, error -22 [ 181.795981][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 181.945960][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 181.957699][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 181.961299][ T10] usb 5-1: can't read configurations, error -22 [ 181.966708][ T10] usb usb5-port1: attempt power cycle [ 182.013981][T11139] futex_wake_op: syz.5.1383 tries to shift op by -1; fix this program [ 182.316053][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 182.340397][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 182.344884][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 182.349335][ T10] usb 5-1: can't read configurations, error -22 [ 182.405424][T11151] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 182.439046][T11155] ceph: No source [ 182.483568][ T40] audit: type=1400 audit(2000000044.799:1021): avc: denied { write } for pid=11159 comm="syz.5.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 182.491977][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 182.526621][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 182.537761][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 182.540560][ T10] usb 5-1: can't read configurations, error -22 [ 182.542971][ T10] usb usb5-port1: unable to enumerate USB device [ 182.777780][T11182] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1396'. [ 182.808368][ T5942] Bluetooth: hci3: command 0x0401 tx timeout [ 182.892074][ T5942] Bluetooth: hci0: command tx timeout [ 183.021327][T11208] netlink: 'syz.3.1403': attribute type 2 has an invalid length. [ 183.031388][T11208] !: entered promiscuous mode [ 183.041726][T11208] netlink: 'syz.3.1403': attribute type 2 has an invalid length. [ 183.044390][T11208] !: left promiscuous mode [ 183.193584][T11211] netlink: 'syz.3.1404': attribute type 13 has an invalid length. [ 183.198992][ T40] audit: type=1400 audit(2000000045.519:1022): avc: denied { write } for pid=11210 comm="syz.3.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 183.234288][T11213] netlink: zone id is out of range [ 183.315121][T11218] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1407'. [ 183.319653][T11218] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1407'. [ 183.322731][T11218] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1407'. [ 183.347677][ T40] audit: type=1400 audit(2000000045.669:1023): avc: denied { ioctl } for pid=11219 comm="syz.5.1408" path="socket:[45282]" dev="sockfs" ino=45282 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 183.390307][T11225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1410'. [ 183.470310][ T40] audit: type=1326 audit(2000000045.789:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11229 comm="syz.3.1412" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7a659c799 code=0x0 [ 183.526145][T11237] netlink: 'syz.5.1414': attribute type 29 has an invalid length. [ 183.529781][T11238] netlink: 'syz.5.1414': attribute type 29 has an invalid length. [ 183.976027][ T10] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 184.138778][ T10] usb 10-1: config 16 has an invalid descriptor of length 141, skipping remainder of the config [ 184.143567][ T10] usb 10-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.149284][ T10] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 184.152356][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.158641][ T10] usbtmc 10-1:16.0: bulk endpoints not found [ 184.366933][ T40] audit: type=1400 audit(2000000046.689:1025): avc: denied { setopt } for pid=11254 comm="syz.0.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 184.369349][T11254] delete_channel: no stack [ 184.380748][ T40] audit: type=1400 audit(2000000046.699:1026): avc: denied { write } for pid=11256 comm="syz.3.1420" path="socket:[44012]" dev="sockfs" ino=44012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 184.485654][T11261] 9pnet_virtio: no channels available for device syz [ 184.544592][T11263] ip6t_REJECT: ECHOREPLY is not supported [ 184.555511][ T40] audit: type=1400 audit(2000000046.869:1027): avc: denied { name_bind } for pid=11264 comm="syz.3.1423" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 184.601984][ T40] audit: type=1400 audit(2000000046.919:1028): avc: denied { execute_no_trans } for pid=11266 comm="syz.3.1424" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=46140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 184.667319][T11269] netlink: 'syz.6.1425': attribute type 17 has an invalid length. [ 184.668141][T11267] kvm: kvm [11266]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x40000074) = 0x81 [ 184.670197][T11269] macvtap0: entered allmulticast mode [ 184.675696][T11269] veth0_macvtap: entered allmulticast mode [ 184.684640][T11269] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 184.698594][T11273] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 184.724163][T11276] overlay: ./file0 is not a directory [ 184.735147][ T40] audit: type=1400 audit(2000000047.049:1029): avc: denied { mount } for pid=11275 comm="syz.6.1427" name="/" dev="configfs" ino=1055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 184.865775][T11285] [U]  [ 184.977397][ T63] Bluetooth: hci0: command tx timeout [ 185.222922][T11299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.377452][ T41] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.381586][ T41] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.386423][ T41] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 185.390656][ T41] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.394701][ T41] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.399527][ T41] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 185.405332][ T41] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.409623][ T41] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.413727][ T41] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 185.442760][ T41] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.446799][ T41] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.449935][ T41] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 185.573844][T11315] overlay: ./file0 is not a directory [ 185.735471][T11329] tmpfs: Bad value for 'mpol' [ 185.767546][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 185.767564][ T40] audit: type=1400 audit(2000000048.089:1037): avc: denied { map } for pid=11335 comm="syz.3.1446" path="socket:[46287]" dev="sockfs" ino=46287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 185.832388][ T40] audit: type=1400 audit(2000000048.149:1038): avc: denied { setcheckreqprot } for pid=11343 comm="syz.3.1448" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 185.839980][T11344] SELinux: syz.3.1448 (11344) set checkreqprot to 1. This is no longer supported. [ 185.854522][T11346] __nla_validate_parse: 12 callbacks suppressed [ 185.854535][T11346] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1449'. [ 186.019839][T11353] kvm: user requested TSC rate below hardware speed [ 186.077714][ T40] audit: type=1400 audit(2000000048.399:1039): avc: denied { read } for pid=11365 comm="syz.3.1455" name="usbmon4" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 186.092202][ T40] audit: type=1400 audit(2000000048.409:1040): avc: denied { open } for pid=11365 comm="syz.3.1455" path="/dev/usbmon4" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 186.118278][ T40] audit: type=1400 audit(2000000048.409:1041): avc: denied { ioctl } for pid=11365 comm="syz.3.1455" path="/dev/usbmon4" dev="devtmpfs" ino=749 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 186.166107][ T63] Bluetooth: hci3: command 0x0401 tx timeout [ 186.169064][ T5939] Bluetooth: hci1: command 0x0406 tx timeout [ 186.209918][T11371] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 186.221658][T11371] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 186.224977][T11371] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 186.230697][ T40] audit: type=1400 audit(2000000048.549:1042): avc: denied { watch watch_reads } for pid=11370 comm="syz.0.1457" path="pipe:[46315]" dev="pipefs" ino=46315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 186.231068][T11371] block nbd0: shutting down sockets [ 186.308369][T11375] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1458'. [ 186.322925][T11375] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1458'. [ 186.323021][T11375] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1458'. [ 186.323095][T11375] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1458'. [ 186.323184][T11375] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1458'. [ 186.323297][T11375] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1458'. [ 186.323427][T11375] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1458'. [ 186.323511][T11375] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1458'. [ 186.323592][T11375] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1458'. [ 186.742690][ T6169] usb 10-1: USB disconnect, device number 6 [ 186.764763][T11390] SELinux: policydb string length 3169 does not match expected length 8 [ 186.768540][T11390] SELinux: failed to load policy [ 186.842574][T11399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=11399 comm=syz.5.1465 [ 186.908831][T11401] overlayfs: workdir and upperdir must be separate subtrees [ 186.913275][ T40] audit: type=1400 audit(2000000049.229:1043): avc: denied { mounton } for pid=11398 comm="syz.5.1465" path="/proc/525/task/526/net/stat" dev="proc" ino=4026533013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 187.027931][T11409] netlink: 'syz.6.1468': attribute type 2 has an invalid length. [ 187.063972][ T40] audit: type=1400 audit(2000000049.379:1044): avc: denied { bind } for pid=11410 comm="syz.6.