last executing test programs: 12.920273662s ago: executing program 2 (id=217): r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="ccfde435bba59c72", 0x8}], 0x1, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x30}, 0x4000041) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cf0400000000000000401300000008000300", @ANYRES32=r5, @ANYBLOB="040013000a0006000802110000000000060010008005000006001200000000000500e40000000000"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'virt_wifi0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) syncfs(r6) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000100)) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="00000000fe880000000000000000000000bf4c860bd37a20d4c9000101001414bb34d7e0e21d591ed757bd00000000000000001a00000000000000000000000000000064000000c6a62fb406000000000000b1a19c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe80000000000000000000000000002c00000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000100cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700ff80000025bd7000000000000000000028bd7000aa0e00004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x1a0}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02030009f0ffffff27bd700000000000"], 0x10}}, 0x1) 12.851024612s ago: executing program 2 (id=218): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x13, 0x0, 0x0, 0xfffffffc, 0xffffffff, 0xffff8001, 0x0, 0x2}}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000180)) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x3, 0x8}, 0xc) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x9eb9, 0x8000, 0xfffffff7, 0x80, r1, 0x10001, '\x00', 0x0, r0, 0x0, 0x4, 0x5, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@tcp6=r3, 0x2}, 0x20) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000040}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r7, @ANYBLOB='.'], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) r8 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x1f, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xeb8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0xc, 0x0, 0x3, 0xffffffffffffffe0, 0x10}, @map_idx_val={0x18, 0xf3a1d2e7ff5e5363, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2c}, @alu={0x4, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffff88, 0x8}, @exit, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x10, 0x7a, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000240)=[r1, r8], &(0x7f0000000300)=[{0x0, 0x3, 0x4000e, 0x9}, {0x2, 0x2, 0x3, 0x4}, {0x5, 0x2, 0xe, 0x3}, {0x5, 0x2, 0xc, 0x7}, {0x5, 0x1, 0x8, 0x7}, {0x401, 0x5, 0x7, 0x5}, {0x4, 0x5, 0x4, 0xa}, {0x2, 0x3, 0x1, 0xa}], 0x10, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x7, 0x8, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffa}, 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="02000700000000000000000000000000000000006fa80bc89106cf66a01a11d4ea4af4960384395a9a109eab", @ANYRES32=0x0, @ANYBLOB="e805050000000000140012800b00010069703667726500000400028008000400faffffff"], 0x3c}}, 0x0) 12.780858509s ago: executing program 2 (id=220): r0 = socket(0x10, 0x80002, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r3, 0xffffffff}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 12.711042031s ago: executing program 2 (id=221): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) close(r1) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x30000, &(0x7f0000006200)=ANY=[@ANYRES8=r1, @ANYRESHEX=r5, @ANYRESHEX=0x0, @ANYRES8=r5, @ANYRES32, @ANYRES32=r2]) read$FUSE(r5, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x200000000000000, 0x0, 0x8000000000000, 0xfffffffffffffffd, 0x23, 0x7, 0x1, 0x8000, 0x0, r7, r8, 0x1000003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r10, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe, r11}) getresuid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) r13 = getegid() read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000002600)=0xe8) r17 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_TIOCINQ(r17, 0x541b, &(0x7f0000000b40)) r18 = dup3(r1, 0xffffffffffffffff, 0x80000) sendmmsg$unix(r2, &(0x7f00000041c0)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000000)="38fe337a0a16b5d84193fc1d8bcd", 0xe}, {&(0x7f0000000180)="2a78e3873f23c9123722239fd612afff4d5e9f80062d04265a95fe7838e2ff4f5a7b22c188cc9d3eb1b43174bd80c2435a", 0x31}, {&(0x7f00000001c0)="2f5c8150120ab4c9d391e87b4d5368d09517e6", 0x13}, {&(0x7f0000000200)="948fd73902f064f58ebf8dae0f47e218151d1a525e030aeafa77bcbae6268a870cfbb495c32eedcfc156be5df69a", 0x2e}], 0x4, &(0x7f0000006480)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r14, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r17, @ANYBLOB='\x00\x00', @ANYRES32=r18, @ANYRES32=r2, @ANYBLOB="38000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x138, 0x4000050}}], 0x1, 0xcc) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r19 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) write$sysctl(r19, &(0x7f00000000c0)='2\x00', 0x2) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0020000000080800492400380000000000069078ac1e0001ac14140d8307d7e0000002860600"/54, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d994000000000000"], 0x0) preadv(r0, &(0x7f0000003f80)=[{&(0x7f0000002d80)=""/4096, 0x1000}], 0x1, 0x5, 0x7) 858.389552ms ago: executing program 0 (id=364): socket(0x11, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x7f}, 0x0, 0x0) 857.240111ms ago: executing program 0 (id=365): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r0, &(0x7f00000003c0)=""/128, 0x80, 0x9) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x30, 0x140d, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_THP_DISABLE(0x29, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/145, 0x91}, {&(0x7f0000000180)=""/113, 0x71}, {0x0}, {&(0x7f0000000300)=""/153, 0x99}, {0x0}], 0x5, 0x4, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a44000000001010902"], 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000406010200000000000000000a00ff040500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) (async) pread64(r0, &(0x7f00000003c0)=""/128, 0x80, 0x9) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x30, 0x140d, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}}, 0x40) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$packet(0x11, 0x2, 0x300) (async) prctl$PR_SET_THP_DISABLE(0x29, 0x0) (async) preadv(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/145, 0x91}, {&(0x7f0000000180)=""/113, 0x71}, {0x0}, {&(0x7f0000000300)=""/153, 0x99}, {0x0}], 0x5, 0x4, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a44000000001010902"], 0x0) (async) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000406010200000000000000000a00ff040500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) (async) 680.016622ms ago: executing program 1 (id=368): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x34}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008000) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40004}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x611, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r3, 0xe03, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x39}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000054}, 0xc0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x248, r3, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10c, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4a, 0x2, "233316720e445b198bd796b924cb6082b06641c94be4cef7a89ed91ca6601f467338e0ea24097fd8fe8bb7effb4d1b10d9a8b0842d5f90b6149057f11c348a57a2a7e13abba1"}}, {0xb8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xb2, 0x2, "5b9724e892dcdb7b3ded62cbc5abc23434f101af4ef6b720276965e53dba26f2a3bc8958b5e46159928798a4b37cab622fd106ede00fbc1b2782f8296304af455e7be492ebbcc4b4429c025b52139f58bf5c66481108ef62edcfd0354bbafb0a66be186d3c33f2cc9b2a56a539b7f0cb8e977df5bc4a60bca3f22c4809d7e40270a7ceadd9c2bc507472e2eb8863885a8328a3e3d2c1b63ec0702b11ea70062e98673b16b95650ab80b9caa0d303"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xb4, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x24, 0x1, "a3a8244c213d36e08945da4d5264846ca2153abe0457287a15c9d2ea6545dc85"}}, {0x7c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x76, 0x1, "acc9bd274efde91c7574124e9a36ad18d26004e0d045838977a527250d08dc86fba23adf7e930c84de9a48d4a36c2575ecca94753d10df6425921a3590fe09e23d5f2fc067aac07cff009149f2bfd262198a917bd478ef80aa0d364529e0a1466770435c4c1e0224ee5de1ae66739ed51b32"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x58, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x401}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfffffff8}}, {0x3c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x36, 0x2, "f84c5e34d82d7a40b8e071d8f087f4f24a1bc1a41a35ae98c672c69f5e9addb5013c89ba80702dc931b21ef27b38d2d52663"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x248}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000800), r0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'nl80211\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0xc008001}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000980), r5) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000050) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r2, {0x7994, 0x9}}, './file0\x00'}) r13 = syz_io_uring_complete(0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x84, r4, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$IOCTL_VMCI_INIT_CONTEXT(r12, 0x7a0, &(0x7f0000000d40)={@local, 0x2}) sendmsg$NFT_MSG_GETCHAIN(r13, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0x2c}}, 0x40) setsockopt$TIPC_MCAST_REPLICAST(r12, 0x10f, 0x86) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r14, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x5c, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008024}, 0x4000000) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x25}, 0x18c0) 676.101233ms ago: executing program 1 (id=372): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x1800) write(r3, &(0x7f0000000440)="ad1124bd459ab052f2a3412a80f7d41bec990793ddf08c2c76da539a31619a70a9f209bb5be5e7a5f86f120d", 0x2c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) ioctl$CDROMVOLCTRL(r1, 0x530a, &(0x7f0000000040)={0x9, 0xf5, 0x87, 0xf6}) tee(r1, r3, 0x401, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0xcb0a) write$uinput_user_dev(r4, &(0x7f00000006c0)={'syz0\x00', {0x3d, 0x8, 0x5, 0x7ff}, 0x43, [0x6, 0x3ff, 0xa7b, 0x5cc0, 0x7, 0x80000000, 0x80000000, 0x101, 0x9, 0x7, 0x8, 0x7, 0x7, 0xc, 0x1, 0xe, 0xffffffff, 0x48, 0x5, 0x4, 0x4, 0xb, 0x8, 0x5e55, 0x1, 0x5, 0xfff, 0x9, 0x8, 0x0, 0x8, 0x5, 0x1, 0x80000000, 0x8, 0x390, 0x3, 0xf, 0x7, 0x2, 0x195, 0x9, 0x8, 0x1, 0xb, 0x1, 0x8, 0x6, 0x3, 0xfffffffc, 0x0, 0x8, 0x7, 0xa, 0x3, 0x5, 0x4, 0x7, 0x8001, 0x2, 0x8, 0xc, 0x1, 0x80000000], [0x8, 0x0, 0x4c, 0x5fd, 0x1, 0x7fffffff, 0x0, 0x5, 0xffffff01, 0x8, 0x8000, 0x7, 0xfffffffb, 0x644, 0x1ff, 0x3, 0x3ff, 0x1e2, 0x8, 0xa6d2, 0x101, 0x11, 0x1, 0x7c7, 0x80, 0x5d6, 0x563, 0x3, 0x0, 0x3, 0x101, 0x8, 0xb, 0xbe96, 0x5, 0x100, 0x6, 0x9, 0x7, 0x8, 0x7fffffff, 0xd1b5, 0xbcb, 0x1ff, 0x4, 0x7f, 0x5, 0x5, 0x9, 0x3fd, 0x4, 0x8, 0x5, 0x3, 0x101, 0x2, 0xf, 0x5, 0x9, 0x9, 0x1, 0x4, 0x10, 0x6], [0x8000, 0x4, 0x2b, 0x5, 0x6, 0x200, 0xfffffff9, 0x98, 0xfffffff9, 0x8, 0x10001, 0x6, 0x0, 0x9, 0x5, 0x7fff, 0x4, 0x0, 0xde1a, 0xb98, 0x5d, 0x80000000, 0x8, 0x9b72, 0x0, 0x8000, 0x8, 0xfffffff7, 0xb, 0x3, 0x6, 0x4, 0x9, 0x5, 0x1, 0x7f, 0xead, 0x4, 0x8, 0x5, 0x7, 0xffffffff, 0x0, 0x5, 0x1e, 0x7, 0x3, 0x1d, 0x0, 0x3, 0xfffffffb, 0xfffffbff, 0xb654, 0x67e, 0x8, 0x7, 0xd, 0x8, 0x1, 0x7, 0x4, 0x2, 0x7, 0x200], [0x5, 0x7, 0x10001, 0x5, 0x43, 0x4, 0x81, 0x2, 0x7ff, 0x101, 0x1, 0x80000000, 0x101, 0x4, 0x1, 0x0, 0x2, 0xba, 0x2, 0x1, 0xfffffffc, 0x10000, 0x6, 0x7, 0xca, 0x1, 0x0, 0x0, 0x3, 0xaf7, 0x312, 0x5, 0x8000, 0x3, 0x7, 0xffffffff, 0xa0e2, 0x7, 0x4, 0x3, 0xa, 0x1000, 0x40, 0xfffffffd, 0xffffffff, 0x7, 0x8001, 0x9, 0x2, 0x0, 0x400, 0x800000, 0x5, 0x8a2, 0x7, 0x2, 0x41, 0x6, 0x4, 0x60a46d65, 0x80000000, 0x7ff, 0x8, 0x20000000]}, 0x45c) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x2, 0x4) 551.112991ms ago: executing program 4 (id=373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x32315852, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x1, 0x1}}) connect$netlink(r0, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x800000}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b0001006578746864720000fc9ee5464214000280080006400000000308000740000000090900020073797a32000000000900010073797a30000000001400001c1100010000000000000000000000000aabbbbe6cbd731511afd269cfabfcc0d59696c906630193c4e421b5964ffde5497494b55fb11ebb0b503268166694697e6910a63e7e2eb7f040debecb814539b1a119c3c86e78"], 0x7c}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x11, r3, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @multicast1}, &(0x7f0000000100)=0xc) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc4aab645fb07b542) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r7, 0x0, 0x0) dup3(r5, r6, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0xfc, r8, 0x1, 0xfffffffe, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x64}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xcaf}, @NL80211_ATTR_VENDOR_DATA={0xc6, 0xc5, "00c0a4d9493258dfe3a5415bf1a4e6f3c8ca110ffe1e6a52cb61efa4cefb35226bb8ac4e60e274b9a35dc71bef48a03fb845c46720dca1648e2281d7dedde2c76bbc93564e55777e44fdf7b4e86431aa90e8d010cfe80543846dd197c2927af91378333cfdae4496fb340467139b0fe693306142c234070047368bf385ed8f24523b60a59747fe1b48504b798977e7f40c06ec7fc3d4b196d15c2815810f0b86cb567c94c5296fb9436d0ccd6e6cf8747214decbff2d5fb50312db5441710e489ea3"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x40}]}, 0xfc}, 0x1, 0x0, 0x0, 0x22048880}, 0xc800) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r8, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x7fff, 0x40, 0x3, 0x460, 0x1, 0xd, '\x00', r4, r3, 0x0, 0x2, 0x2}, 0x50) mmap(&(0x7f00006fb000/0x4000)=nil, 0x4000, 0xb635773f05ebbee8, 0x1010, r3, 0x100000) r9 = syz_io_uring_setup(0x1e20, &(0x7f0000000400)={0x0, 0x5440, 0x2000, 0x3, 0x1a}, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b05, &(0x7f00000000c0)={'wlan0\x00'}) 549.064296ms ago: executing program 1 (id=374): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xffff, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x0) 529.004206ms ago: executing program 4 (id=377): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x16, 0x10, 0x8, 0xfffffffc, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1825}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48008}, 0x4000) 430.748354ms ago: executing program 3 (id=378): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000080)={'trans=virtio,', {[{@access_any}]}}) (async) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000040)={r6, 