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 187.072920][ T40] audit: type=1400 audit(2000000049.379:1045): avc: denied { map } for pid=11410 comm="syz.6.1469" path="socket:[44968]" dev="sockfs" ino=44968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.219082][T11416] fuse: Bad value for 'user_id' [ 187.220819][T11416] fuse: Bad value for 'user_id' [ 187.321409][T11424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10496 sclass=netlink_route_socket pid=11424 comm=syz.6.1473 [ 187.438147][T11427] binfmt_misc: register: failed to install interpreter file ./file1 [ 187.442240][T11427] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 187.750957][T11442] bond2: (slave bond_slave_1): Device is not our slave [ 187.753252][T11442] bond2: option active_slave: invalid value (bond_slave_1) [ 187.786936][T11442] bond2 (unregistering): Released all slaves [ 187.888911][ T40] audit: type=1326 audit(2000000050.209:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.5.1479" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f628c59c799 code=0x0 [ 187.934588][T11451] program syz.5.1480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.073777][T11456] program syz.5.1482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.312333][T11479] ceph: No source [ 188.330291][T11479] Invalid logical block size (536872960) [ 188.489807][T11505] usb usb9: usbfs: process 11505 (syz.3.1493) did not claim interface 0 before use [ 188.599835][T11528] netlink: 'syz.6.1498': attribute type 10 has an invalid length. [ 188.622260][T11528] team0: Device ipvlan1 failed to register rx_handler [ 188.654362][T11534] netlink: 'syz.3.1500': attribute type 63 has an invalid length. [ 188.661497][T11534] gretap0: entered allmulticast mode [ 188.669923][T11532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=11532 comm=syz.0.1499 [ 188.670764][T11534] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 188.724710][T11534] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 188.727488][T11534] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 188.884013][T11571] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 188.961725][T11578] misc userio: No port type given on /dev/userio [ 189.033594][T11598] (syz.0.1514,11598,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 189.042695][T11598] (syz.0.1514,11598,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 189.045275][T11598] (syz.0.1514,11598,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 189.065989][T11598] (syz.0.1514,11598,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 189.378425][T11632] can: request_module (can-proto-0) failed. [ 189.607222][T11649] xt_SECMARK: invalid mode: 2 [ 189.607583][T11650] xt_SECMARK: invalid mode: 2 [ 189.913525][T11655] Unsupported ieee802154 address type: 0 [ 190.166034][ T5293] Bluetooth: hci2: command tx timeout [ 190.270963][T11668] bond1 (unregistering): Released all slaves [ 190.421601][T11685] ALSA: seq fatal error: cannot create timer (-19) [ 190.425586][T11691] netlink: 'syz.3.1537': attribute type 32 has an invalid length. [ 190.690151][T11726] 9pnet_virtio: no channels available for device syz [ 190.783331][ T50] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 190.966220][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 190.970788][ T50] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 190.973895][ T50] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.977748][ T50] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.981161][ T50] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 190.984714][ T50] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.991027][ T50] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 190.994370][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.016002][ T1345] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 191.148668][ T1345] usb 10-1: device descriptor read/64, error -71 [ 191.201400][ T50] usb 5-1: usb_control_msg returned -32 [ 191.203401][ T50] usbtmc 5-1:16.0: can't read capabilities [ 191.386017][ T1345] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 191.526243][ T1345] usb 10-1: device descriptor read/64, error -71 [ 191.636300][ T1345] usb usb10-port1: attempt power cycle [ 191.985961][ T1345] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 192.006640][ T1345] usb 10-1: device descriptor read/8, error -71 [ 192.045038][T11776] overlayfs: failed to resolve './file0': -40 [ 192.138036][T11779] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 192.246127][ T1345] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 192.283022][ T1345] usb 10-1: device descriptor read/8, error -71 [ 192.386303][ T1345] usb usb10-port1: unable to enumerate USB device [ 192.437281][T11798] __nla_validate_parse: 65 callbacks suppressed [ 192.437294][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1558'. [ 192.442955][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1558'. [ 192.494217][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1560'. [ 192.526452][T11806] overlayfs: conflicting options: userxattr,redirect_dir=on [ 192.615663][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 192.615723][ T40] audit: type=1400 audit(2000000054.929:1054): avc: denied { read } for pid=11803 comm="syz.6.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 192.624485][T11816] netlink: 212280 bytes leftover after parsing attributes in process `syz.3.1563'. [ 192.627384][ T40] audit: type=1400 audit(2000000054.939:1055): avc: denied { accept } for pid=11803 comm="syz.6.1560" path="socket:[47818]" dev="sockfs" ino=47818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 192.698110][ T40] audit: type=1400 audit(2000000055.019:1056): avc: denied { mount } for pid=11815 comm="syz.3.1563" name="/" dev="pstore" ino=5860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 192.876070][T11820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11820 comm=syz.3.1565 [ 192.906523][T11823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.911931][T11823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.959563][ T40] audit: type=1400 audit(2000000055.279:1057): avc: denied { map } for pid=11821 comm="syz.3.1566" path="/368" dev="tmpfs" ino=1992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 192.968450][T11823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.441930][ T40] audit: type=1400 audit(2000000055.759:1058): avc: denied { read } for pid=11834 comm="syz.6.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 193.490590][T11840] syzkaller1: entered promiscuous mode [ 193.492630][T11840] syzkaller1: entered allmulticast mode [ 193.665488][ T40] audit: type=1400 audit(2000000055.979:1059): avc: denied { write } for pid=11845 comm="syz.6.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 193.846899][T11855] nft_compat: unsupported protocol 0 [ 193.929494][T11860] kvm: user requested TSC rate below hardware speed [ 193.934724][T11860] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 193.982460][T11862] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1578'. [ 194.241151][T11873] : entered promiscuous mode [ 194.270406][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1581'. [ 194.274265][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1581'. [ 194.351607][T11879] netlink: 'syz.5.1583': attribute type 8 has an invalid length. [ 194.388828][ T40] audit: type=1400 audit(2000000056.709:1060): avc: denied { ioctl } for pid=11882 comm="syz.6.1585" path="socket:[49259]" dev="sockfs" ino=49259 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 194.516844][T11893] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1587'. [ 194.604545][T11899] 9pnet_virtio: no channels available for device syz [ 194.607319][ T40] audit: type=1400 audit(2000000056.929:1061): avc: denied { getopt } for pid=11894 comm="syz.6.