0x10000}, &(0x7f0000000200)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 430.449048ms ago: executing program 3 (id=379): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000e00)=ANY=[], 0x0}, 0x94) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) syz_pidfd_open(r1, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0xcb0a) (async, rerun: 32) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) (rerun: 32) setreuid(0xee01, 0x0) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) (async) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) lseek(r2, 0x0, 0x0) (rerun: 64) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32, @ANYBLOB="080004"], 0x4c}}, 0x0) 360.94171ms ago: executing program 4 (id=380): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="70000000140009050000000000000000021088fe", @ANYRES32=r1, @ANYBLOB="08000800660400000c000200ac14"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x54, 0xcb, 0xfe, @remote}, 0x10) 351.675927ms ago: executing program 4 (id=381): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x9, &(0x7f0000000a00)={@mcast1, 0x0}, &(0x7f0000000a40)=0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0xd, @mcast1, 0x8}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000640)="af57adf0dcb5a540672d155041697d154e79d2f80abcd8d9abb1598285433ab19929dc3d7f17d8252f4f20539a6ec885ca4b17a2ec0b9f339a3268cef0ba4dcbf99c80f2c40bdf0b05ba47de2fabaec81f3e929c7c77212d95f0f896b76a39f86b6d2924cc3aa0cabe9f1f5cdf8a11f1c95542eef0868648f7d373a7fe02ec87e5b936a0fdb7a89e34cf", 0x8a}, {&(0x7f0000000500)='r', 0x1}], 0x2, &(0x7f0000000a80)=ANY=[@ANYBLOB="14000000000000002900000034000000c2f8ffff0000000000000000000000001e00000032000000fe80000000000000000000000000001d", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18}}, {{&(0x7f0000000780)={0xa, 0x4e22, 0x5, @empty, 0x101}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000880)="9413b0292711a160ab61f244dde0ade6a7e362c5e19a62c0bbb9d40f61d4384afa58c38945125760d7f0619451541e410969cd63e649a8cbd544802c9756e115d50435d3e8cfd31b544fde36420aaaf3b81acc6a86e5ef4e3a25292e77da020674f17bd75b53674ed6a519a56fa6416e14877491fc601ee793211948bcfa0f9f4194777d3a75", 0x86}, {&(0x7f00000007c0)="2ac085d5ccc4ba01f8d7fb14ca32e73aaef926192b59c493bb8b7993ebc2afd241c4f0b226c9026b819f0b3c848553318f30686170bfdc9de36c5931bfc9f0339c9a519bc0667b", 0x47}], 0x10000000000002fe, &(0x7f0000000c00)}}], 0x2, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@remote}, {@dev}, {}, {@multicast2}, {@local}, {@local}, {@multicast1}]}]}}}}}}}, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x40) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@workdir={'workdir', 0x3d, './bus'}}, {@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file1\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "f1"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e21, 0x8001, @ipv4={'\x00', '\xff\xff', @local}, 0x800}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0xe, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb28}}]}, 0x80}, 0x1, 0x7}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c808efc0b800800020001000000a00008809c0007800800050000000000080006"], 0xd0}}, 0x0) ioctl$IMGETCOUNT(r6, 0x80044943, &(0x7f0000000740)) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 346.159546ms ago: executing program 1 (id=382): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000500)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000193000/0x1000)=nil, &(0x7f00002da000/0x3000)=nil, 0x1000}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e23, 0x236, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfff}}, 0x2, 0x8002}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @local}}, 0xf, 0x8000, 0x20000, 0x0, 0xcd, 0x0, 0x4}, 0x9c) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r4) ptrace$ARCH_SHSTK_DISABLE(0x1e, r4, 0x1, 0x5002) ptrace$ARCH_SHSTK_ENABLE(0x1e, r4, 0x1, 0x5001) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x1, 0x5004) ptrace$getregset(0x4204, r4, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8}) ptrace$setregset(0x4205, r4, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8}) ptrace(0x11, r4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) 345.710695ms ago: executing program 3 (id=383): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r0, 0x804c4700, 0xfffffffffffffffe) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000002c0)={0x9, @win={{0x8, 0x7, 0x1, 0xe2}, 0x2, 0x7, 0x0, 0x6, 0x0, 0x6}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f00000000c0)) r5 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x2456, 0x80, 0x2, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r5, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r5, 0x22d0, 0x20, 0x0, 0x0, 0x0) r8 = epoll_create(0x7) r9 = epoll_create1(0x0) r10 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000180)) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r11, &(0x7f0000000080)={0x1008}) 138.408997ms ago: executing program 3 (id=384): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001800090000000000000000b238e2a2499471bb0100000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x200440c4}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000008000000000000005f6100303000"/44], &(0x7f0000000040)=""/39, 0x2c, 0x27, 0x1, 0xf, 0x10000, @value=r1}, 0x28) 137.881596ms ago: executing program 4 (id=385): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r0, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/uts\x00') r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x7, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x80}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4008090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x24}, 0x94) 136.605134ms ago: executing program 0 (id=386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x0) (fail_nth: 4) 117.26511ms ago: executing program 3 (id=387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002740)={'syztnl0\x00', &(0x7f00000026c0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x0, 0x1ff, 0x4c, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7800, 0x1, 0x401}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002840)={'sit0\x00', &(0x7f0000002780)={'ip_vti0\x00', 0x0, 0x29, 0x8, 0x5, 0x0, {{0x1a, 0x4, 0x2, 0x34, 0x68, 0x64, 0x0, 0x0, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x2b, 0x17, [@rand_addr=0x64010100, @remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @broadcast, @private=0xa010100, @private=0xa010102, @loopback]}, @noop, @lsrr={0x83, 0x27, 0x53, [@dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010100, @multicast1, @remote, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1, @dev={0xac, 0x14, 0x14, 0x22}]}, @noop]}}}}}) sendmmsg$inet(r0, &(0x7f0000002980)=[{{&(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="99ce77f0164b8505e3508d532fb8ab19ca4919d61049ba98dab7502459536e439e3d367a951a6e915bf6da9c29e62851e79e308e990aa74400bb42af559e170e8d54f813bb802f859a2258cf40bf306701d985343c282069fdaa3dc90356a986c1a0b02e30d186430a4e6aa9baabacff022fa2db85c7d9b78f1b2bf4289226217778364964d03e6787c85d06d613c14df28c10d4a9c32eac1e9426830b62603ffbae0bc01c8221b9806be8b87c3ddb2fee6df07dc2dea757e9a6d27bf36e2d289bfd6ba6d4e4aa70d8", 0xc9}, {&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000140)="b8aa366ae6b9637b7ada7a811b48a640b1803369e2336b5267713573e3db8d160c8000bb0b6cb0ba6c5375d8c3a402afbd35ac38dcade8a9633991313b6bddcb41530cbe02ef5b5a13c9aca8c01d0f1d04b088ff24601830d6446911231f974bf14b826bf199920edbdffe1160011e051cdf33ac13c44d36be2c3e9e1b40b94a03a521df0913c799af99a497790978b77ef2242602", 0x95}, {&(0x7f00000004c0)="2518e55397cc111c9d4518fdf6838dad12adfbb412c8897e931bb051bd665f18cd13c0db971954ab260e3585b02a7e3086366f84c10f077fc775ec7adfca3c2d24f4365dfcf1e18e3ffe0782f6efb58f1795d939a044768a115d5b9d0cb0159fb1300a350eab19c810b95c32f25c9583907fc8b427cc53c3c1add2c9910830dbb2c33f4abf83cf6f9db857462a3025f7623c1bf8a290fa213c908c621c4a685fc52c70f8fa7c246d9875b2e9140c9c5599e0fb6fd89255849dbd467bec2a8a58c5ba9e915331f5e0c9fe054b5c65d5", 0xcf}, {&(0x7f0000000600)="128c68ca12ec112990d3de1786d6225c5f3f22518ed07fc237250cd3fe688d6299bbd51f3df308da5c7c6a33dd6f20cfe4bca0988b9df219f446fb371d9dcb20fddf22e0c542a6b90581b45a83c84289a5f9814cf662bd11d064349d233a30a23bb8f395ce3f3679f8e7f84c71de8685c328e710f0de09084aaef2df7863fc2b06fd8ac900d377834970455ae88c7a82ee09e968866de10fad7e5ee647aec97359922ec3f78bd4af4135c984b13d590a9993bbeb50195b9d758e786b3412568f90ab922b69fd35617edefae0c2869474bcf57182648e7983f3b5b61a4b6b3929b3d7077423340f1fbb0e7d67fa4098862e10338128", 0xf5}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000000700)="b966c484eae4996cac64e86303aa1e615cdb428bd0e36409a4eb8f0262b8a8404bf0c4ef9ed89d9237cc1f6042c257101b9fc8ee9ad4a7c524a55602c34266d19ee3ab89cd5d9f872fd3f644ba6180e0547287f3f010fd1db737c442121cab1a0066873f56f9d95588a080b54e4842d77ccc808be43d5c10221452a411d28798190c1a346084dfdd755774ba24bd5b4d7be1c0a99b982ee0bc73e7aec8c7f735db041145c5b048fc88d9fd086bda3a428ed19655e3e19b02b336dd5e3346bc91368a603a2affa1f91c9f41896af97c3ff8a4", 0xd2}], 0x7, &(0x7f0000000880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb8}}], 0x18}}, {{&(0x7f00000008c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000900)="e73c82e7cfffe4cc67fe2397887a69a1fd128aedc786d635fcb6841334d36836094b5eada3fd4078648f26ab64eb815ee4bd89242deb818d549af8021f3eb2c411f9d393b3e77310923ebf9b5f5a96985920ee14b5a372ddb3c308c80629f47ff497939dcad77d1f31031317d208b79c7488c529b3f4a8a38c645b26c1032b21d34dad2dc2fd89c060826ae9f78997d490b4c6f0e64835fc85aba9fe25f5cdbdf6", 0xa1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000a00)="9cafc5a3b6fb697cf7db643b6b2764cdcf1e8561744320b48301b749e1b976a5e03409708e9645c3ca980a893453bfbc0bcb3f97e88d75caa172061313b934acc456f7db11fc59d4bdfbf1c1e64d0f2999bbe8991d3ee1730884c2baa132c7542ebf177623d620d3ea7a8e18", 0x6c}], 0x1, &(0x7f0000001b40)=[@ip_retopts={{0x54, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0x2b, 0x93, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @private=0xa010101, @remote, @multicast2, @private=0xa010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x22}, @local]}, @generic={0x86, 0xf, "58452a097786055b6280c5aa0b"}, @generic={0x89, 0x3, "87"}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x70}}, {{&(0x7f0000000ac0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001fc0)=[{&(0x7f0000001bc0)="8b10d0ea2f5d47c02f66eeba233606556e0dee4db0ff5b087b2e55b635d2761e0102e7fdea1f8050c3499a24bfbaab8c5f61946ef66a0d652be5ce5fc1b13de41cbf9aebc0bf2e837e2c7be4f7961e6263e21ffee4372ee2c51736c57818e04d61b1204048f0089ca80ba2c86eb3448eac2cc64ee024dbd6b88653ce8fe2b94c0f622ed0d335531679d9b1c822d04bbaf07c36d899f4706073abaf1edb5654c95a5fb1cd9dc07a72e8b227179e6e20305c9690d92caf92a1d970f75817d9f1aefc3ae891b490071a268cd613544f046ef9b8c459cd3fe3b92d2e1dbddb3dfb68cb5180", 0xe3}, {&(0x7f0000001cc0)="dcb284e028036ded6d8c30e2b004acb5b13da0aabec0b5e731a981b1fca2d1cac74b9805dd515c899b60cf0c9d2584276066fee12a00b4f7c9b93ce11e808b6f9abb6312c7afd723e72cc273df9ac1f3e8877ab8c98fbb53577663dd80c5710982df6de28142e786daf0d9c463264f1be6f086a94d4e32a4c4e05f", 0x7b}, {&(0x7f0000001d40)="804f20256b5decc6793f09c79596ada5ecf2ee2d9176c898319441073f6f9962fea6c891d121034aaaf31d24747330feee5996c859998d35c9d91a2d736622170da264fff6b86f7ab6e6df891c191cbd98dd5862005e7cc889a58233ea90425530238aa49d3245b554099ad8fb0c64824c9c29255908ffdf971709a5a0c00df3", 0x80}, {&(0x7f0000001dc0)="068f4e0108376a55cc4801985d5c7761dba3be2162dde2b8cd93aad43497ac950595b7392cb9e6a572ed7e894d992211117fca3a0d2f416eb7206d3eb07b97fec4e2d481e5134cc2366d988276c6b5791142696d2a2f9ccdf3a7ca691138c9c02a0e31225112c1d7c7f9a01f25e259b6065eda8281b91a6a6500a9af928496dc16577564718438fa32ee4e3a537fdb589c54c1142299f05d0aca7c9398c56c42b2772c9a8852dd20a168d3de8fcd0b0bf376a081c4fc", 0xb6}, {&(0x7f0000001e80)="e40e5ef0be1ddc15f4d47e85cce73b7e0f9364064f3b852a172d7ee7939733403a3d5a64aea179016ea227eb7bce332e60b0df23790cfa432b", 0x39}, {&(0x7f0000001ec0)="970d55a93b2adc37b8a0b2a2fe0bd021afe3d2fa22d799a6e88a4529b23f6cdd5e8c33b02cf9ce361ed6ea4a8ecad5bfd1fd121563248400e32a4d6e768c105105aa94a1add60f3ddda13d379d56de8f5c34b0686fe5c60bf05e502cf2ff915d230fb58d87ee5c22f2a268fef26a6cdb179d29fed557ce15c6ea0760d5cdf1d739446a5978f642f0f0aaa44f0b3c2bde0b557b39729ece34b9e4fddaf8827519684ef137130ccec5c31a96bcae1c71eb45811c1f7eaa17558badf4bc6a40bb55dba953837fe9994f994feb79d6f8e3694bd6d7b1fe", 0xd5}], 0x6, &(0x7f0000002040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @loopback}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x84}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0xb0}}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002100)="3cabc8b531c91c6b29cb914f680c3c8c409afbca10456044efa6494d893ce122ba23c33d1550ca48b767137739ea", 0x2e}, {&(0x7f0000002140)="5f655331fda5a679b5246ecfeba0bc42645aa08390ae11595bd906c696409d3575a766da51287dd8e0f0a665df7af408c9c879dcfd8f204cb89a547e0cbc13cd4abdd06bbca8a98c65c15bf09c180ff9abbedeb658d80243dc1301bb241946495b207a0d9ba7b04e49cbb8a8dfaf7a6889662b855fcf9683947b3d2cd8251c46a0881374c4e9e7bb4f1e4bd803ee8c92ce16b3", 0x93}, {&(0x7f0000002200)="9e0e7ba95055495358799c83b53cd85aadd9b944e9bb66d923b3a8e924c3b6e9a50693", 0x23}, {&(0x7f0000002240)="b6b39c268de884a729456b80", 0xc}, {&(0x7f0000002280)="4f463711bf8d369f5f3e467b8ae0ead536146ce6f33892a1ef15d87b5ce7e86e645ce1bb110d8236481fd8c54b3ee2cf77a1695f0a4dbbf77e508d24ad65088d78a78dd0f60f2d998192ad85caf3c11eb2fadda191d971b04abebb8a4911fb8ca9c4a110bfe5597961fc29c123c16a35cf181fe7d16655fc2908f75d576a8f849e0dd692d39e47d0e5cfe02caa70900fca67292860ff56538064", 0x9a}, {&(0x7f0000002340)="217d5039597af7d6a68fd1e27d806ebb3fa81be49adf41d78b981bb90d4e2cb97537e33b1f4392f75d3eb111491cb8fd823a25acaed0e064cb12810dea4466", 0x3f}, {&(0x7f0000002380)="4e9f61857f3784f2ffeeae7629e1939d41c3b3e84e3c1cf7da5bd7c3b86bcaae576abbd224", 0x25}], 0x7}}, {{&(0x7f0000002440)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000002680)=[{&(0x7f0000002480)="de28e0cb232fd54f0c0c4f503e0f6a52ed5c0d29698cf7d1239d056b3b9e4ad2b3d2", 0x22}, {&(0x7f00000024c0)="ae44c1ffa55e5831ea1ac05538706a0402d898efdec72975cc020c1f8cc16494365eeb1729194d5a8ea379672ae455da606399e551e2abbaaf69bec14018686d0ef471b13ad90b94a36b4cf351aec46ae1c96f48186af138f279cd8b755ae1cede5ffa6b236b8cba9fd9e32e758743182743e679f7b06d7d0d69220afa594eabe50dfb5f8fe70a9f057418482d9ae453cab6eff73210dcb42ea96ebaf3a81dbfdd", 0xa1}, {&(0x7f0000002580)="bdc98b23aac9d9e5ec8842a200e072b8a8cfda57fe009a965fc473ac4b4521732d51d8a2487c3a2b6e464de707da3090d718c5107f83c98e0c8facde572eaa454619c07e4ea8d8467c365b7473851fa36485ecd3f34b42ad9a36c66e52475eaa4751ad545f6101bb59d9806b50bbfa749bccec40b6914406c0b9181d9e511ed0019d5560142b40539b17a24e6a6c7258fe1c52e0fb7db852e286cc3e48c5c07aa162ef2df1f78997878b574a3d8695db114426c68c22bcda17fe13cdf85a70fc180e791e", 0xc4}], 0x3, &(0x7f0000002880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @rand_addr=0x64010102}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xd1, 0x0, 0x9, [0x1, 0x1, 0x8]}, @rr={0x7, 0x13, 0x58, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @local]}, @timestamp_prespec={0x44, 0x24, 0xd3, 0x3, 0xc, [{@rand_addr=0x64010101, 0x1}, {@private=0xa010102, 0xc}, {@private=0xa010101, 0x7}, {@private=0xa010100, 0x10000}]}, @rr={0x7, 0xb, 0x16, [@rand_addr=0x64010100, @empty]}, @lsrr={0x83, 0x23, 0x1f, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}], 0xd0}}], 0x6, 0x2000c000) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x2c, r2, 0x1, 0x123, 0x235, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x46}, @NFC_ATTR_PROTOCOLS={0x8}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000001608000340000000000800024000000000080008400020000108000840000000000900010073797a30000000000900020073797a32", @ANYRES8=r0, @ANYRESHEX=r0], 0x9c}}, 0x4000) 675.724µs ago: executing program 3 (id=388): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x5, &(0x7f0000000200)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f00000006c0)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94) (async) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\b', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250c00000008000300", @ANYRES32=r3, @ANYBLOB="040028000500080000000000"], 0x28}, 0x1, 0x0, 0x0, 0x2004c014}, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8971, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) (async) r5 = socket(0x1, 0x2, 0x0) r6 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) close(r6) (async) r7 = socket(0x10, 0x3, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x30, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0xfff3, 0x9}, {0x0, 0x9}, {0xffff, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0xd, 0x7f, 0x5, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x8000, 0xf, 0x3, 0x4}}) (async) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r9, &(0x7f0000000000)={0x1d, r10}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) (async) r11 = socket(0x1, 0x2, 0x0) r12 = socket(0x10, 0x3, 0x0) (async) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@newtfilter={0x31d0, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r13, {0xfff3, 0x10}, {0xf, 0x9}, {0xffff, 0xb}}, [@filter_kind_options=@f_route={{0xa}, {0x31a0, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x41}, @TCA_ROUTE4_ACT={0x2514, 0x6, [@m_skbmod={0x144, 0x3, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xc6b}]}, {0xcc, 0x6, "aeead1c26ae8c74384fba52b671414fc26ee75d37707fdcd1c5d68737dcbef564d0df345ab883583662bd76e51ac821d45114437c931b6fd3235ac5f459160c194f3962585e58f533fec5eca54404c023b0ee2b1424540823c51059cf14f4d5c37edb1a1bb7b6d274eac44980c5bc11a87e4c097d37d8d673a804b967ad4b82e582c1943d84d60846c0b9202bd4b46e7e9c4c55419f2528db0e2c98e59f58b0845f0c80288cf30cecf347ffdf9ad252606fabc7404733e19e4f3aaac0a19e00b87b4ff8c68e8198f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x144, 0x0, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x9, 0xffffffffffffffff}, @loopback, @rand_addr=0x64010102, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0xffffffffffffffff, 0x9, 0x4d}, @local, @dev={0xac, 0x14, 0x14, 0x26}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x2, 0x5, 0x80, 0x9}, @multicast1, @broadcast, 0xff, 0x1}}]}, {0xa4, 0x6, "d82d6cffe58bd0cc663a3878aafd75f77e433d1465dbdd14d8e285861b1770906d5388dc2cd60c3fa6560b4d08da1e502ef70cdf44a3e1fecb0dc690a97ef628f40ffcff5ef9086cca942dc45d99e48c42d6ed338f343f60e9d854266302e825d8d38ad1b0c7926e1b923b3b95d6ea4cd8e366f97405803cf89df2d9c92fc50ee2ade8fed7162be7d0d4b4590b094cce770fc9fad52094d2cd0fe67d7ed374fc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_skbedit={0x1040, 0x1a, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x13c, 0x5, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffb, 0x1, 0x20000000, 0x6, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2260, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7fff, 0xfffffffb, 0x6, 0x1, 0x401}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x11c9, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6fe, 0x0, 0x6, 0x1, 0x1ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfc9, 0x10001, 0x6, 0xec, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x44e, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xc000000, 0x8, 0x1, 0x5, 0x7}}]}, {0x74, 0x6, "799e1e04be21277ba0d66c17320dfd7b473caf07933205b6bf107a12e3f59856767c87c1f4ffa690ea662145215d8f606cfaf9a3d1d6348184dc02fb46432cabb432730756c613d8c3213525905efac5e34d437a4e1bf7c046199cd5ba4ed36c46fe1468639bb54347e86295637d9ecd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xcc, 0xd, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x1e, 0x6, 0x1000, 0x100}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x58}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x832}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x3, 0x6, 0x6}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7fff, 0x7, 0x0, 0x5, 0x7}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x3, 0xffffffffffffffff, 0xfffffffd, 0x5}, 0x1}}]}, {0xd, 0x6, "edefbe348992388f52"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x1040, 0xa, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "71633a9f90d2ccb66be798b2351dd7b9"}]}, {0x1004, 0x6, "b048609e1f6a1d1cbfdf0c23e12850eae9c2a020439ff28005d6bd374c26f08922fcb8e97b71aed029346c8dc6923f2ff9eebdb641498875b18c249f5fc4fc5d72fd9e7348b4835c989141b3fcdce51e31a3e610565e7725207ac71989d8b264c4f0a736ee6d3494a2e25e0b68020cccd7321fd6152ec2b788d63daa7bff3defe232c4f24004ebd47266e8f6d4624041116743550668b8cadb7f7be6196f5776941efb2389bc51e2b8d592a6e98f99aadfdabd05ba3ec03c91afe3bedb197c9eb09869270a0c75213a01880562bf560c102706b40e4b407f413e29c3af3d038b69b920753090475a460850f4a18411419ce4efff4e2727f5cad9c7d554d419b419004a15500316df30d5897835924b6a92ff165d4154ace2ee650ef6be58fd5d1c0e661c8a5100d6a23236d2de3dbc69a6f8f932127b4af7d47a4980f141fcf6b0bcdd773425c97a8b7b2b1fff3c4c7f70de65691d62659907005788c35bbad6f06105702030611988d24b50451c0dfba90993dac303956832cb2e56dfa2e5f1d3427c5710cf8fb6b3faf91e8a233b7d62f4b2c86b00f5a4389bf28055c34d73cb025f1b5d0f2f2009b3b24e6bf4c0a069ce036b4d4aa4c94919ec11eca6f2bac63d497daf28c832f2b10ccaa78ba96257c04c7cc3e335be0d2d68ed5b9c410cbea959fff23a08bb3c052f1d794e640a547f44617ed6991559baec29ce3be9d91bac06d8490f3115e4890e50688d636cfce37bf61e784474955f03c84a659f762a03e1b5ea8e22e3b5eb027336288c91ed3244307f97558ed87bdcf99e063eca9f5773b4130832bb5a0f1ada52bdf768dd486f13950cde8fae501b433b8c77fdc7d07d84d33a7e2479132439b11446a4989182491013b167f04609987635a630f862f20e4b72d3bf9c9e59f4e81ed2dee091f9bda199444043d89a58e28681ae7b0168fb7dee5d8e367a4eef5c3be17e16b212b67ad5344f9ad1cc3b271d5885901105f1d981de47aba8245414f972c9ede6135fac72df5009305c87cae57b8b941bb38c81afb7a724f6233d509cdd537401ff6067ab05e43bb7eb488dd0c5f9294fa2ce1dd0b952ebeb60d6b868e5c8b3d8b2c017094cc2c4c848e96ae52b1304650a8503949a7f751d646687a072b09e31b7f0002b0e6321dfafb1b03ab4f54a0ea774c1c7f29b96296f7d7db048dbaf8f56c2dc3bfefd9522e46fae6b721069275dc016abeb0f6438c951d587f70afcdd2ebed9801d6d8a880ae291ae7162b3ffad0c9b10e954992618e8d6329f4c28f194048a9569a83ae61f4a36e514829abe082de36a13d0bc6ff799952f06f18ce06a855ee288658f8e03124a1612d2e01c2233e6dcefbc22e62111583419028e24ecc9f56fea1113daff04f7f9ea460b6a3d232f3c29934b024ee6ab0662dd7f47e41f8d7753f043177679009d0fa855d31d5c6f97cb0f98ed05563d4d712fc72dbbf018c199026bd7fd4c7caa23ab06fd5561e9df3b3e74d193f075134883d450e1ce683952a8acdd0bc002c9ac305af730aa2a09e64a6850fc2800154508748f6f264b5bdc4b5683523eb9678a6388b5679fd10d50e386a3724dfc11d76ef3e41e7c385b20816e670013b675fe220ede93184dfb63d3598cfc410a1d3f5e95f7302da3f09ec2cf7520b7ee14fd3ea39ba6a80dbd50c3b754c172082d4df2cb09d29d39c2f9c220d7b233260c2dcec209653ebfdd070278b3c7b42690bbab64626533479844df032c7f9747fe6511648133383bc92e86af6ccfe822c9d8cbd70428dfbc737d6c6be55b316d2cb4dedee843620dea058a6b9106d2b5e21c255b688a9731a3e666e064292d7496d30241cd1e9471f60945ab902c1145ef731092195c02d3c930446fd0595dd5f09fdc9f88dc627d20e1769ed01a5c5cdf1c20325958985630ee2101539889f9c60f6e58175d8cf604adc736b6590aa69e303e3b3a767ea91dcf15abcf8ddc322825dcd3fe6a2210d2da959ed2cd88b429259c54c5ce94435b5e84b2083ead7cbf128a6d3d6cf1f4958c35eb3ff39e6736f0accdf95d82e30bbae6e69cc470de7a3eb61928cae84925d15dfbe92988bb1e1729acf0c83ebedd4a918b8396586297f36eaa116f004431ecdd061b1456cae64a8d03f986becda471696dcfb705cd374c7289e0310b49d04339db637ff060741e40be486da145965095186ea350e9c8b5fc417e9c70742060084d027682628d9861262d9614035b071c1fab94230b30357e7acf3c8b3efc5d7b47bdb7046338ce1f2484a769dad111248e154a1bfa6b8872f44fb5c72f223f860f07aad6d76bf5d69c1308764e9007199f3403d6b5ca4a363b919b605de55c44e63fbf03f07aacfa2cb5ccd35b627a8772aa92d051615a7f948470f99e2aa6c6d5af313fc3c1c78719dc63b74cd1e1e2b83d7ead05f19a786234982f9034ef418958e9c182b6e8319b38a5024469a63fc5fcfddffdb94125083f09163922b0a41e87c5a175a2f68865da3e12f0e3f3bc5327d2026ac724ee29aaa2947b1e6828be2e41c0321b29177c5b7d6bcd439264118e97a6fd8d42e04a23872d7e4d99c848df23c9e1a573195fa6b1e309b8006334cc9abd80c79ffde35a65d2dd32e2b788ee93b6ede3fb0d83a2aef9ffbc69c960a2ef24301816ac0767e6b554df5b7cb594e8fffd1690e4da7ee7e76b158820eb39341e6caa6e36a4baa7796c57d5b2a9cb4548c528dadc4f98946f298d2acb143f9c95f38f574b8208184af43cd919578d06efaf6e828cd8ec1dc6298c4ca81a6e392b05d2301f9f77685abbfa9818981248254b362fd5b2d8b3424d60499b1017351ceaa792bb30065ab5d41eff45129384b109235695ebd7d44d7197a663ac5c344160882d63c6d1cc33a87c18dffb47c53a395a74f2e7872d85a035054fc5829f1f3a71d2433f4644c7909ea18e4e3a1652c414b7eed01261450ac9de244cde388660d5131d2acea7f514f596067f482364a3cb54a3f6691833774f9b4f8740f360ed395585edb4aef8c943f6442ce0924f984e58d5f574092c4ca47574eb58e5d1c7b213d26276ef5b08cb1ed62261bb96ac040c94633aceabd57473f45d3dee5079fba755ac8c24d36c86097189cb4300cdc1af7bcf2a72f21c0560672ea2a8015a38e076db8eb44ce869135bafc5441096faa9cc33a7edb7eac213384c9be8fdef966c6b674e391127a9a42fdacf1a269696a1be71fcd9b6174fa671f0a563d61263a3ea1a5bd07277185e7c12de9cf7032710473f298919048a5ed01c79f4cb2bd4d2d62780b6bdb98f768ea7ae4321d623a26d7be549883137de668a4b1a140b0639c02eda289a67bb6dfdab1180ad29565e79f869e198d807b1e92d524b8d2cc8b97e4d99fe9352df77597ec900267c1750d2e06b207b3c5ca808d3c4868fdddb2fa3f87ca18779e56dbd530e22c7763bcb7379135af813082e53a3bc1e3b5e4b02efefc90cacdeb72cfce3f1f3db3374082af85b86248fd54f691378f07418e46eb6e3b6dfc7d2788216fb16a1a617eb1cbbf5c2761f627189fe95e4e3b0bb04304d87da215a0ec075bc0391e4ad26ca73bc03fbbe629f5175b86e76640eb5eee224c78947cef2f168fefff794134595ef7cd73722faffc4c078ea4c09a1ca3347b0bea88444139da2f7e3659f40015baa85afdac2041e022a86a6ddca2ec968dfd273d69a1da7307df0fa0ffd2438629b259702279a320e1e1a5ae053e03656ba244bc49c8a14f1e7ad30f38c85e8a0baa0057b1e9ec9572f3ddc1de83b974e5a90192532b11addeaf643e9164ba495c900b65ac2ac505809ba9c8b94829c8a58f64220096eeea90fae9cc621c206b2eff95907fd83fb7907b33cd751e11589faf5dfa7544f68851a7c4aa6c889c371ba642bece22b6c47ec6d6ee1e869592bbd7f32e51d7eeb8148ac5f507a90b5c79994875686f6cf82b5d3faf2e25da8ce1f204827ce2ae9a8c2ff84b27732d06569b24e397b64d3535897a0a7f8ee4c260ccb0a8b830b6413206f3e2f5da09b73007a58ac606f0727d5ee92cb638ed76ec611d3e8ebeaadc2320456c00361c56b2650cf4d8cb26d4da26d955de61087db4cb68068759fb3908a31f8f6d85608479df94ed4dda01473c2032725bfb85abb77e221bc39d82d3fe6d6eb203ebf5e3abbd57562ad64e8f84475425dfe2251dd56f7dadff52a67be55b4cb1c39bdd9fa03505f23b8e276a0933d00e8544d8ac0313c92579b4f6373d3857c3dfecef8655bdb61ff2290ac108ded40d035a664f214b3e1cd745c11d904407b91a85fa4259e36928cde31871ad4eb697e8cd9dbb8b7895d940264aefb7f98c4eece16d2b1f9187cce4c5d003912d67875268f173e1b4d692e014ddc556954ad424e0fda69e1028d80abe67dee11b55321e018a5ccc0885579066f2f7ce4d98077788a584b2ac90d914b8a3b237ba17bbbceb94fa78fedd9171b7ea3d64ca1642a702ca5775724eda36274637309757d0297a28a4ff75ca2d218f13db76ba569c666c013044126bce3c057db58c68cb4b64e08273d0d2fac1080559465e93e853f813684ed03edfa027a273986d8b0951ffd7013941e4e14fcaecdd35d4dc4318c6d3cee456036b8b0f664a792b0afa26578961c52f5750094b13d6d9707d1d7571bd93c2ef2cb0da479c4b41a94a1cc101445e9fd1be0579cfbcddb97c870b18a40928ccbb111905a18fedeb5afbc7016cfe39fcca6d8bfd01eb4e31bb65c7c41fee901d1a3463a4c5a6d94c9c3d83595aca73b98e813e7abff9667c59a7105ceb296e03f6048dedc70d5f1e550decb63d42158786b73f1dbbc3532fe230053f2ee9e1eb95ade27547befd2fc6dec495c19bc52b14262b071afc68883e347a4dba233158aca50080242201813a6fe70cd543d2ed915140fa8cd6d1a0d5c1d4db71713734d8ddd7d38c2eda236d37f9b6c4f0912d1a383556fa12db8c3b7d1a66d7505b7b18d6d22f29cc241956174e9f044c7f8652781f2f18924a48d699bd0e124d6d0d8286ad7aef89a36b10c492fd67a6db79225ccaa03cee1830acf5fbe06cded3fec4e7b04107e716d6fd4c85805d8ca53bd0843692caa7b71b23a2bf96ee4c848fba708d8e261cac47109f72cb2e862dc16848513aea86b47990a3f69def451ccd9ce7ba0c6dd86b03bb003ef91a78e4e98c8bedce1401ed0717d14cc9979a7d25190e7423d39bd6e45d59c757a8205dd3906c30c28a258453b501a2f976cf32533b3d0e35b572cb49939376984f348ffd6121fc90e71729dfcec2675e957ac8858a322a65b33099196aed8d81b7066bb023b67f499b766c3efd837a90c98f5806af59027b8e405a1c13935d33e10ff55af0d303f3be3da79ac3acb3a4fb158cc398ce365b249647c6a1a1d511ee94b14de07d47b57038c001ff09289b10cff5aba8020ce242b07675bba647fbc77e1815e3b6377b2de52cfba330655c642c610b3f3c0f45f90510e2262dd917204001b3e70a89c8920ce61cb42e04e488c2590cee192298d735c85db3bd64f7d23de4ee8ba26179b93b91d79ac628e2f243359ffa95919f4df1fd3802ded2b9c7c1873792a50b860f11dd824a152dd736483d78180411066963621091386b0db3ea78b0d479b7ce2f2bef14f0a3e061b1ad487601ef1fb39e46357eddab78a4a0ab025f3cc95fe62906508b59602cbc6ba8f1f16e063bb7089896231db2193c3c9eaa7c3cca601d67f6c898408de107571268a1f001632825bfbee1fabab988f8ddf32e14e9c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb0}, @TCA_ROUTE4_POLICE={0xc68, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0xfffffc00, 0xf525, 0x2, 0x3, 0x6, 0x7, 0xffff, 0x5, 0x8, 0x4, 0x0, 0x2037, 0x3, 0x8, 0x5, 0x46, 0x0, 0x8001, 0x6, 0x6, 0xb, 0x8, 0xfff, 0x1a4, 0x6, 0x7761, 0x0, 0x80d, 0x81, 0x9, 0x3ff, 0x2, 0x4f7, 0x8363, 0x6, 0x9, 0x51, 0xfffffb84, 0x1, 0x9, 0x8, 0x5, 0x3, 0x101, 0x1, 0x40, 0x3, 0xff, 0x2d, 0x7, 0x2000, 0x2, 0x7f, 0x3, 0x8, 0x6, 0x9, 0x8, 0x4, 0xfff, 0x3, 0x7d, 0x7, 0x9, 0x4, 0x8, 0x80000, 0x1ff, 0x6, 0x3cb, 0x2, 0x9, 0x6, 0x5, 0x5, 0x8, 0xa9, 0xffff0001, 0xfffeffff, 0xf, 0x8001, 0x4, 0x7, 0x7, 0xf, 0x0, 0x9b58, 0x6c, 0x4, 0x574, 0x6, 0x9, 0x9, 0x2, 0x10, 0x6, 0x7, 0x9, 0xb2c5, 0x5, 0x1, 0x1, 0x6, 0x1d04, 0xfffffff8, 0x9c47, 0xfffffe6a, 0x4, 0x5, 0x5, 0x6, 0x0, 0x7f, 0x5, 0x0, 0x2, 0x8, 0x2, 0x4, 0x170, 0x9, 0xfffffffd, 0x3, 0x8, 0x3, 0x80, 0x80000001, 0x1, 0x81, 0x4, 0x79, 0x2, 0xff, 0xf, 0x7, 0x8, 0x8, 0x7fffffff, 0x401, 0x8, 0x180, 0x3, 0x1, 0xffffffff, 0xe2, 0x9, 0x10, 0x3, 0x9, 0x2, 0x9, 0x0, 0x1, 0x90, 0x5, 0x7f, 0xffff60d0, 0x40005, 0x9, 