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 194.607729][ T40] audit: type=1400 audit(2000000056.929:1062): avc: denied { ioctl } for pid=11894 comm="syz.6.1588" path="socket:[47914]" dev="sockfs" ino=47914 ioctlcmd=0x89fe scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 194.623211][T11899] syzkaller0: entered promiscuous mode [ 194.623231][T11899] syzkaller0: entered allmulticast mode [ 194.650018][ T40] audit: type=1400 audit(2000000056.969:1063): avc: denied { ioctl } for pid=11894 comm="syz.6.1588" path="socket:[46835]" dev="sockfs" ino=46835 ioctlcmd=0x5881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 194.781527][T11913] netlink: 'syz.5.1592': attribute type 1 has an invalid length. [ 194.798382][T11913] bond2: entered promiscuous mode [ 194.800536][T11913] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.806084][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1592'. [ 194.809225][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1592'. [ 194.820965][T11913] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(17) [ 194.823323][T11913] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 194.827714][T11913] vhci_hcd vhci_hcd.0: Device attached [ 194.896789][T11918] vhci_hcd: connection closed [ 194.901431][ T13] vhci_hcd vhci_hcd.5: stop threads [ 194.905111][ T13] vhci_hcd vhci_hcd.5: release socket [ 194.907270][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 195.436228][T11945] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 195.843487][T11969] netlink: 'syz.5.1609': attribute type 29 has an invalid length. [ 195.847456][T11969] netlink: 'syz.5.1609': attribute type 3 has an invalid length. [ 196.063193][T11986] syzkaller0: entered promiscuous mode [ 196.065398][T11986] syzkaller0: entered allmulticast mode [ 196.070477][T11986] tipc: Started in network mode [ 196.073013][T11986] tipc: Node identity 129e3a1ed981, cluster identity 4711 [ 196.076933][T11986] tipc: Enabled bearer , priority 0 [ 196.087668][T11985] tipc: Resetting bearer [ 196.107230][T11985] tipc: Disabling bearer [ 196.117361][T11982] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.222647][T11982] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.314401][T12004] 9pnet_virtio: no channels available for device syz [ 196.338902][T11982] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.421701][T11982] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.529555][ T294] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.549021][ T294] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.561614][ T294] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.578309][ T294] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.783845][T12041] cgroup: none used incorrectly [ 196.818742][T12041] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 196.891000][T12048] netlink: 'syz.6.1632': attribute type 5 has an invalid length. [ 197.046320][T11772] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 197.060664][ T3250] usb 5-1: USB disconnect, device number 22 [ 197.287914][T12088] loop6: detected capacity change from 0 to 524288000 [ 197.295371][T12081] xt_hashlimit: size too large, truncated to 1048576 [ 197.403521][T12100] syz.0.1648: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 197.460200][T12109] __nla_validate_parse: 6 callbacks suppressed [ 197.460217][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1651'. [ 197.465279][T12109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1651'. [ 197.488973][T12109] erspan1: entered promiscuous mode [ 197.490862][T12109] erspan1: entered allmulticast mode [ 197.492951][T12112] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1652'. [ 197.497624][T12109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12109 comm=syz.3.1651 [ 197.504333][T12109] netlink: 'syz.3.1651': attribute type 16 has an invalid length. [ 197.507796][T12109] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1651'. [ 197.510869][T12109] veth1_macvtap: entered allmulticast mode [ 197.549269][T12118] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 197.555824][T12120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1655'. [ 197.568095][T12118] cramfs: wrong magic [ 197.615934][ T40] kauditd_printk_skb: 2017 callbacks suppressed [ 197.615947][ T40] audit: type=1326 audit(2000000059.929:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12097 comm="syz.6.1649" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1752b9c799 code=0x7ff00000 [ 197.626470][ T40] audit: type=1326 audit(2000000059.949:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12097 comm="syz.6.1649" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1752b9c799 code=0x7ff00000 [ 197.634783][T12127] audit: audit_backlog=65 > audit_backlog_limit=64 [ 197.637711][T12127] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 197.640249][T12127] audit: backlog limit exceeded [ 197.641960][T12127] audit: audit_backlog=65 > audit_backlog_limit=64 [ 197.642963][T12129] audit: audit_backlog=65 > audit_backlog_limit=64 [ 197.644133][ T40] audit: type=1326 audit(2000000059.949:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12097 comm="syz.6.1649" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1752b9c799 code=0x7ff00000 [ 197.647621][T12129] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 197.654717][T12127] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 197.783533][T12140] netlink: 'syz.3.1661': attribute type 1 has an invalid length. [ 197.826926][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1658'. [ 197.830776][T12140] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.891359][T12140] bond4: (slave veth5): Enslaving as an active interface with a down link [ 197.904714][T12146] bond4: (slave dummy0): making interface the new active one [ 197.910047][T12146] dummy0: entered promiscuous mode [ 197.912420][T12146] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 197.967915][T12140] netlink: 'syz.3.1661': attribute type 10 has an invalid length. [ 197.975959][T12140] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1661'. [ 197.983408][T12140] bond4: (slave dummy0): Releasing active interface [ 198.008944][T12149] geneve3: entered promiscuous mode [ 198.011350][T12149] geneve3: entered allmulticast mode [ 198.017026][T11749] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 198.020483][ T9546] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 198.023452][ T9546] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 198.027338][T12149] usb usb7: usbfs: process 12149 (syz.0.1664) did not claim interface 0 before use [ 198.032053][ T9546] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 198.082315][ T50] hid_parser_main: 4086 callbacks suppressed [ 198.082330][ T50] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 198.088213][ T50] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 198.091343][ T50] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 198.094424][ T50] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 198.099606][ T50] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 198.102917][ T50] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 198.105661][ T50] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 198.107427][T12156] xt_connbytes: Forcing CT accounting to be enabled [ 198.111190][ T50] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 198.114350][ T50] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 198.116401][T12156] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.122214][ T50] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 198.127372][ T50] hid-generic 0006:0004:0009.0006: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 198.294591][T12181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.365561][T12181] syz.5.1675 (12181): drop_caches: 2 [ 198.511643][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1678'. [ 198.514849][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1678'. [ 198.632264][T12198] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1680'. [ 198.637370][T12198] netlink: 'syz.6.1680': attribute type 3 has an invalid length. [ 198.641712][T12198] netlink: 'syz.6.1680': attribute type 2 has an invalid length. [ 198.713249][T12200] 9pnet_virtio: no channels available for device syz [ 198.797654][T12204] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 198.817759][ T72] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 198.887328][T12210] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 198.966436][T12213] netlink: 'syz.6.1685': attribute type 16 has an invalid length. [ 198.970123][T12213] veth1_macvtap: entered allmulticast mode [ 198.987092][ T72] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.990744][ T72] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 198.993760][ T72] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 198.997945][ T72] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 199.005939][ T72] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.016450][T12190] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 199.024918][ T72] hub 10-1:1.0: bad descriptor, ignoring hub [ 199.030233][ T72] hub 10-1:1.0: probe with driver hub failed with error -5 [ 199.033058][ T72] cdc_wdm 10-1:1.0: skipping garbage [ 199.035039][ T72] cdc_wdm 10-1:1.0: skipping garbage [ 199.038534][ T72] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 199.040638][ T72] cdc_wdm 10-1:1.0: Unknown control protocol [ 199.334770][T12229] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 199.374786][T12234] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12234 comm=syz.3.1691 [ 199.374807][T12235] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12235 comm=syz.3.1691 [ 199.392933][T12234] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12234 comm=syz.3.1691 [ 199.400084][T12234] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=12234 comm=syz.3.1691 [ 199.453893][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.482629][T12244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.488761][T12244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.671420][T12252] team_slave_0: entered allmulticast mode [ 199.702981][T12254] isofs_fill_super: bread failed, dev=sr0, iso_blknum=16, block=16 [ 199.803407][T12188] usb 10-1: reset low-speed USB device number 11 using dummy_hcd [ 200.086251][T12188] usb 10-1: device descriptor read/64, error -71 [ 200.131185][T12295] netlink: 'syz.0.1709': attribute type 10 has an invalid length. [ 200.135294][T12295] team0: Device ipvlan1 failed to register rx_handler [ 200.202458][T12298] tun0: tun_chr_ioctl cmd 1074025675 [ 200.204402][T12298] tun0: persist enabled [ 200.206273][T12298] tun0: tun_chr_ioctl cmd 1074025675 [ 200.208102][T12298] tun0: persist enabled [ 200.241285][T12298] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 200.244879][T12298] overlayfs: overlapping lowerdir path [ 200.478084][T12188] usb 10-1: reset low-speed USB device number 11 using dummy_hcd [ 200.541564][T12327] overlayfs: failed to resolve 'func=FIRMWARE_CHECK': -2 [ 200.702296][T12342] overlayfs: failed to resolve './file0': -2 [ 200.756294][T12188] usb 10-1: device descriptor read/64, error -71 [ 200.909852][T12361] ptrace attach of "/syz-executor exec"[12365] was attempted by "/syz-executor exec"[12361] [ 200.915755][T12362] ptrace attach of "/syz-executor exec"[12365] was attempted by "/syz-executor exec"[12362] [ 201.146120][T12188] usb 10-1: reset low-speed USB device number 11 using dummy_hcd [ 201.177024][T12188] usb 10-1: device descriptor read/8, error -71 [ 201.565946][T12188] usb 10-1: reset low-speed USB device number 11 using dummy_hcd [ 201.669202][T12374] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 201.673033][T12374] gretap1: entered promiscuous mode [ 201.674861][T12374] gretap1: entered allmulticast mode [ 201.750912][T12379] tc_dump_action: action bad kind [ 201.951831][T12390] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 202.032096][T12398] vivid-007: ================= START STATUS ================= [ 202.035544][T12398] vivid-007: Enable Output Cropping: true [ 202.039112][T12398] vivid-007: Enable Output Composing: true [ 202.041679][T12398] vivid-007: Enable Output Scaler: true [ 202.044097][T12398] vivid-007: Tx RGB Quantization Range: Automatic [ 202.048612][T12398] vivid-007: Transmit Mode: HDMI [ 202.050387][T12398] vivid-007: Hotplug Present: 0x00000000 [ 202.052406][T12398] vivid-007: RxSense Present: 0x00000000 [ 202.054411][T12398] vivid-007: EDID Present: 0x00000000 [ 202.056416][T12398] vivid-007: ================== END STATUS ================== [ 202.097743][T12400] fuse: Bad value for 'user_id' [ 202.100441][T12400] fuse: Bad value for 'user_id' [ 202.259441][T12414] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 202.346221][ T1345] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 202.476179][ T5980] libceph: connect (1)[c::]:6789 error -101 [ 202.478424][ T5980] libceph: mon0 (1)[c::]:6789 connect error [ 202.506161][ T1345] usb 11-1: Using ep0 maxpacket: 32 [ 202.510148][ T1345] usb 11-1: unable to get BOS descriptor or descriptor too short [ 202.513535][ T1345] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.518641][ T1345] usb 11-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 202.521762][ T1345] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.524485][ T1345] usb 11-1: Product: syz [ 202.526110][ T1345] usb 11-1: Manufacturer: syz [ 202.527363][T12434] ceph: No mds server is up or the cluster is laggy [ 202.527751][ T1345] usb 11-1: SerialNumber: syz [ 202.577982][ C2] ata1: illegal qc_active transition (00000000->00300000) [ 202.712700][ T40] kauditd_printk_skb: 7483 callbacks suppressed [ 202.712759][ T40] audit: type=1400 audit(2000000065.029:10565): avc: denied { create } for pid=12447 comm="syz.0.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 202.748670][ T40] audit: type=1400 audit(2000000065.069:10566): avc: denied { read write } for pid=12399 comm="syz.6.1744" name="file0" dev="tmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 202.757861][ T40] audit: type=1400 audit(2000000065.069:10567): avc: denied { open } for pid=12399 comm="syz.6.1744" path="/121/file0" dev="tmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 202.763708][ T1345] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.767510][ T40] audit: type=1400 audit(2000000065.079:10568): avc: denied { ioctl } for pid=12399 comm="syz.6.1744" path="/121/file0" dev="tmpfs" ino=660 ioctlcmd=0x2270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 202.770214][ T1345] usb 11-1: MIDIStreaming interface descriptor not found [ 202.778700][ T40] audit: type=1400 audit(2000000065.079:10569): avc: denied { map } for pid=12399 comm="syz.6.1744" path="/121/file0" dev="tmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 202.788295][ T40] audit: type=1400 audit(2000000065.079:10570): avc: denied { read } for pid=12450 comm="syz.0.1757" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 202.796881][ T40] audit: type=1400 audit(2000000065.079:10571): avc: denied { execute } for pid=12399 comm="syz.6.1744" path="/121/file0" dev="tmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 202.808109][ T40] audit: type=1400 audit(2000000065.079:10572): avc: denied { open } for pid=12450 comm="syz.0.1757" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 202.817674][ T40] audit: type=1400 audit(2000000065.079:10573): avc: denied { ioctl } for pid=12450 comm="syz.0.1757" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 202.825986][ T1345] usb 11-1: USB disconnect, device number 2 [ 202.827605][ T40] audit: type=1400 audit(2000000065.079:10574): avc: denied { map_create } for pid=12450 comm="syz.0.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 202.861820][T10580] udevd[10580]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.893046][T12455] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 202.907459][ T1118] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 202.914172][ T1118] ata1.00: configured for UDMA/100 [ 202.959280][T12457] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 203.441523][T12465] team_slave_0: entered promiscuous mode [ 203.443633][T12465] team_slave_0: entered allmulticast mode [ 203.598314][T12470] team0 (unregistering): Port device team_slave_0 removed [ 203.604764][T12470] team0 (unregistering): Port device team_slave_1 removed [ 203.668999][T12470] __nla_validate_parse: 15 callbacks suppressed [ 203.669012][T12470] netlink: 41 bytes leftover after parsing attributes in process `syz.6.1764'. [ 203.674302][T12470] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1764'. [ 204.046383][ T1345] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 204.144201][T12493] Can't find a SQUASHFS superblock on nullb0 [ 204.156963][T12493] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 204.160088][T12493] block device autoloading is deprecated and will be removed. [ 204.186016][ T1345] usb 11-1: device descriptor read/64, error -71 [ 204.281611][T12497] overlayfs: missing 'lowerdir' [ 204.426130][ T1345] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 204.566507][ T1345] usb 11-1: device descriptor read/64, error -71 [ 204.676698][ T1345] usb usb11-port1: attempt power cycle [ 205.026012][ T1345] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 205.050924][ T1345] usb 11-1: device descriptor read/8, error -71 [ 205.076036][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1775'. [ 205.096898][T12509] macsec2: entered promiscuous mode [ 205.240030][T12519] 9pnet_virtio: no channels available for device syz [ 205.286495][ T1345] usb 11-1: new full-speed USB device number 6 using dummy_hcd [ 205.307033][ T1345] usb 11-1: device descriptor read/8, error -71 [ 205.416377][ T1345] usb usb11-port1: unable to enumerate USB device [ 205.459513][T12536] 9pnet_virtio: no channels available for device syz [ 205.464718][ T5293] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 205.499437][T12538] netlink: 'syz.3.1783': attribute type 21 has an invalid length. [ 205.502168][T12538] netlink: 'syz.3.1783': attribute type 6 has an invalid length. [ 205.504755][T12538] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1783'. [ 205.510136][T12538] netlink: 'syz.3.1783': attribute type 21 has an invalid length. [ 205.512801][T12538] netlink: 'syz.3.1783': attribute type 6 has an invalid length. [ 205.515438][T12538] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1783'. [ 205.522600][T12538] FAT-fs (nullb0): bogus number of reserved sectors [ 205.525083][T12538] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 205.530697][T12538] SELinux: Context system_u:object_r:ssh_agent_exec_t:s0 is not valid (left unmapped). [ 205.563565][T12540] netlink: 'syz.3.1784': attribute type 4 has an invalid length. [ 205.573130][T12540] XFS (nbd3): no-recovery mounts must be read-only. [ 205.577901][T12541] XFS (nbd3): no-recovery mounts must be read-only. [ 205.800135][T12549] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 206.223017][T12557] loop2: detected capacity change from 0 to 7 [ 206.225720][T12557] Dev loop2: unable to read RDB block 7 [ 206.227775][T12557] loop2: unable to read partition table [ 206.230142][T12557] loop2: partition table beyond EOD, truncated [ 206.232417][T12557] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 206.344250][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 206.349040][T12561] orangefs_devreq_write_iter: failed to copy head. [ 206.554212][T12568] futex_wake_op: syz.3.1792 tries to shift