0x6, 0x9000000, 0x1c0, 0x7, 0x1, 0x8, 0x6, 0x6, 0x10, 0x7, 0x101, 0xfffffffd, 0x2, 0x2, 0x7, 0x2, 0x1, 0x7, 0x6c8640db, 0x2, 0x3, 0x9, 0x1000, 0x3, 0x3ff, 0x3, 0x4, 0x3, 0x1, 0x58d8, 0xfffffffe, 0x8, 0x9, 0x8b3, 0x473d, 0x3, 0x2, 0x9000000, 0x80000000, 0x1, 0xf3, 0xd, 0x100, 0xfffffffd, 0x96, 0x3, 0x8, 0x92, 0xa, 0x6, 0x1000, 0x2, 0x100, 0x8, 0x2, 0x3ff, 0x0, 0xeb3, 0xffffffff, 0x1, 0x10000000, 0x1, 0x38, 0x40, 0x1000, 0x4, 0x0, 0x4, 0x5, 0x10001, 0xd, 0x7f, 0xe, 0x0, 0x3, 0x3, 0xb2, 0x5d, 0x4, 0x6, 0x3, 0x8, 0x7, 0x40, 0x5, 0x3, 0x6bf68a18, 0x6, 0x8, 0xa878, 0xb2, 0x2, 0x2, 0xffffff62, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x192d}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x1, 0x0, 0x1, 0x0, 0x9, 0x3, 0x9, 0x8, 0x7f, 0x1, 0x0, 0x1, 0xfff, 0x2, 0x8, 0x2, 0x3, 0x8, 0xa7e4, 0x200, 0x5, 0x1, 0x7, 0x9, 0xb, 0x1, 0x29a4, 0x1, 0x3bdd821, 0x10, 0x400, 0x8029, 0xfffff4d4, 0x0, 0xfffffe00, 0x10000, 0xd29, 0x3, 0xaf12, 0x10001, 0xfffffffc, 0x9, 0x401, 0x6, 0x3, 0xd70, 0x401, 0x7, 0x0, 0x9, 0x7f, 0x81, 0x8, 0x5, 0x1, 0x4, 0x5, 0x5e, 0x7f, 0x3, 0x4, 0x7, 0x869, 0x6, 0xe0800, 0x47d, 0xd8ad, 0x3ff, 0x6, 0x2, 0x5, 0x9fa, 0x82ec, 0x1, 0x9, 0x31b2, 0x3ff, 0xc3d, 0x5, 0x6c, 0x8, 0x1, 0x7, 0x4, 0x2, 0x5, 0x5, 0x3, 0x6, 0x4, 0x7ff, 0x2, 0x80, 0x9, 0x401, 0x7, 0x6, 0x7ff, 0x0, 0x9fc, 0x6, 0x200, 0x9, 0x7d11, 0xdad, 0x5, 0xffffffff, 0x2, 0x3, 0x8, 0x4, 0x1, 0xe, 0x10001, 0x101, 0x80000001, 0x2, 0x8, 0x3, 0x400, 0x6b, 0xff, 0x8b3e, 0x0, 0x7173, 0x3, 0x21d, 0x2, 0x8, 0xc59, 0x7b, 0x5, 0x6, 0x1, 0xd9, 0x2, 0x2, 0x30458990, 0x7, 0x4, 0x245, 0x0, 0x8e9, 0xa77, 0x3, 0x4, 0x830c, 0x2, 0x8000, 0xd4d, 0x9, 0x1ff, 0xffff, 0x80000000, 0x8, 0x67, 0x3, 0x9, 0x32c, 0xa, 0x0, 0x2, 0x4, 0x26a, 0x1, 0x5, 0x5, 0xef, 0x200, 0x81, 0xfffffffc, 0x8, 0x5, 0x9, 0x3, 0x7, 0x4, 0x7, 0x7ff, 0x17, 0x7, 0xffff, 0x6, 0x5, 0xfffffffd, 0x4, 0x7, 0x4, 0x9, 0x4, 0xfffffff7, 0x1, 0x8001, 0x9, 0x3ff, 0x2, 0x4, 0x7, 0x7, 0x1, 0x7, 0x6, 0x80000001, 0x9, 0x0, 0x2, 0xe, 0x1, 0x4, 0x7, 0x7, 0x7, 0xff3, 0x58ce, 0x5, 0x4, 0x9, 0x3933, 0x1ff, 0x5, 0x6, 0x5, 0x70bd7397, 0x5, 0xfffffff5, 0x401, 0x5, 0x4, 0x6, 0x4, 0x7, 0x3, 0xc1, 0xb, 0xfffffff9, 0x4f01, 0x49e, 0x2920, 0x40, 0x200, 0x8, 0xdd, 0xe, 0x8000, 0x4, 0xffff, 0x3, 0x800, 0x100, 0x8, 0x6, 0x5, 0x3, 0x59e, 0xdf]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb90f}, @TCA_POLICE_RATE={0x404, 0x2, [0x800, 0x3, 0xffff8001, 0x3, 0x3, 0x6, 0x4, 0x0, 0x200, 0x4, 0xf, 0x9, 0x3, 0x7, 0x1, 0x100, 0x9, 0x3, 0x0, 0x12f4e77b, 0x4, 0x7, 0xf95, 0x4, 0xfff, 0x6, 0x1, 0x1, 0xfffffff7, 0x7, 0xfffffffb, 0x9, 0xfffff929, 0x3, 0x5, 0x8, 0x5, 0x1030, 0x5, 0x4, 0x4, 0x8001, 0x5b, 0x3, 0x3, 0x5, 0x5, 0x100, 0x40, 0x7, 0x1, 0x4, 0x4, 0x0, 0x8, 0x7, 0xce7, 0x9, 0x3c6, 0x9, 0x9, 0x6, 0x5cd, 0x2, 0xfffffffa, 0x3, 0xba24, 0x5, 0x2, 0x3, 0xa, 0xb31a, 0x2, 0x3, 0x0, 0x1, 0x8, 0x2, 0xff, 0x6, 0xa6, 0x7, 0x3, 0xfffeffff, 0x3577492d, 0x1, 0x3, 0x2, 0xd, 0xf28, 0xc8da, 0x1, 0x100, 0x4, 0x6, 0x5, 0x8001, 0x0, 0x0, 0xe1, 0x6, 0xec, 0x4, 0xe819, 0x881, 0x3, 0x4, 0xfff, 0xfff, 0x26c38daa, 0x0, 0x5, 0x0, 0xa, 0x101, 0x2, 0xffff7fff, 0x8, 0x9, 0x7, 0x5, 0x518, 0x1119551d, 0x6, 0x3, 0x1, 0x3, 0x2f, 0xb7, 0x5, 0x1000, 0x0, 0x0, 0x1, 0x6, 0x100, 0x1, 0x7, 0x2, 0x9, 0xab, 0x4, 0x9, 0x933, 0x3, 0x0, 0x0, 0xf, 0x2, 0x10, 0x8, 0x70b7, 0x6, 0x5, 0x18, 0x9399, 0x8, 0x9, 0x8a, 0xcd5a, 0x0, 0x95e4, 0x200, 0x1, 0x2, 0x6, 0x4, 0x4, 0x0, 0x0, 0x6, 0x4, 0x7, 0x2, 0x7ff, 0x6, 0xffffffff, 0x8001, 0xd0, 0xd, 0x2, 0x2, 0x5f, 0x6, 0x0, 0x6, 0xa63, 0x4, 0x7, 0x6, 0x8, 0x6, 0x4, 0x3, 0x0, 0x81, 0x4, 0x1b, 0x8000800, 0x4, 0x17c6, 0x9, 0x9, 0x3, 0x3c, 0x3, 0x3f8, 0x7fffffff, 0x1, 0xffffffff, 0x7, 0x1, 0x1, 0x6, 0x2, 0x9, 0x4, 0x0, 0x81, 0x2, 0x200, 0xc02, 0x9, 0x5, 0x3, 0x100, 0xfff, 0xc, 0x2, 0x7, 0xfffe0000, 0xff, 0x8, 0x5, 0x6, 0x4, 0x277, 0x0, 0x3, 0xe, 0x8e68, 0x4, 0x6, 0x5, 0x5, 0xfffffff9, 0x326, 0x6, 0x9, 0x4, 0x3, 0x8, 0x8, 0x9, 0x9, 0x37]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0xffffffffffffffff, 0x7, 0x542, 0x6, {0x10, 0x2, 0x6, 0xa5ba, 0x5, 0x1000}, {0x96, 0x0, 0x80, 0x8, 0x4}, 0x8001, 0xfff, 0x238a}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x9}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xef}]}}]}, 0x31d0}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r15, @ANYRES64=0x0], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0xc050) 0s ago: executing program 4 (id=389): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000009a40), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009ac0)={&(0x7f0000000300)={0x30, r2, 0x2, 0x70bd2d, 0x2ddfdbfb, {{}, {0x0, 0x4000}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4801}, 0x4008004) (async) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000022c0)='nilfs2\x00', 0x10003, &(0x7f0000000000)='norecovery') setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r3, 0x0, 0x9}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000003c0)={'veth0_virt_wifi\x00', @remote}) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r7 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) (async) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) (async) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=@deltclass={0x158, 0x29, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x5, 0x9}, {0xfff3, 0xc}, {0x7fe9, 0x10}}, [@c_atm={{0x8}, {0xc0, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x2}}, @TCA_ATM_HDR={0x2e, 0x3, "811d079e81cf8a4f73eff234523ae03a179adbc3e59ff9f659fc0afcaad99cb63385aa0991d9834f9749"}, @TCA_ATM_HDR={0x16, 0x3, "f201472f2edda4b8c157e588f5da26539727"}, @TCA_ATM_HDR={0x15, 0x3, "1d4b2158033ee9eda57a888f87e35ba928"}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_EXCESS={0x8, 0x4, {0x8, 0xa}}, @TCA_ATM_HDR={0x34, 0x3, "55cbb2c0375e89b95c1cc8499ee523e168f68175a833d9a6e8ca189eb55ad7ac71e2f90ccf7c60900011c4149286deb9"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x10, 0x9}}, @TCA_ATM_FD={0x8, 0x1, r1}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x9}}}, @c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x4, 0x3, 0x8, 0x7ff, 0xfffffff9}}]}}, @c_cbq={{0x8}, {0x4}}, @c_atm={{0x8}, {0x24, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xf, 0x4}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x8, 0x5}}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x1}}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x4008041) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f00000001c0)={0x79c, r6, 0x32, {0xb, 0x100004000}, 0x2}, 0x1) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000000001000600000003dcdf25022000000000000000200000080002000a010102951a7ed38c34d56ee678553b421ed9ffac364b0a063a6256e3e18d15d0e48054baa954"], 0x24}}, 0x4044000) (async) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r12, 0x0, 0xd4, &(0x7f0000000380)=0x4, 0x4) kernel console output (not intermixed with test programs): [ 53.222483][ T40] audit: type=1400 audit(1768451095.728:59): avc: denied { write } for pid=5911 comm="sh" path="pipe:[4004]" dev="pipefs" ino=4004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 53.232022][ T40] audit: type=1400 audit(1768451095.728:60): avc: denied { rlimitinh } for pid=5911 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.239958][ T40] audit: type=1400 audit(1768451095.728:61): avc: denied { siginh } for pid=5911 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 86.495751][ T9] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:29619' (ED25519) to the list of known hosts. [ 366.623599][ T40] audit: type=1400 audit(1768451409.148:62): avc: denied { name_bind } for pid=5981 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 366.652942][ T40] audit: type=1400 audit(1768451409.178:63): avc: denied { execute } for pid=5982 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 366.661867][ T40] audit: type=1400 audit(1768451409.178:64): avc: denied { execute_no_trans } for pid=5982 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 368.686218][ T40] audit: type=1400 audit(1768451411.208:65): avc: denied { mounton } for pid=5982 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 368.697076][ T40] audit: type=1400 audit(1768451411.218:66): avc: denied { mount } for pid=5982 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 368.699698][ T5982] cgroup: Unknown subsys name 'net' [ 368.709613][ T40] audit: type=1400 audit(1768451411.228:67): avc: denied { unmount } for pid=5982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 368.845492][ T5982] cgroup: Unknown subsys name 'cpuset' [ 368.850898][ T5982] cgroup: Unknown subsys name 'rlimit' [ 369.063849][ T40] audit: type=1400 audit(1768451411.588:68): avc: denied { setattr } for pid=5982 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 369.073545][ T40] audit: type=1400 audit(1768451411.588:69): avc: denied { create } for pid=5982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.081775][ T40] audit: type=1400 audit(1768451411.588:70): avc: denied { write } for pid=5982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.090019][ T40] audit: type=1400 audit(1768451411.588:71): avc: denied { read } for pid=5982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.121964][ T5986] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 370.003641][ T5982] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 373.333571][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 373.333581][ T40] audit: type=1400 audit(1768451415.858:82): avc: denied { execmem } for pid=5989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 373.520624][ T40] audit: type=1400 audit(1768451416.038:83): avc: denied { create } for pid=5993 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 373.542443][ T40] audit: type=1400 audit(1768451416.038:84): avc: denied { read write } for pid=5993 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 373.551546][ T6000] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 373.553607][ T40] audit: type=1400 audit(1768451416.038:85): avc: denied { open } for pid=5993 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 373.563839][ T5294] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.566488][ T5294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 373.569937][ T40] audit: type=1400 audit(1768451416.048:86): avc: denied { ioctl } for pid=5993 comm="syz-executor" path="socket:[1893]" dev="sockfs" ino=1893 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 373.572142][ T6002] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 373.575524][ T6005] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.575878][ T6005] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 373.581112][ T6005] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 373.584059][ T6002] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 373.586861][ T6005] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.589429][ T6002] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 373.592197][ T6005] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 373.596252][ T6002] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 373.598088][ T6003] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.598218][ T6005] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 373.598939][ T6005] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 373.599352][ T6005] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 373.599976][ T6005] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 373.604351][ T40] audit: type=1400 audit(1768451416.128:87): avc: denied { read } for pid=5993 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 373.609839][ T6003] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 373.613147][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 373.615613][ T6003] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 373.642475][ T40] audit: type=1400 audit(1768451416.128:88): avc: denied { open } for pid=5993 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 373.651396][ T40] audit: type=1400 audit(1768451416.128:89): avc: denied { mounton } for pid=5993 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 373.950266][ T40] audit: type=1400 audit(1768451416.468:90): avc: denied { module_request } for pid=6004 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 373.991027][ T6004] chnl_net:caif_netlink_parms(): no params data found [ 374.037140][ T5999] chnl_net:caif_netlink_parms(): no params data found [ 374.043091][ T5993] chnl_net:caif_netlink_parms(): no params data found [ 374.103470][ T5997] chnl_net:caif_netlink_parms(): no params data found [ 374.249769][ T6004] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.254034][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.257301][ T6004] bridge_slave_0: entered allmulticast mode [ 374.261186][ T6004] bridge_slave_0: entered promiscuous mode [ 374.316796][ T6004] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.319589][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.322632][ T6004] bridge_slave_1: entered allmulticast mode [ 374.325410][ T6004] bridge_slave_1: entered promiscuous mode [ 374.345723][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.348758][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.351962][ T5993] bridge_slave_0: entered allmulticast mode [ 374.355521][ T5993] bridge_slave_0: entered promiscuous mode [ 374.359633][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.362511][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.365060][ T5993] bridge_slave_1: entered allmulticast mode [ 374.367865][ T5993] bridge_slave_1: entered promiscuous mode [ 374.370661][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.373714][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.376837][ T5999] bridge_slave_0: entered allmulticast mode [ 374.381032][ T5999] bridge_slave_0: entered promiscuous mode [ 374.429230][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.432282][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.435652][ T5999] bridge_slave_1: entered allmulticast mode [ 374.439564][ T5999] bridge_slave_1: entered promiscuous mode [ 374.464880][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.467934][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.470952][ T5997] bridge_slave_0: entered allmulticast mode [ 374.475173][ T5997] bridge_slave_0: entered promiscuous mode [ 374.490805][ T6004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.497664][ T5999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.501723][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.504911][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.508168][ T5997] bridge_slave_1: entered allmulticast mode [ 374.512025][ T5997] bridge_slave_1: entered promiscuous mode [ 374.518328][ T5993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.524920][ T6004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.530114][ T5999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.550878][ T5993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.581760][ T5999] team0: Port device team_slave_0 added [ 374.591222][ T5999] team0: Port device team_slave_1 added [ 374.605646][ T5997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.616552][ T5997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.635550][ T6004] team0: Port device team_slave_0 added [ 374.638540][ T5993] team0: Port device team_slave_0 added [ 374.646855][ T5993] team0: Port device team_slave_1 added [ 374.660227][ T6004] team0: Port device team_slave_1 added [ 374.663314][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.665527][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.673686][ T5999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.686314][ T5997] team0: Port device team_slave_0 added [ 374.699766][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.702066][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.710183][ T5999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.721125][ T5997] team0: Port device team_slave_1 added [ 374.741715][ T6004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.744817][ T6004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.755510][ T6004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.759976][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.763135][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.773520][ T5993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.799639][ T6004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.802799][ T6004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.813646][ T6004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.818264][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.820828][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.829617][ T5993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.834039][ T5997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.837027][ T5997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.847837][ T5997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.859839][ T5997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.862830][ T5997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.873476][ T5997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.913736][ T5999] hsr_slave_0: entered promiscuous mode [ 374.917079][ T5999] hsr_slave_1: entered promiscuous mode [ 374.973638][ T5993] hsr_slave_0: entered promiscuous mode [ 374.976948][ T5993] hsr_slave_1: entered promiscuous mode [ 374.980117][ T5993] debugfs: 'hsr0' already exists in 'hsr' [ 374.982885][ T5993] Cannot create hsr debugfs directory [ 375.029171][ T6004] hsr_slave_0: entered promiscuous mode [ 375.032759][ T6004] hsr_slave_1: entered promiscuous mode [ 375.035597][ T6004] debugfs: 'hsr0' already exists in 'hsr' [ 375.037838][ T6004] Cannot create hsr debugfs directory [ 375.044408][ T5997] hsr_slave_0: entered promiscuous mode [ 375.047729][ T5997] hsr_slave_1: entered promiscuous mode [ 375.050786][ T5997] debugfs: 'hsr0' already exists in 'hsr' [ 375.053508][ T5997] Cannot create hsr debugfs directory [ 375.427588][ T5999] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 375.436700][ T5999] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 375.448920][ T5999] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 375.455541][ T5999] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 375.490735][ T5993] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 375.503178][ T5993] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 375.509954][ T5993] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 375.524935][ T5993] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 375.583620][ T5997] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 375.590029][ T5997] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 375.596431][ T5997] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 375.613250][ T6003] Bluetooth: hci0: command tx timeout [ 375.616238][ T5997] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 375.680844][ T6004] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 375.685984][ T6004] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 375.693454][ T6000] Bluetooth: hci3: command tx timeout [ 375.693468][ T6002] Bluetooth: hci2: command tx timeout [ 375.694131][ T6004] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 375.695608][ T6003] Bluetooth: hci1: command tx timeout [ 375.704912][ T6004] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 375.725573][ T5999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.761108][ T5999] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.772962][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.776629][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.786718][ T5993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.799531][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.802679][ T6036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.825130][ T5993] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.843729][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.846301][ T6056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.855361][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.857687][ T6056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.885868][ T5997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.932880][ T40] audit: type=1400 audit(1768451418.448:91): avc: denied { sys_module } for pid=5999 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 375.947399][ T5997] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.960848][ T6004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.971081][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.973957][ T4198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.989371][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.992118][ T4198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.009516][ T6004] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.030103][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.033337][ T4198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.055728][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.058824][ T6056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.084970][ T5999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.168410][ T5999] veth0_vlan: entered promiscuous mode [ 376.180567][ T5993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.195754][ T5999] veth1_vlan: entered promiscuous mode [ 376.261525][ T5999] veth0_macvtap: entered promiscuous mode [ 376.270615][ T5999] veth1_macvtap: entered promiscuous mode [ 376.286245][ T5993] veth0_vlan: entered promiscuous mode [ 376.290663][ T6004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.316060][ T5993] veth1_vlan: entered promiscuous mode [ 376.320055][ T5997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.326640][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.340899][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.351902][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.356011][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.364753][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.367701][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.397956][ T6004] veth0_vlan: entered promiscuous mode [ 376.409076][ T5993] veth0_macvtap: entered promiscuous mode [ 376.422444][ T5993] veth1_macvtap: entered promiscuous mode [ 376.455694][ T6004] veth1_vlan: entered promiscuous mode [ 376.466714][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.470076][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.481897][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.498013][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.501987][ T5997] veth0_vlan: entered promiscuous mode [ 376.512307][ T6036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.517226][ T6036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.520246][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.524048][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.534587][ T5997] veth1_vlan: entered promiscuous mode [ 376.543496][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.549831][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.555377][ T6004] veth0_macvtap: entered promiscuous mode [ 376.564904][ T5999] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 376.568697][ T6004] veth1_macvtap: entered promiscuous mode [ 376.606442][ T6004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.640159][ T6004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.652890][ T4198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.656212][ T4198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.661959][ T5997] veth0_macvtap: entered promiscuous mode [ 376.672825][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.676336][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.689491][ T5997] veth1_macvtap: entered promiscuous mode [ 376.696067][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.699223][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.731896][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.736636][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.742171][ T5997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.770227][ T5997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.789906][ T4198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.793320][ T4198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.803132][ T4198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.806305][ T4198] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.842517][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.845847][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.921363][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.924435][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.955812][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.959140][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.988159][ T6099] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 376.992018][ T6099] overlayfs: missing 'lowerdir' [ 376.995255][ T6036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.997983][ T6036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.018559][ T6099] 9p: Bad value for 'version' [ 377.078185][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 377.123534][ T6108] hsr_slave_1 (unregistering): left promiscuous mode [ 377.283365][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 377.298852][ T6119] geneve2: entered promiscuous mode [ 377.300559][ T6119] geneve2: entered allmulticast mode [ 377.467547][ T6121] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 377.470150][ T6121] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 377.473924][ T6121] vhci_hcd vhci_hcd.0: Device attached [ 377.480137][ T6122] vhci_hcd: connection closed [ 377.481687][ T6036] vhci_hcd vhci_hcd.0: stop threads [ 377.485709][ T6036] vhci_hcd vhci_hcd.0: release socket [ 377.487536][ T6036] vhci_hcd vhci_hcd.0: disconnect device [ 377.693370][ T6003] Bluetooth: hci0: command tx timeout [ 377.772740][ T6003] Bluetooth: hci1: command tx timeout [ 377.772842][ T6000] Bluetooth: hci2: command tx timeout [ 377.772862][ T6002] Bluetooth: hci3: command tx timeout [ 377.947418][ T6127] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 378.391005][ T40] kauditd_printk_skb: 69 callbacks suppressed [ 378.391021][ T40] audit: type=1400 audit(1768451420.908:161): avc: denied { bind } for pid=6150 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 378.402988][ T40] audit: type=1400 audit(1768451420.908:162): avc: denied { setopt } for pid=6150 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 378.410478][ T40] audit: type=1400 audit(1768451420.908:163): avc: denied { write } for pid=6150 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 378.463009][ T40] audit: type=1400 audit(1768451420.988:164): avc: denied { sqpoll } for pid=6152 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 378.469298][ T40] audit: type=1400 audit(1768451420.988:165): avc: denied { override_creds } for pid=6152 comm="iou-sqp-6154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 378.483653][ T40] audit: type=1400 audit(1768451421.008:166): avc: denied { write } for pid=6155 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 378.490001][ T40] audit: type=1400 audit(1768451421.008:167): avc: denied { read } for pid=6155 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 378.490908][ T6158] qnx6: unable to set blocksize [ 378.512930][ T6153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.633430][ T6163] FAULT_INJECTION: forcing a failure. [ 378.633430][ T6163] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 378.638857][ T6163] CPU: 1 UID: 0 PID: 6163 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(full) [ 378.638880][ T6163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 378.638890][ T6163] Call Trace: [ 378.638897][ T6163] [ 378.638904][ T6163] dump_stack_lvl+0x16c/0x1f0 [ 378.638932][ T6163] should_fail_ex+0x512/0x640 [ 378.638962][ T6163] _copy_from_user+0x2e/0xd0 [ 378.638988][ T6163] core_sys_select+0x2c8/0xc20 [ 378.639016][ T6163] ? __pfx_core_sys_select+0x10/0x10 [ 378.639061][ T6163] ? set_user_sigmask+0x21b/0x2b0 [ 378.639083][ T6163] ? __pfx_set_user_sigmask+0x10/0x10 [ 378.639110][ T6163] do_pselect.constprop.0+0x19f/0x1e0 [ 378.639133][ T6163] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 378.639165][ T6163] __x64_sys_pselect6+0x182/0x240 [ 378.639188][ T6163] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 378.639217][ T6163] do_syscall_64+0xcd/0xf80 [ 378.639241][ T6163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.639258][ T6163] RIP: 0033:0x7fad0cf8f7c9 [ 378.639272][ T6163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.639287][ T6163] RSP: 002b:00007fad0df05038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 378.639308][ T6163] RAX: ffffffffffffffda RBX: 00007fad0d1e5fa0 RCX: 00007fad0cf8f7c9 [ 378.639317][ T6163] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 378.639326][ T6163] RBP: 00007fad0df05090 R08: 0000000000000000 R09: 0000000000000000 [ 378.639336][ T6163] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 378.639345][ T6163] R13: 00007fad0d1e6038 R14: 00007fad0d1e5fa0 R15: 00007ffdcb903298 [ 378.639367][ T6163] [ 378.769528][ T40] audit: type=1400 audit(1768451421.288:168): avc: denied { create } for pid=6164 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 378.782430][ T40] audit: type=1400 audit(1768451421.288:169): avc: denied { create } for pid=6164 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 378.790372][ T40] audit: type=1400 audit(1768451421.298:170): avc: denied { write } for pid=6129 comm="syz.1.15" lport=38943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 378.815957][ T6167] ======================================================= [ 378.815957][ T6167] WARNING: The mand mount option has been deprecated and [ 378.815957][ T6167] and is ignored by this kernel. Remove the mand [ 378.815957][ T6167] option from the mount to silence this warning. [ 378.815957][ T6167] ======================================================= [ 378.828329][ T6167] new mount options do not match the existing superblock, will be ignored [ 378.833608][ T6167] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 379.107133][ T6175] Zero length message leads to an empty skb [ 379.110128][ T6175] netlink: 132 bytes leftover after parsing attributes in process `syz.3.30'. [ 379.214636][ T6182] team0: No ports can be present during mode change [ 379.289388][ T6184] FAULT_INJECTION: forcing a failure. [ 379.289388][ T6184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.295034][ T6184] CPU: 2 UID: 0 PID: 6184 Comm: syz.3.33 Not tainted syzkaller #0 PREEMPT(full) [ 379.295057][ T6184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 379.295067][ T6184] Call Trace: [ 379.295073][ T6184] [ 379.295079][ T6184] dump_stack_lvl+0x16c/0x1f0 [ 379.295106][ T6184] should_fail_ex+0x512/0x640 [ 379.295134][ T6184] _copy_from_user+0x2e/0xd0 [ 379.295158][ T6184] core_sys_select+0x35b/0xc20 [ 379.295184][ T6184] ? __pfx_core_sys_select+0x10/0x10 [ 379.295225][ T6184] ? set_user_sigmask+0x21b/0x2b0 [ 379.295245][ T6184] ? __pfx_set_user_sigmask+0x10/0x10 [ 379.295270][ T6184] do_pselect.constprop.0+0x19f/0x1e0 [ 379.295292][ T6184] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 379.295341][ T6184] __x64_sys_pselect6+0x182/0x240 [ 379.295365][ T6184] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 379.295393][ T6184] do_syscall_64+0xcd/0xf80 [ 379.295416][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.295430][ T6184] RIP: 0033:0x7f338658f7c9 [ 379.295443][ T6184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.295456][ T6184] RSP: 002b:00007f33873a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 379.295472][ T6184] RAX: ffffffffffffffda RBX: 00007f33867e5fa0 RCX: 00007f338658f7c9 [ 379.295482][ T6184] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 379.295491][ T6184] RBP: 00007f33873a7090 R08: 0000000000000000 R09: 0000000000000000 [ 379.295500][ T6184] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 379.295509][ T6184] R13: 00007f33867e6038 R14: 00007f33867e5fa0 R15: 00007ffc4f0ac298 [ 379.295531][ T6184] [ 379.296217][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802a56ac00: rx timeout, send abort [ 379.373286][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a56ac00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 379.428499][ T6190] qnx4: no qnx4 filesystem (no root dir). [ 379.434833][ T6190] qnx4: no qnx4 filesystem (no root dir). [ 379.737927][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 379.756915][ T6232] overlay: Unknown parameter 'mask' [ 379.772721][ T6002] Bluetooth: hci0: command tx timeout [ 379.853393][ T6002] Bluetooth: hci1: command tx timeout [ 379.862524][ T6002] Bluetooth: hci3: command tx timeout [ 380.053098][ T6245] trusted_key: syz.0.46 sent an empty control message without MSG_MORE. [ 380.255952][ T6255] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 380.387656][ T6264] netlink: 124 bytes leftover after parsing attributes in process `syz.1.52'. [ 380.390942][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 380.424891][ T6267] UHID_CREATE from different security context by process 62 (syz.0.53), this is not allowed. [ 380.610847][ T6235] FAULT_INJECTION: forcing a failure. [ 380.610847][ T6235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.617858][ T6235] CPU: 3 UID: 0 PID: 6235 Comm: syz.2.42 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.617876][ T6235] Tainted: [L]=SOFTLOCKUP [ 380.617880][ T6235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 380.617886][ T6235] Call Trace: [ 380.617890][ T6235] [ 380.617894][ T6235] dump_stack_lvl+0x16c/0x1f0 [ 380.617934][ T6235] should_fail_ex+0x512/0x640 [ 380.617966][ T6235] core_sys_select+0x94e/0xc20 [ 380.617984][ T6235] ? __pfx_core_sys_select+0x10/0x10 [ 380.618011][ T6235] ? set_user_sigmask+0x21b/0x2b0 [ 380.618025][ T6235] ? __pfx_set_user_sigmask+0x10/0x10 [ 380.618041][ T6235] do_pselect.constprop.0+0x19f/0x1e0 [ 380.618055][ T6235] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 380.618073][ T6235] __x64_sys_pselect6+0x182/0x240 [ 380.618087][ T6235] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 380.618104][ T6235] do_syscall_64+0xcd/0xf80 [ 380.618118][ T6235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.618129][ T6235] RIP: 0033:0x7f44d6d8f7c9 [ 380.618137][ T6235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.618146][ T6235] RSP: 002b:00007f44d7bc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 380.618156][ T6235] RAX: ffffffffffffffda RBX: 00007f44d6fe5fa0 RCX: 00007f44d6d8f7c9 [ 380.618163][ T6235] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 380.618168][ T6235] RBP: 00007f44d7bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 380.618174][ T6235] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 380.618179][ T6235] R13: 00007f44d6fe6038 R14: 00007f44d6fe5fa0 R15: 00007ffe19b24368 [ 380.618192][ T6235] [ 380.842625][ T6293] netlink: 'syz.1.58': attribute type 3 has an invalid length. [ 380.952459][ T6084] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 381.032161][ T6311] capability: warning: `syz.0.64' uses 32-bit capabilities (legacy support in use) [ 381.123199][ T6084] usb 7-1: Using ep0 maxpacket: 8 [ 381.131389][ T6084] usb 7-1: config 0 interface 0 has no altsetting 0 [ 381.134985][ T6084] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 381.136221][ T6318] netlink: 'syz.1.65': attribute type 21 has an invalid length. [ 381.138897][ T6084] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.142324][ T6084] usb 7-1: config 0 descriptor?? [ 381.204441][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 381.358204][ T6326] bond1: option arp_validate: invalid value (2048) [ 381.364207][ T6326] bond1 (unregistering): Released all slaves [ 381.560755][ T6084] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 381.759088][ T6331] openvswitch: netlink: IP tunnel TTL not specified. [ 381.763668][ T34] usb 7-1: USB disconnect, device number 2 [ 381.773679][ T6002] Bluetooth: hci2: command tx timeout [ 381.852850][ T6002] Bluetooth: hci0: command tx timeout [ 381.933008][ T6002] Bluetooth: hci3: command tx timeout [ 381.933043][ T6003] Bluetooth: hci1: command tx timeout [ 382.021886][ T6335] netlink: 187436 bytes leftover after parsing attributes in process `syz.0.71'. [ 382.155925][ T6337] netlink: 'syz.1.73': attribute type 5 has an invalid length. [ 382.282798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 382.289242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 382.339779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 382.346774][ T6349] Invalid option length (1048180) for dns_resolver key [ 382.414796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 382.423111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 382.442616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 382.472827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 382.647139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 382.662741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 382.662886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 382.953139][ T6356] bond1: Removing last ns target with arp_interval on [ 382.982162][ T6356] syz.2.78 uses obsolete (PF_INET,SOCK_PACKET) [ 383.015057][ T6361] x_tables: duplicate underflow at hook 1 [ 383.458358][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.460519][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.530988][ T40] kauditd_printk_skb: 176 callbacks suppressed [ 383.531014][ T40] audit: type=1326 audit(1768451426.048:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.0.82" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad0cf8f7c9 code=0x0 [ 383.544307][ T6086] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 383.554070][ T40] audit: type=1400 audit(1768451426.068:348): avc: denied { getopt } for pid=6366 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 383.562717][ T40] audit: type=1400 audit(1768451426.068:349): avc: denied { bind } for pid=6366 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 383.575341][ T6374] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.80'. [ 383.650384][ T40] audit: type=1400 audit(1768451426.168:351): avc: denied { ioctl } for pid=6376 comm="syz.0.83" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10177 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 383.674311][ T40] audit: type=1400 audit(1768451426.148:350): avc: denied { mount } for pid=6363 comm="syz.1.81" name="/" dev="ramfs" ino=9148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 383.705794][ T6086] usb 8-1: unable to get BOS descriptor or descriptor too short [ 383.710699][ T6086] usb 8-1: not running at top speed; connect to a high speed hub [ 383.715938][ T6086] usb 8-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.721159][ T6086] usb 8-1: config 1 interface 0 has no altsetting 0 [ 383.743317][ T6086] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 383.747201][ T6086] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.750718][ T6086] usb 8-1: Product: syz [ 383.762440][ T6086] usb 8-1: Manufacturer: syz [ 383.764575][ T6086] usb 8-1: SerialNumber: syz [ 383.948199][ T40] audit: type=1400 audit(1768451426.468:352): avc: denied { write } for pid=6382 comm="syz.1.84" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 383.987430][ T6086] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 384.007808][ T6086] usb 8-1: USB disconnect, device number 2 [ 384.231953][ T40] audit: type=1400 audit(1768451426.748:353): avc: denied { shutdown } for pid=6391 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 384.242309][ T40] audit: type=1400 audit(1768451426.758:354): avc: denied { connect } for pid=6391 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 384.251879][ T40] audit: type=1400 audit(1768451426.768:355): avc: denied { name_connect } for pid=6391 comm="syz.1.87" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 384.257318][ T6389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.86'. [ 384.265378][ T40] audit: type=1400 audit(1768451426.768:356): avc: denied { setopt } for pid=6391 comm="syz.1.87" laddr=::ffff:172.20.20.10 lport=47223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 384.286575][ T6398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.88'. [ 384.290949][ T6398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.88'. [ 384.294962][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 384.298761][ T6398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.88'. [ 384.303209][ T6398] 8021q: VLANs not supported on ipvlan0 [ 384.309281][ T6398] netlink: 32 bytes leftover after parsing attributes in process `syz.1.88'. [ 384.407807][ T6414] netlink: 700 bytes leftover after parsing attributes in process `syz.1.93'. [ 384.417030][ T6414] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 384.419883][ T6414] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 384.519830][ T6419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.95'. [ 384.646128][ T6430] NILFS (nbd1): device size too small [ 384.659295][ T6439] fuse: Bad value for 'fd' [ 384.719751][ T6444] fuse: Unknown parameter '00000000000000000005]:q98/v%l\s z' [ 384.765309][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 384.812889][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.892789][ T1025] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 385.011018][ T6468] tmpfs: Cannot disable swap on remount [ 385.076451][ T1025] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 385.079940][ T1025] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 385.084047][ T1025] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 385.093906][ T1025] usb 6-1: string descriptor 0 read error: -22 [ 385.096729][ T1025] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 385.099858][ T1025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.113933][ T6430] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 385.126716][ T6478] autofs: Unknown parameter '' [ 385.139522][ T6478] erspan1: entered promiscuous mode [ 385.232144][ T6485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.242981][ T6485] tipc: Failed to obtain node identity [ 385.245069][ T6485] tipc: Enabling of bearer rejected, failed to enable media [ 385.295296][ T6495] ucma_write: process 66 (syz.3.120) changed security contexts after opening file descriptor, this is not allowed. [ 385.323650][ T1025] cdc_ncm 6-1:1.0: bind() failure [ 385.335737][ T1025] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 385.339113][ T1025] cdc_ncm 6-1:1.1: bind() failure [ 385.347635][ T1025] usb 6-1: USB disconnect, device number 2 [ 385.666396][ T6531] ceph: Path missing in source [ 385.697955][ T6531] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 385.862937][ T6084] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 386.122492][ T6083] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 386.284533][ T6083] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 386.288998][ T6083] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 386.294040][ T6083] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 386.299150][ T6083] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 386.303485][ T6083] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 386.311126][ T6083] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 386.315122][ T6083] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.318749][ T6083] usb 7-1: Product: syz [ 386.320682][ T6083] usb 7-1: Manufacturer: syz [ 386.322894][ T6083] usb 7-1: SerialNumber: syz [ 386.327988][ T6083] usb 7-1: config 0 descriptor?? [ 386.336923][ T6083] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input5 [ 386.606955][ T24] usb 7-1: USB disconnect, device number 3 [ 387.172569][ T6590] hsr_slave_1 (unregistering): left promiscuous mode [ 387.338885][ T6614] 9p: Bad value for 'rfdno' [ 387.367188][ T6612] bond2: Unable to set down delay as MII monitoring is disabled [ 387.371845][ T6612] bond2 (unregistering): Released all slaves [ 387.396631][ T6617] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 387.437974][ T6620] process 'syz.3.154' launched '/dev/fd/5' with NULL argv: empty string added [ 387.524467][ T6629] warning: `syz.2.157' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 387.842468][ T6083] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 388.018899][ T6083] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 388.021918][ T6083] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.025119][ T6083] usb 8-1: Product: syz [ 388.026860][ T6083] usb 8-1: Manufacturer: syz [ 388.028716][ T6083] usb 8-1: SerialNumber: syz [ 388.037718][ T6083] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 388.067577][ T1025] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 388.628113][ T6647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.631566][ T6647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.950988][ T40] kauditd_printk_skb: 113 callbacks suppressed [ 388.951082][ T40] audit: type=1400 audit(1768451431.468:470): avc: denied { create } for pid=6652 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 388.961255][ T40] audit: type=1400 audit(1768451431.478:471): avc: denied { ioctl } for pid=6652 comm="syz.2.164" path="socket:[12665]" dev="sockfs" ino=12665 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 389.042879][ T40] audit: type=1400 audit(1768451431.558:472): avc: denied { mount } for pid=6656 comm="syz.2.167" name="/" dev="hugetlbfs" ino=13533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 389.066340][ T6657] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 389.133427][ T1025] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 389.143959][ T1025] ath9k_htc: Failed to initialize the device [ 389.162666][ T6662] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 389.176852][ T6661] option changes via remount are deprecated (pid=6660 comm=syz.2.169) [ 389.177318][ T40] audit: type=1400 audit(1768451431.698:473): avc: denied { remount } for pid=6660 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 389.192643][ T40] audit: type=1400 audit(1768451431.708:474): avc: denied { read append } for pid=6660 comm="syz.2.169" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 389.193459][ T1025] usb 8-1: ath9k_htc: USB layer deinitialized [ 389.201139][ T40] audit: type=1400 audit(1768451431.708:475): avc: denied { open } for pid=6660 comm="syz.2.169" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 389.215030][ T10] usb 8-1: USB disconnect, device number 3 [ 389.328297][ T6661] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 389.331061][ T6661] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 389.342705][ T6661] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 389.347347][ T6661] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 389.350292][ T6661] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 389.355791][ T6661] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 389.362802][ T6661] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 389.365085][ T6661] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 389.368626][ T6661] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 389.371489][ T6661] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 389.373662][ T6661] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 389.381264][ T6661] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 389.774769][ T6672] netlink: 'syz.3.172': attribute type 30 has an invalid length. [ 389.845989][ T6675] __nla_validate_parse: 107 callbacks suppressed [ 389.846008][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.173'. [ 389.985202][ T40] audit: type=1400 audit(1768451432.508:476): avc: denied { ioctl } for pid=6678 comm="syz.3.175" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 390.036946][ T40] audit: type=1400 audit(1768451432.558:477): avc: denied { unmount } for pid=5993 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 390.126127][ T6684] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2051 sclass=netlink_tcpdiag_socket pid=6684 comm=syz.3.177 [ 390.412520][ T6068] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 390.498997][ T40] audit: type=1400 audit(1768451433.018:478): avc: denied { setopt } for pid=6687 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 390.562491][ T6068] usb 8-1: Using ep0 maxpacket: 8 [ 390.566182][ T6068] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 390.568987][ T6068] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 390.572049][ T6068] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 390.575962][ T6068] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 390.579106][ T6068] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 390.583435][ T6068] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 390.586706][ T6068] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.650596][ T6695] netlink: 40 bytes leftover after parsing attributes in process `syz.0.181'. [ 390.700698][ T40] audit: type=1400 audit(1768451433.218:479): avc: denied { create } for pid=6696 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 390.796922][ T6068] usb 8-1: GET_CAPABILITIES returned 0 [ 390.799855][ T6068] usbtmc 8-1:16.0: can't read capabilities [ 390.860401][ T6703] fuse: Bad value for 'group_id' [ 390.862629][ T6703] fuse: Bad value for 'group_id' [ 390.872153][ T6703] evm: overlay not supported [ 390.928716][ T6002] Bluetooth: hci0: unexpected event for opcode 0x040e [ 391.050380][ T6686] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 391.052727][ T6068] usb 8-1: USB disconnect, device number 4 [ 391.055122][ T6709] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 391.384225][ T6002] Bluetooth: hci3: command 0x0c1a tx timeout [ 391.384288][ T6000] Bluetooth: hci2: command 0x0c1a tx timeout [ 391.384340][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 391.692535][ T6003] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 391.693297][ T6000] Bluetooth: hci4: command 0x1003 tx timeout [ 391.933874][ T6759] netlink: 172 bytes leftover after parsing attributes in process `syz.3.200'. [ 391.937984][ T6759] netlink: 44 bytes leftover after parsing attributes in process `syz.3.200'. [ 391.974801][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 391.987411][ T6761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.201'. [ 391.992830][ T6761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.201'. [ 392.032858][ T6766] Bluetooth: MGMT ver 1.23 [ 392.098086][ T6775] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 392.142534][ T6035] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 392.271125][ T6781] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 392.302481][ T6035] usb 6-1: Using ep0 maxpacket: 16 [ 392.306126][ T6035] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 392.309306][ T6035] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 392.314483][ T6035] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 392.318660][ T6035] usb 6-1: config 1 interface 0 has no altsetting 0 [ 392.322509][ T6035] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 392.325359][ T6035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.327908][ T6035] usb 6-1: Product: syz [ 392.329949][ T6035] usb 6-1: Manufacturer: syz [ 392.331435][ T6035] usb 6-1: SerialNumber: syz [ 392.376610][ T6786] kvm: kvm [6779]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xb7 [ 392.538663][ T6035] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 392.791209][ T6756] usblp0:failed reading printer status (-32) [ 392.796961][ T5966] usb 6-1: USB disconnect, device number 3 [ 392.804585][ T5966] usblp0: removed [ 392.957865][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 392.965286][ T6800] netlink: 36 bytes leftover after parsing attributes in process `syz.3.211'. [ 393.434427][ T6804] netlink: 36 bytes leftover after parsing attributes in process `syz.2.213'. [ 393.452628][ T6003] Bluetooth: hci1: command 0x0c1a tx timeout [ 393.452653][ T6000] Bluetooth: hci3: command 0x0c1a tx timeout [ 393.462498][ T6000] Bluetooth: hci2: command 0x0c1a tx timeout [ 393.690800][ T6818] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 393.844234][ T6825] loop7: detected capacity change from 0 to 16384 [ 393.913077][ T6825] loop7: detected capacity change from 16384 to 16383 [ 394.276679][ T6203] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.299961][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 394.299972][ T40] audit: type=1400 audit(1768451436.818:512): avc: denied { read } for pid=6827 comm="syz.1.223" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 394.312906][ T40] audit: type=1400 audit(1768451436.838:513): avc: denied { execute } for pid=6832 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 394.321841][ T40] audit: type=1400 audit(1768451436.838:514): avc: denied { execute_no_trans } for pid=6832 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 394.338537][ T40] audit: type=1400 audit(1768451436.858:515): avc: denied { bind } for pid=6833 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 394.370905][ T6203] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.380092][ T40] audit: type=1400 audit(1768451436.898:516): avc: denied { read write } for pid=6836 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 394.389885][ T6003] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 394.394166][ T40] audit: type=1400 audit(1768451436.898:517): avc: denied { open } for pid=6836 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 394.394488][ T6003] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 394.394941][ T6837] xt_l2tp: v2 tid > 0xffff: 2031748 [ 394.412339][ T6003] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.418109][ T6003] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.423774][ T6003] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.442441][ T40] audit: type=1400 audit(1768451436.958:518): avc: denied { mounton } for pid=6836 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 394.469693][ T6203] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.539849][ T6203] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.540723][ T6852] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 394.548313][ T40] audit: type=1400 audit(1768451437.068:519): avc: denied { ioctl } for pid=6851 comm="syz.1.232" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 394.550069][ T6852] qnx6: wrong signature (magic) in superblock #1. [ 394.558853][ T6852] qnx6: unable to read the first superblock [ 394.642596][ T6836] chnl_net:caif_netlink_parms(): no params data found [ 394.673985][ T40] audit: type=1400 audit(1768451437.198:520): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 394.778446][ T6836] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.781283][ T6836] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.783781][ T6836] bridge_slave_0: entered allmulticast mode [ 394.786492][ T6836] bridge_slave_0: entered promiscuous mode [ 394.798852][ T6203] bridge_slave_1: left allmulticast mode [ 394.801232][ T6203] bridge_slave_1: left promiscuous mode [ 394.804531][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.812223][ T6203] bridge_slave_0: left allmulticast mode [ 394.816322][ T6203] bridge_slave_0: left promiscuous mode [ 394.818824][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.092653][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 395.244625][ T10] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 395.248082][ T10] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 395.252039][ T10] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.259502][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 395.262933][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.266110][ T10] usb 6-1: Product: syz [ 395.267769][ T10] usb 6-1: Manufacturer: syz [ 395.269830][ T10] usb 6-1: SerialNumber: syz [ 395.275593][ T10] usblp0: Disabling reads from problematic bidirectional printer [ 395.282030][ T6203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.287799][ T6203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.292163][ T6203] bond0 (unregistering): Released all slaves [ 395.297178][ T6203] bond1 (unregistering): Released all slaves [ 395.306285][ T6836] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.308623][ T6836] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.311072][ T6836] bridge_slave_1: entered allmulticast mode [ 395.315102][ T6836] bridge_slave_1: entered promiscuous mode [ 395.352514][ T6836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.360512][ T6836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.405531][ T6836] team0: Port device team_slave_0 added [ 395.410511][ T6836] team0: Port device team_slave_1 added [ 395.450017][ T6836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.458404][ T6836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.468536][ T6836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.474767][ T6836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.477935][ T6836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.486228][ T6836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.490671][ T10] usblp 6-1:4.