op by -1; fix this program [ 206.646202][T12188] usb 10-1: device descriptor read/8, error -110 [ 206.760858][T12188] cdc_wdm 10-1:1.0: Error autopm - -16 [ 206.760980][ T72] usb 10-1: USB disconnect, device number 11 [ 206.841365][T12583] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1797'. [ 206.849707][T12583] xt_l2tp: v2 tid > 0xffff: 2031748 [ 206.936069][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1802'. [ 206.939660][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1802'. [ 206.996757][T12603] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 207.004671][T12607] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 207.075720][T12615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=12615 comm=syz.3.1809 [ 207.084824][T12615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1809'. [ 207.219301][T12635] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 207.231177][T12634] binder: 12633:12634 ioctl c0306201 200000000680 returned -14 [ 207.263390][T12634] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12634 comm=syz.0.1815 [ 207.319511][T12632] block nbd6: shutting down sockets [ 207.540899][T12645] xt_hashlimit: size too large, truncated to 1048576 [ 207.692000][T12653] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 207.762359][ T40] kauditd_printk_skb: 264 callbacks suppressed [ 207.762372][ T40] audit: type=1400 audit(2000000070.079:10839): avc: denied { write } for pid=12658 comm="syz.6.1821" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 207.773653][ T40] audit: type=1400 audit(2000000070.079:10840): avc: denied { ioctl } for pid=12658 comm="syz.6.1821" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 207.785640][ T40] audit: type=1400 audit(2000000070.109:10841): avc: denied { mount } for pid=12658 comm="syz.6.1821" name="/" dev="hugetlbfs" ino=52886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 207.795341][ T40] audit: type=1400 audit(2000000070.119:10842): avc: denied { open } for pid=12658 comm="syz.6.1821" path="/dev/ptyr1" dev="devtmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 207.816016][ T40] audit: type=1400 audit(2000000070.119:10843): avc: denied { ioctl } for pid=12658 comm="syz.6.1821" path="/dev/ptyr1" dev="devtmpfs" ino=144 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 207.827044][ T40] audit: type=1326 audit(2000000070.129:10844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12658 comm="syz.6.1821" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1752b9c799 code=0x0 [ 207.853717][ T40] audit: type=1400 audit(2000000070.169:10845): avc: denied { setopt } for pid=12661 comm="syz.5.1822" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 207.855333][T12664] netlink: 'syz.5.1822': attribute type 1 has an invalid length. [ 207.877040][T12664] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.880803][ T40] audit: type=1400 audit(2000000070.199:10846): avc: denied { map_create } for pid=12661 comm="syz.5.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 207.889663][ T40] audit: type=1400 audit(2000000070.199:10847): avc: denied { map_read map_write } for pid=12661 comm="syz.5.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 207.935589][ T40] audit: type=1400 audit(2000000070.249:10848): avc: denied { name_bind } for pid=12668 comm="syz.5.1823" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 207.953869][T12625] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 208.526086][ T5293] Bluetooth: hci3: unexpected event for opcode 0x0c30 [ 208.670003][T12705] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 208.717249][T12701] 9pnet_virtio: no channels available for device syz [ 208.805268][T12712] zonefs (loop0) ERROR: Not a zoned block device [ 208.809639][T12712] loop2: detected capacity change from 0 to 7 [ 208.814419][T10176] Dev loop2: unable to read RDB block 7 [ 208.818094][T10176] loop2: unable to read partition table [ 208.820797][T10176] loop2: partition table beyond EOD, truncated [ 208.825788][T12712] Dev loop2: unable to read RDB block 7 [ 208.828993][T12712] loop2: unable to read partition table [ 208.831723][T12712] loop2: partition table beyond EOD, truncated [ 208.834711][T12712] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 209.011236][T12725] tmpfs: Bad value for 'mpol' [ 209.016888][T12725] program syz.6.1842 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.147449][T12748] bridge_slave_1: left allmulticast mode [ 209.149952][T12748] bridge_slave_1: left promiscuous mode [ 209.152759][T12748] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.169157][T12748] bridge_slave_0: left allmulticast mode [ 209.171795][T12748] bridge_slave_0: left promiscuous mode [ 209.175308][T12748] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.215970][ T5293] Bluetooth: hci2: command 0x0401 tx timeout [ 209.280400][T12759] __nla_validate_parse: 5 callbacks suppressed [ 209.280418][T12759] netlink: 252 bytes leftover after parsing attributes in process `syz.5.1850'. [ 209.607764][ T5980] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 209.677434][T12781] syzkaller0: entered promiscuous mode [ 209.679497][T12781] syzkaller0: entered allmulticast mode [ 209.766009][ T5980] usb 5-1: Using ep0 maxpacket: 32 [ 209.770897][ T5980] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 209.778384][ T5980] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 209.782615][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 209.786562][ T5980] usb 5-1: Product: syz [ 209.788509][ T5980] usb 5-1: Manufacturer: syz [ 209.790812][ T5980] usb 5-1: SerialNumber: syz [ 209.797289][ T5980] usb 5-1: config 0 descriptor?? [ 209.800402][T12762] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 209.806479][ T5980] hub 5-1:0.0: bad descriptor, ignoring hub [ 209.809203][ T5980] hub 5-1:0.0: probe with driver hub failed with error -5 [ 209.814437][T12786] dlm: non-version read from control device 71 [ 209.817799][T12786] dlm: non-version read from control device 129 [ 210.027467][T12795] netlink: 'syz.6.1861': attribute type 4 has an invalid length. [ 210.235041][T12800] binder_alloc: binder_alloc_mmap_handler: 12799 200000ffd000-200001000000 already mapped failed -16 [ 210.242655][T12801] binder_alloc: 12799: binder_alloc_buf, no vma [ 210.246976][T12801] binder: 12799:12801 ioctl c0306201 200000000180 returned -14 [ 210.368640][T12818] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 210.508635][T12832] xt_hashlimit: size too large, truncated to 1048576 [ 210.560759][T12836] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 210.738763][T12842] mac80211_hwsim hwsim17 : renamed from wlan1 (while UP) [ 210.838539][ T9546] raw-gadget.1 gadget.0: failed to queue suspend event [ 210.852502][T12852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=12852 comm=syz.5.1875 [ 210.863621][T12796] raw-gadget.1 gadget.0: failed to queue disconnect event [ 211.247623][T12866] xt_hashlimit: size too large, truncated to 1048576 [ 211.538124][T12876] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 211.546028][T12876] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 211.619005][T12883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26729 sclass=netlink_route_socket pid=12883 comm=syz.6.1885 [ 211.784852][T12900] tmpfs: Too few inodes for current use [ 211.847832][T12903] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 211.852889][T12903] overlayfs: overlapping lowerdir path [ 211.940945][T12905] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 211.953513][T12905] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1892'. [ 211.960423][T12907] geneve2: entered promiscuous mode [ 211.962804][T12907] geneve2: entered allmulticast mode [ 211.965848][ T294] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 211.970287][ T294] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 211.974051][ T294] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 211.977285][ T294] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 212.020404][T12912] netlink: 'syz.6.1895': attribute type 1 has an invalid length. [ 212.166323][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.169638][T12932] SELinux: failed to load policy [ 212.171895][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.175083][T12932] SELinux: failed to load policy [ 212.181677][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.188649][T12932] SELinux: failed to load policy [ 212.191721][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.195654][T12932] SELinux: failed to load policy [ 212.199294][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.202994][T12932] SELinux: failed to load policy [ 212.205083][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.212759][T12932] SELinux: failed to load policy [ 212.214864][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.218235][T12937] netlink: 'syz.3.1903': attribute type 11 has an invalid length. [ 212.220523][T12932] SELinux: failed to load policy [ 212.223986][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.225942][T12937] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1903'. [ 212.227333][T12932] SELinux: failed to load policy [ 212.232363][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.236015][T12932] SELinux: failed to load policy [ 212.238623][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.242058][T12932] SELinux: failed to load policy [ 212.242635][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.249452][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.253566][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.258286][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.262377][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.265686][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.269331][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.273632][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.278963][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.285585][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.286724][T12937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1903'. [ 212.289097][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.295120][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.296682][T12937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1903'. [ 212.299249][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.306575][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.316843][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.321160][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.325066][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.333379][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.339875][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.344414][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.349169][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.353685][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.359264][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.363885][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.369696][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.374265][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.378835][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.383758][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.388470][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.392882][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.398943][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.403612][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.408490][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.412955][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.417762][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.422433][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.427272][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.431766][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.436467][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.441147][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.446300][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.450918][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.455427][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.460219][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.490933][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.495675][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.501360][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.506949][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.511845][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.516869][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.521768][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.527359][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.532317][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.537404][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.540359][T12951] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1905'. [ 212.543630][T12932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.605819][T12956] 8021q: VLANs not supported on ip6tnl0 [ 212.622805][T12961] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1907'. [ 212.627642][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1907'. [ 212.629249][T12956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16400 sclass=netlink_route_socket pid=12956 comm=syz.5.1906 [ 212.738182][T12977] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1908'. [ 212.749310][T12978] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1908'. [ 212.767618][ T40] kauditd_printk_skb: 388 callbacks suppressed [ 212.767637][ T40] audit: type=1400 audit(2000000075.089:11237): avc: denied { read append } for pid=12979 comm="syz.5.1909" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 212.771489][T12981] ufs: You didn't specify the type of your ufs filesystem [ 212.771489][T12981] [ 212.771489][T12981] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 212.771489][T12981] [ 212.771489][T12981] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 212.792426][ T40] audit: type=1400 audit(2000000075.089:11238): avc: denied { ioctl open } for pid=12979 comm="syz.5.1909" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 212.794114][T12981] ufs: ufstype=old is supported read-only [ 212.807275][T12981] ufs: ufs_fill_super(): bad magic number [ 212.816005][ T40] audit: type=1400 audit(2000000075.089:11239): avc: denied { mounton } for pid=12979 comm="syz.5.1909" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 212.830456][ T40] audit: type=1400 audit(2000000075.109:11240): avc: denied { name_bind } for pid=12985 comm="syz.6.1910" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 212.837998][ T40] audit: type=1400 audit(2000000075.109:11241): avc: denied { node_bind } for pid=12985 comm="syz.6.1910" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 212.847099][ T40] audit: type=1400 audit(2000000075.109:11242): avc: denied { module_request } for pid=12985 comm="syz.6.1910" kmod="netdev-bridge0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 212.854472][ T40] audit: type=1400 audit(2000000075.129:11243): avc: denied { mounton } for pid=12979 comm="syz.5.1909" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 212.862888][ T40] audit: type=1400 audit(2000000075.139:11244): avc: denied { sys_module } for pid=12985 comm="syz.6.1910" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 212.870201][ T40] audit: type=1400 audit(2000000075.159:11245): avc: denied { mounton } for pid=12985 comm="syz.6.1910" path="/181/bus" dev="tmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 212.878487][ T40] audit: type=1400 audit(2000000075.159:11246): avc: denied { create } for pid=12985 comm="syz.6.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 212.979754][T13009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13009 comm=syz.6.1915 [ 213.253176][T13040] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 213.292632][T13046] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 213.357553][T13057] 9pnet_virtio: no channels available for device syz [ 213.654255][T13078] tipc: Enabled bearer , priority 0 [ 213.658973][T13078] tipc: Disabling bearer [ 213.809778][T13097] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 213.812128][T13097] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 213.814852][T13097] vhci_hcd vhci_hcd.0: Device attached [ 213.859977][T13103] Cannot find add_set index 2 as target [ 214.076348][ T72] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 214.079506][ T5980] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 214.133252][T13117] netlink: 'syz.5.1945': attribute type 21 has an invalid length. [ 214.229412][ T3338] usb 5-1: USB disconnect, device number 23 [ 214.248645][ T5980] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.252176][ T5980] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 214.272908][ T5980] usb 11-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 214.277358][ T5980] usb 11-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 214.278701][T13111] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 214.283274][ T5980] usb 11-1: Manufacturer: syz [ 214.288854][ T5980] usb 11-1: config 0 descriptor?? [ 214.344137][T13130] block device autoloading is deprecated and will be removed. [ 214.439558][T13147] netlink: 'syz.3.1951': attribute type 3 has an invalid length. [ 214.485134][T13158] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 214.495552][ T6000] usb 11-1: USB disconnect, device number 7 [ 214.504853][T13098] vhci_hcd: connection closed [ 214.506021][ T1152] vhci_hcd vhci_hcd.6: stop threads [ 214.524135][ T1152] vhci_hcd vhci_hcd.6: release socket [ 214.528540][ T1152] vhci_hcd vhci_hcd.6: disconnect device [ 214.582834][ T72] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 214.678588][T13176] __nla_validate_parse: 6 callbacks suppressed [ 214.678606][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1960'. [ 214.686249][T13176] netlink: 'syz.0.1960': attribute type 1 has an invalid length. [ 214.689738][T13176] nbd: error processing sock list [ 214.856319][T13191] overlayfs: failed to resolve './file0': -2 [ 215.005592][T13193] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.230208][T13206] xt_hashlimit: size too large, truncated to 1048576 [ 215.283010][T13208] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1968'. [ 215.468910][T13210] MPI: mpi too large (130952 bits) [ 215.515138][T13210] could not allocate digest TFM handle sha512-avx2 [ 215.694167][T13223] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1973'. [ 215.788305][T13232] syzkaller1: entered promiscuous mode [ 215.790299][T13232] syzkaller1: entered allmulticast mode [ 216.004745][T13239] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1979'. [ 216.015210][T13239] ip6gre2: entered promiscuous mode [ 216.018884][T13239] ip6gre2: entered allmulticast mode [ 216.023634][T13239] netlink: 'syz.3.1979': attribute type 6 has an invalid length. [ 216.030365][T13239] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1979'. [ 216.034892][T13239] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1979'. [ 216.147681][ T6169] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 216.244959][T13257] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1984'. [ 216.277842][T13262] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 216.281645][T13262] overlayfs: missing 'lowerdir' [ 216.317213][ T6169] usb 11-1: config index 0 descriptor too short (expected 65316, got 36) [ 216.319994][ T6169] usb 11-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 216.324918][ T6169] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.329547][ T6169] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 216.334941][ T6169] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.338594][ T6169] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.349246][ T6169] usb 11-1: config 0 descriptor?? [ 216.376754][T13271] cgroup: Invalid name [ 216.376851][T13272] cgroup: Invalid name [ 216.423630][T13276] netlink: 'syz.3.1990': attribute type 30 has an invalid length. [ 216.475740][T13278] new mount options do not match the existing superblock, will be ignored [ 216.483131][T13276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1990'. [ 216.491479][T13276] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 216.495183][T13276] gretap1: entered promiscuous mode [ 216.497849][T13276] gretap1: entered allmulticast mode [ 216.556200][ T3338] hid_parser_main: 7 callbacks suppressed [ 216.556214][ T3338] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 216.560707][ T3338] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 216.563308][ T3338] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 216.565831][ T3338] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 216.568530][ T3338] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 216.571151][ T3338] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 216.573720][ T3338] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 216.576338][ T3338] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 216.578850][ T3338] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 216.581447][ T3338] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 216.586193][ T3338] hid-generic 0006:0004:0009.0007: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 216.592204][T13291] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 216.593291][ T6000] usb 11-1: USB disconnect, device number 8 [ 216.615063][T13292] fido_id[13292]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 216.651450][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1994'. [ 216.806355][T13302] mac80211_hwsim hwsim21 HÇÀ: renamed from wlan1 (while UP) [ 217.787447][ T40] kauditd_printk_skb: 391 callbacks suppressed [ 217.787465][ T40] audit: type=1400 audit(2000000080.109:11638): avc: denied { read write } for pid=13330 comm="syz.5.2003" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 217.788437][T13331] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2003'. [ 217.790038][ T40] audit: type=1400 audit(2000000080.109:11639): avc: denied { open } for pid=13330 comm="syz.5.2003" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 217.812075][ T40] audit: type=1400 audit(2000000080.109:11640): avc: denied { map } for pid=13330 comm="syz.5.2003" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 217.821543][ T40] audit: type=1400 audit(2000000080.139:11641): avc: denied { setopt } for pid=13330 comm="syz.5.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 217.856152][ T40] audit: type=1400 audit(2000000080.179:11642): avc: denied { mounton } for pid=13332 comm="syz.5.2004" path="/310" dev="tmpfs" ino=1684 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 217.932477][ T40] audit: type=1400 audit(2000000080.249:11643): avc: denied { read write } for pid=13338 comm="syz.0.2005" name="virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.939220][T13333] /dev/sr0: Can't open blockdev [ 217.940411][ T40] audit: type=1400 audit(2000000080.249:11644): avc: denied { open } for pid=13338 comm="syz.0.2005" path="/dev/virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.950016][ T40] audit: type=1400 audit(2000000080.269:11645): avc: denied { execmem } for pid=13338 comm="syz.0.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 217.958521][ T40] audit: type=1400 audit(2000000080.269:11646): avc: denied { kexec_image_load } for pid=13338 comm="syz.0.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 217.967940][ T40] audit: type=1400 audit(2000000080.289:11647): avc: denied { create } for pid=13343 comm="syz.5.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 218.014793][T13346] program syz.0.2005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.223387][T13367] syzkaller1: entered promiscuous mode [ 218.225255][T13367] syzkaller1: entered allmulticast mode [ 218.341432][T13373] syzkaller0: entered promiscuous mode [ 218.343804][T13373] syzkaller0: entered allmulticast mode [ 218.535828][T13381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13381 comm=syz.5.2016 [ 218.884047][T13389] dummy0: entered allmulticast mode [ 218.891444][T13389] macsec1: entered promiscuous mode [ 219.200773][T13388] dummy0: left allmulticast mode [ 219.344159][T13339] kexec: Could not allocate control_code_buffer [ 219.577162][T13427] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 219.579446][T13427] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 219.582136][T13427] vhci_hcd vhci_hcd.0: Device attached [ 219.586972][T13427] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 219.589224][T13427] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 219.593212][T13427] vhci_hcd vhci_hcd.0: Device attached [ 219.597249][T13430] vhci_hcd: connection closed [ 219.598055][ T13] vhci_hcd vhci_hcd.3: stop threads [ 219.601584][ T13] vhci_hcd vhci_hcd.3: release socket [ 219.602246][T13428] vhci_hcd: connection closed [ 219.603457][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 219.612407][ T13] vhci_hcd vhci_hcd.3: stop threads [ 219.614206][ T13] vhci_hcd vhci_hcd.3: release socket [ 219.618340][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 220.277860][ T6169] Process accounting resumed [ 220.298790][T13464] ptrace attach of "/syz-executor exec"[13467] was attempted by "/syz-executor exec"[13464] [ 220.455666][T13467] Process accounting resumed [ 220.555992][ T6000] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 220.707898][ T6000] usb 11-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x41, changing to 0x1 [ 220.713307][ T6000] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x1 has invalid wMaxPacketSize 0 [ 220.718469][ T6000] usb 11-1: config 0 interface 0 has no altsetting 0 [ 220.723620][ T6000] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 220.728023][ T6000] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 220.731780][ T6000] usb 11-1: Product: syz [ 220.734182][ T6000] usb 11-1: Manufacturer: syz [ 220.736501][ T6000] usb 11-1: SerialNumber: syz [ 220.741611][ T6000] usb 11-1: config 0 descriptor?? [ 220.759942][ T6000] usb 11-1: selecting invalid altsetting 0 [ 220.831564][T13474] __nla_validate_parse: 2 callbacks suppressed [ 220.831578][T13474] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2041'. [ 220.922406][T13476] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 220.927303][T13476] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 220.935363][T13476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2042'. [ 220.939201][T13476] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 220.966990][ T29] usb 11-1: USB disconnect, device number 9 [ 221.236743][T13511] fuse: Unknown parameter 'uid' [ 221.284806][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2056'. [ 221.288337][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2056'. [ 221.295803][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2056'. [ 221.298960][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2056'. [ 221.306944][T13554] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.316162][T13553] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.318937][T13553] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.321778][T13553] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.376345][ T3338] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 221.395271][T13504] netlink: 'syz.5.2053': attribute type 21 has an invalid length. [ 221.507112][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2060'. [ 221.512389][T13581] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2061'. [ 221.540574][T13581] bridge0: port 1(veth3) entered blocking state [ 221.543589][T13581] bridge0: port 1(veth3) entered disabled state [ 221.548667][T13581] veth3: entered allmulticast mode [ 221.551313][T13581] veth3: entered promiscuous mode [ 221.561434][T13581] bridge0: port 2(veth0_to_bond) entered blocking state [ 221.563812][T13581] bridge0: port 2(veth0_to_bond) entered disabled state [ 221.568906][T13581] veth0_to_bond: entered allmulticast mode [ 221.575839][T13581] veth0_to_bond: entered promiscuous mode [ 221.770356][T13616] 9pnet_virtio: no channels available for device syz [ 221.858002][T13621] bridge4: entered promiscuous mode [ 221.860758][T13621] bridge4: entered allmulticast mode [ 221.887811][T13621] bridge5: entered promiscuous mode [ 221.890253][T13621] bridge5: entered allmulticast mode [ 221.905837][T13621] bridge6: entered promiscuous mode [ 221.908404][T13621] bridge6: entered allmulticast mode [ 222.076032][ T3338] usb 10-1: device descriptor read/64, error -71 [ 222.315998][ T3338] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 222.465971][ T3338] usb 10-1: Using ep0 maxpacket: 8 [ 222.469071][ T3338] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.472896][ T3338] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 222.476788][ T3338] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.481469][ T3338] usb 10-1: config 0 descriptor?? [ 222.691965][T13597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.697680][T13597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.704696][ T3338] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 222.904235][ T40] kauditd_printk_skb: 203 callbacks suppressed [ 222.904253][ T40] audit: type=1400 audit(2000000085.219:11851): avc: denied { write } for pid=13596 comm="syz.5.2066" name="iowarrior0" dev="devtmpfs" ino=3230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 223.107716][ T40] audit: type=1400 audit(2000000085.429:11852): avc: denied { execmem } for pid=13596 comm="syz.5.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 223.223555][ T3338] usb 10-1: USB disconnect, device number 14 [ 223.931276][ T40] audit: type=1400 audit(2000000086.249:11853): avc: denied { search } for pid=13627 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.940357][ T40] audit: type=1400 audit(2000000086.249:11854): avc: denied { search } for pid=13627 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.950530][ T40] audit: type=1400 audit(2000000086.249:11855): avc: denied { search } for pid=13627 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.960188][ T40] audit: type=1400 audit(2000000086.249:11856): avc: denied { search } for pid=13627 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.969844][ T40] audit: type=1400 audit(2000000086.249:11857): avc: denied { read open } for pid=13628 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.980270][ T40] audit: type=1400 audit(2000000086.249:11858): avc: denied { getattr } for pid=13628 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.981356][T13625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43769 sclass=netlink_route_socket pid=13625 comm=syz.5.2073 [ 223.990558][ T40] audit: type=1400 audit(2000000086.259:11859): avc: denied { add_name } for pid=13627 comm="dhcpcd-run-hook" name="resolv.conf.lapb11.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.990595][ T40] audit: type=1400 audit(2000000086.259:11860): avc: denied { create } for pid=13627 comm="dhcpcd-run-hook" name="resolv.conf.lapb11.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 224.109225][T13636] 9pnet_virtio: no channels available for device syz [ 224.401739][T13574] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 224.431150][T13649] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000003' [ 224.514264][T13661] program syz.5.2084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.527111][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2081'. [ 224.530525][T13655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2081'. [ 224.533741][T13655] netlink: 'syz.3.2081': attribute type 19 has an invalid length. [ 224.701337][T13687] ipt_rpfilter: unknown options [ 224.728816][T13684] 9pnet_virtio: no channels available for device syz [ 224.761998][T13687] bridge_slave_0: default FDB implementation only supports local addresses [ 224.767661][T13687] netlink: 'syz.3.2091': attribute type 1 has an invalid length. [ 224.908705][T13709] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 224.912830][T13709] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 224.915928][T13709] CPU: 3 UID: 0 PID: 13709 Comm: syz.5.2098 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.919630][T13709] Tainted: [L]=SOFTLOCKUP [ 224.921114][T13709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.924574][T13709] RIP: 0010:klist_put+0x4d/0x1d0 [ 224.926323][T13709] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 1c 0a 0d [ 224.932830][T13709] RSP: 0018:ffffc900069bf940 EFLAGS: 00010202 [ 224.934959][T13709] RAX: dffffc0000000000 RBX: ffff8880425a9c60 RCX: ffffc900290b0000 [ 224.937664][T13709] RDX: 000000000000000b RSI: ffffffff8b854295 RDI: 0000000000000058 [ 224.940363][T13709] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff217920c [ 224.943055][T13709] R10: ffffffff90bc9063 R11: 0000000000000000 R12: 0000000000000000 [ 224.945807][T13709] R13: 0000000000000001 R14: ffffffff90bc9020 R15: dffffc0000000000 [ 224.948516][T13709] FS: 00007f628d47d6c0(0000) GS:ffff8880d6646000(0000) knlGS:0000000000000000 [ 224.951547][T13709] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.953813][T13709] CR2: 000000110c3d42fd CR3: 000000003a28f000 CR4: 0000000000352ef0 [ 224.956600][T13709] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 224.959296][T13709] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 224.962077][T13709] Call Trace: [ 224.963232][T13709] [ 224.964269][T13709] klist_remove+0x14c/0x2e0 [ 224.965870][T13709] ? __pfx_klist_remove+0x10/0x10 [ 224.967604][T13709] ? __pfx_kobject_move+0x10/0x10 [ 224.969341][T13709] ? kobject_put+0xb9/0x640 [ 224.970902][T13709] device_move+0x12d/0x1140 [ 224.972474][T13709] hci_conn_del_sysfs+0x86/0x1a0 [ 224.974184][T13709] hci_conn_del+0x506/0x1180 [ 224.975776][T13709] hci_conn_hash_flush+0x186/0x280 [ 224.977578][T13709] hci_dev_reset+0x249/0x650 [ 224.979167][T13709] ? cap_capable+0x107/0x460 [ 224.980769][T13709] ? __pfx_hci_dev_reset+0x10/0x10 [ 224.982534][T13709] ? bpf_lsm_capable+0x9/0x10 [ 224.984159][T13709] ? security_capable+0x80/0x260 [ 224.985882][T13709] hci_sock_ioctl+0x5c5/0x7e0 [ 224.987520][T13709] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 224.989309][T13709] ? tomoyo_path_number_perm+0x188/0x580 [ 224.991214][T13709] ? futex_wait+0x125/0x380 [ 224.992781][T13709] sock_do_ioctl+0x118/0x280 [ 224.994399][T13709] ? __pfx_sock_do_ioctl+0x10/0x10 [ 224.996145][T13709] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 224.997882][T13709] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 225.000190][T13709] sock_ioctl+0x599/0x6b0 [ 225.001689][T13709] ? __pfx_sock_ioctl+0x10/0x10 [ 225.003358][T13709] ? hook_file_ioctl_common+0x146/0x410 [ 225.005273][T13709] ? selinux_file_ioctl+0x139/0x290 [ 225.007020][T13709] ? selinux_file_ioctl+0xb4/0x290 [ 225.008802][T13709] ? __pfx_sock_ioctl+0x10/0x10 [ 225.010484][T13709] __x64_sys_ioctl+0x18e/0x210 [ 225.012129][T13709] do_syscall_64+0x106/0xf80 [ 225.013732][T13709] ? clear_bhb_loop+0x40/0x90 [ 225.015384][T13709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.017405][T13709] RIP: 0033:0x7f628c59c799 [ 225.018902][T13709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.025375][T13709] RSP: 002b:00007f628d47d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.028204][T13709] RAX: ffffffffffffffda RBX: 00007f628c815fa0 RCX: 00007f628c59c799 [ 225.030794][T13709] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000005 [ 225.033476][T13709] RBP: 00007f628c632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 225.036188][T13709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.038900][T13709] R13: 00007f628c816038 R14: 00007f628c815fa0 R15: 00007ffd5123f858 [ 225.041586][T13709] [ 225.042809][T13709] Modules linked in: [ 225.044781][T13709] ---[ end trace 0000000000000000 ]--- [ 225.048201][T13709] RIP: 0010:klist_put+0x4d/0x1d0 [ 225.050034][T13709] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 1c 0a 0d [ 225.056783][T13709] RSP: 0018:ffffc900069bf940 EFLAGS: 00010202 [ 225.058958][T13709] RAX: dffffc0000000000 RBX: ffff8880425a9c60 RCX: ffffc900290b0000 [ 225.061627][T13709] RDX: 000000000000000b RSI: ffffffff8b854295 RDI: 0000000000000058 [ 225.064286][T13709] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff217920c [ 225.067812][T13709] R10: ffffffff90bc9063 R11: 0000000000000000 R12: 0000000000000000 [ 225.070487][T13709] R13: 0000000000000001 R14: ffffffff90bc9020 R15: dffffc0000000000 [ 225.073051][T13709] FS: 00007f628d47d6c0(0000) GS:ffff8880d6646000(0000) knlGS:0000000000000000 [ 225.076153][T13709] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.078311][T13709] CR2: 000000110c3d42fd CR3: 000000003a28f000 CR4: 0000000000352ef0 [ 225.081025][T13709] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 225.083653][T13709] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 225.086545][T13709] Kernel panic - not syncing: Fatal exception [ 225.089372][T13709] Kernel Offset: disabled [ 225.090850][T13709] Rebooting in 86400 seconds..