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 395.533004][ T6000] Bluetooth: hci2: command 0x0c1a tx timeout [ 395.535927][ T6000] Bluetooth: hci1: command 0x0c1a tx timeout [ 395.538107][ T6000] Bluetooth: hci3: command 0x0c1a tx timeout [ 395.572309][ T6836] hsr_slave_0: entered promiscuous mode [ 395.575198][ T6836] hsr_slave_1: entered promiscuous mode [ 395.577882][ T6836] debugfs: 'hsr0' already exists in 'hsr' [ 395.579789][ T6836] Cannot create hsr debugfs directory [ 395.586942][ T40] audit: type=1400 audit(1768451438.108:521): avc: denied { search } for pid=5645 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.693594][ T10] usb 6-1: USB disconnect, device number 4 [ 395.698417][ T10] usblp0: removed [ 395.751550][ T6203] hsr_slave_0: left promiscuous mode [ 395.762019][ T6203] hsr_slave_1: left promiscuous mode [ 395.764814][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.767469][ T6203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.776944][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.779681][ T6203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.802915][ T6203] veth0_macvtap: left promiscuous mode [ 395.804830][ T6203] veth1_vlan: left promiscuous mode [ 395.806587][ T6203] veth0_vlan: left promiscuous mode [ 396.098058][ T6858] openvswitch: netlink: Flow actions attr not present in new flow. [ 396.157273][ T6203] team0 (unregistering): Port device team_slave_1 removed [ 396.186199][ T6203] team0 (unregistering): Port device team_slave_0 removed [ 396.485608][ T6911] syzkaller0: entered promiscuous mode [ 396.487512][ T6911] syzkaller0: entered allmulticast mode [ 396.492716][ T6003] Bluetooth: hci0: command tx timeout [ 396.539198][ T6913] syzkaller0: entered promiscuous mode [ 396.541675][ T6913] syzkaller0: entered allmulticast mode [ 396.546208][ T6836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 396.620285][ T6836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 396.630794][ T6836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 396.636092][ T6836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 396.786503][ T6836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.822252][ T6836] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.828171][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.831117][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.839153][ T6205] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.842121][ T6205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.101544][ T6965] __nla_validate_parse: 3 callbacks suppressed [ 397.101555][ T6965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.252'. [ 397.177644][ T6836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.334794][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.256'. [ 397.414447][ T6836] veth0_vlan: entered promiscuous mode [ 397.422320][ T6836] veth1_vlan: entered promiscuous mode [ 397.451478][ T6836] veth0_macvtap: entered promiscuous mode [ 397.459112][ T6836] veth1_macvtap: entered promiscuous mode [ 397.471917][ T6836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.493648][ T6836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.506088][ T6996] input: syz1 as /devices/virtual/input/input6 [ 397.506941][ T6203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.512193][ T6203] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.516514][ T6203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.519538][ T6203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 syzkaller syzkaller login: [ 397.555094][ T6996] syzkaller0: entered promiscuous mode [ 397.558280][ T6996] syzkaller0: entered allmulticast mode [ 397.579449][ T6219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.583937][ T6219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.634120][ T6203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.637490][ T6203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.739332][ T7013] netlink: 'syz.1.263': attribute type 1 has an invalid length. [ 397.746880][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 397.762913][ T7013] bond1: entered promiscuous mode [ 397.765732][ T7013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.788305][ T7018] Bluetooth: MGMT ver 1.23 [ 397.866740][ T7022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.265'. [ 397.975784][ T7013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.978025][ T7013] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 397.981095][ T7013] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 397.987289][ T7013] bond1: (slave vxcan3): making interface the new active one [ 397.990388][ T7013] vxcan3: entered promiscuous mode [ 397.994615][ T7013] vxcan3: left promiscuous mode [ 398.061428][ T7036] can0: slcan on ttyS3. [ 398.065941][ T7038] netlink: 40 bytes leftover after parsing attributes in process `syz.4.271'. [ 398.122953][ T7036] can0 (unregistered): slcan off ttyS3. [ 398.353154][ T5966] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 398.386444][ T7056] netlink: 'syz.4.276': attribute type 58 has an invalid length. [ 398.482629][ T5966] usb 5-1: device descriptor read/64, error -71 [ 398.573029][ T6003] Bluetooth: hci0: command tx timeout [ 398.595451][ T7071] netlink: 'syz.4.283': attribute type 17 has an invalid length. [ 398.598028][ T7071] netlink: 5 bytes leftover after parsing attributes in process `syz.4.283'. [ 398.600884][ T7071] macvtap0: entered allmulticast mode [ 398.602839][ T7071] veth0_macvtap: entered allmulticast mode [ 398.605091][ T7071] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 398.676125][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.284'. [ 398.723417][ T5966] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 398.862603][ T5966] usb 5-1: device descriptor read/64, error -71 [ 398.920023][ T7091] openvswitch: netlink: Actions may not be safe on all matching packets [ 398.972799][ T5966] usb usb5-port1: attempt power cycle [ 399.027350][ T7098] netlink: 'syz.4.289': attribute type 15 has an invalid length. [ 399.030074][ T7098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.289'. [ 399.038260][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 399.067350][ T7098] veth3: entered promiscuous mode [ 399.069540][ T7098] veth3: entered allmulticast mode [ 399.138043][ T7099] veth3: entered promiscuous mode [ 399.139881][ T7099] veth3: entered allmulticast mode [ 399.322514][ T5966] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 399.334222][ T7107] can0: slcan on ttyS3. [ 399.353506][ T5966] usb 5-1: device descriptor read/8, error -71 [ 399.602524][ T5966] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 399.622944][ T5966] usb 5-1: device descriptor read/8, error -71 [ 399.700133][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 399.700149][ T40] audit: type=1400 audit(1768451442.218:565): avc: denied { connect } for pid=7120 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 399.733565][ T5966] usb usb5-port1: unable to enumerate USB device [ 399.961790][ T40] audit: type=1400 audit(1768451442.478:566): avc: denied { getopt } for pid=7122 comm="syz.4.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 400.593662][ T7134] netlink: 72 bytes leftover after parsing attributes in process `syz.4.298'. [ 400.638099][ T7136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.652708][ T6003] Bluetooth: hci0: command tx timeout [ 400.660382][ T7136] ip6gretap1: entered promiscuous mode [ 400.661133][ T7139] overlayfs: failed lookup in lower (newroot/19, name='bus', err=-40): overlapping layers [ 400.663733][ T7136] ip6gretap1: entered allmulticast mode [ 400.674970][ T7140] overlayfs: failed lookup in lower (newroot/19, name='file1', err=-40): overlapping layers [ 400.741253][ T40] audit: type=1400 audit(1768451443.258:567): avc: denied { setopt } for pid=7145 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 400.830389][ T1146] Bluetooth: hci4: Frame reassembly failed (-84) [ 400.833345][ T1146] Bluetooth: hci4: Frame reassembly failed (-84) [ 401.144774][ T7040] can0 (unregistered): slcan off ttyS3. [ 401.614724][ T7203] bond2: (slave team_slave_0): Device is not bonding slave [ 401.617730][ T7203] bond2: option active_slave: invalid value (team_slave_0) [ 401.623900][ T7203] bond2 (unregistering): Released all slaves [ 401.862654][ T5966] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 401.951485][ T40] audit: type=1400 audit(1768451444.468:568): avc: denied { mount } for pid=7207 comm="syz.3.315" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 402.023946][ T5966] usb 5-1: Using ep0 maxpacket: 8 [ 402.027451][ T5966] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 402.030185][ T5966] usb 5-1: config 179 has no interface number 0 [ 402.033069][ T5966] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 402.037751][ T5966] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 402.042454][ T5966] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 402.046294][ T5966] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 402.050822][ T5966] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 402.056238][ T5966] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 402.059175][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.067049][ T7198] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 402.090407][ T5343] udevd[5343]: worker [5994] terminated by signal 33 (Unknown signal 33) [ 402.093461][ T5343] udevd[5343]: worker [5994] failed while handling '/devices/platform/dummy_hcd.0/usb5/5-1' [ 402.187808][ T7214] netlink: 'syz.3.316': attribute type 7 has an invalid length. [ 402.190284][ T7214] __nla_validate_parse: 6 callbacks suppressed [ 402.190293][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'. [ 402.204133][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.316'. [ 402.207512][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.316'. [ 402.281739][ T5966] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input8 [ 402.477468][ C3] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 402.480967][ C3] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 402.484916][ T5966] usb 5-1: USB disconnect, device number 6 [ 402.685222][ T40] audit: type=1400 audit(1768451445.208:569): avc: denied { sqpoll } for pid=7215 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 402.739614][ T7219] syzkaller0: entered promiscuous mode [ 402.741490][ T7219] syzkaller0: entered allmulticast mode [ 402.742808][ T6000] Bluetooth: hci0: command tx timeout [ 402.892799][ T6003] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 402.919400][ T7225] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 402.932997][ T7225] cramfs: wrong magic [ 402.952533][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.322'. [ 403.207507][ T40] audit: type=1400 audit(1768451445.728:570): avc: denied { shutdown } for pid=7237 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 403.248784][ T7248] syzkaller0: entered promiscuous mode [ 403.251193][ T7248] syzkaller0: entered allmulticast mode [ 403.385178][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.329'. [ 403.522468][ T6084] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 403.610950][ T7260] netlink: 'syz.0.332': attribute type 39 has an invalid length. [ 403.616009][ T7260] veth0_macvtap: left promiscuous mode [ 403.666465][ T40] audit: type=1400 audit(1768451446.188:571): avc: denied { map } for pid=7259 comm="syz.0.332" path="socket:[16111]" dev="sockfs" ino=16111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 403.676439][ T6084] usb 9-1: Using ep0 maxpacket: 8 [ 403.677684][ T40] audit: type=1400 audit(1768451446.188:572): avc: denied { accept } for pid=7259 comm="syz.0.332" path="socket:[16111]" dev="sockfs" ino=16111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 403.680074][ T6084] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 403.695144][ T6084] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 403.699134][ T6084] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 403.712474][ T6084] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 403.716622][ T6084] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.716649][ T6084] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 403.716659][ T6084] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.751859][ T40] audit: type=1400 audit(1768451446.268:573): avc: denied { name_bind 0x1000000 } for pid=7262 comm="syz.0.333" path="socket:[17448]" dev="sockfs" ino=17448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 403.808007][ T7265] syzkaller0: entered promiscuous mode [ 403.809851][ T7265] syzkaller0: entered allmulticast mode [ 403.950250][ T6084] usb 9-1: GET_CAPABILITIES returned 0 [ 403.958397][ T6084] usbtmc 9-1:16.0: can't read capabilities [ 403.973004][ T6084] usb 9-1: USB disconnect, device number 2 [ 404.013600][ T7276] syzkaller0: entered promiscuous mode [ 404.013652][ T7276] syzkaller0: entered allmulticast mode [ 404.078207][ T7289] netlink: 'syz.4.341': attribute type 7 has an invalid length. [ 404.091844][ T7289] netlink: 'syz.4.341': attribute type 7 has an invalid length. [ 404.161261][ T7295] misc userio: Invalid payload size [ 404.190296][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 404.194227][ T40] audit: type=1400 audit(1768451446.718:574): avc: denied { ioctl } for pid=7297 comm="syz.1.344" path="socket:[16743]" dev="sockfs" ino=16743 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 404.394207][ T7308] syzkaller0: entered promiscuous mode [ 404.396202][ T7308] syzkaller0: entered allmulticast mode [ 404.434510][ T7310] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 404.692487][ T1025] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 404.874076][ T1025] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 404.877791][ T1025] usb 5-1: config 0 has no interface number 0 [ 404.881958][ T1025] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 404.886873][ T1025] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 404.891703][ T1025] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 404.895748][ T1025] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.904842][ T1025] usb 5-1: config 0 descriptor?? [ 404.907822][ T7310] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 404.916488][ T1025] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 405.119534][ T7310] ref_ctr_offset mismatch. inode: 0x235 offset: 0x7 ref_ctr_offset(old): 0x200000000980 ref_ctr_offset(new): 0x24 [ 405.123054][ T7311] ref_ctr_offset mismatch. inode: 0x235 offset: 0x7 ref_ctr_offset(old): 0x200000000980 ref_ctr_offset(new): 0x24 [ 405.139975][ T7334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7334 comm=syz.3.355 [ 405.158899][ C2] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 405.163232][ T34] usb 5-1: USB disconnect, device number 7 [ 405.187863][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 405.190948][ T7339] netlink: 36 bytes leftover after parsing attributes in process `syz.3.357'. [ 405.285977][ T7344] syzkaller0: entered promiscuous mode [ 405.287938][ T7344] syzkaller0: entered allmulticast mode [ 405.521112][ T7348] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 405.521174][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 405.521188][ T40] audit: type=1400 audit(1768451448.038:576): avc: denied { getattr } for pid=7347 comm="syz.3.361" name="/" dev="9p" ino=72876197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 405.554999][ T40] audit: type=1400 audit(1768451448.078:577): avc: denied { ioctl } for pid=7347 comm="syz.3.361" path="socket:[18435]" dev="sockfs" ino=18435 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 405.651428][ T7350] xt_l2tp: unknown flags: 51 [ 405.747228][ T40] audit: type=1400 audit(1768451448.268:578): avc: denied { read } for pid=7351 comm="syz.3.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 405.833698][ T40] audit: type=1400 audit(1768451448.358:579): avc: denied { bind } for pid=7360 comm="syz.3.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 405.938587][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.370'. [ 405.948451][ T7373] erspan1: entered promiscuous mode [ 405.973387][ T6084] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 405.985615][ T40] audit: type=1400 audit(1768451448.508:580): avc: denied { connect } for pid=7376 comm="syz.4.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 406.008839][ T7377] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 406.039067][ T7383] syzkaller0: entered promiscuous mode [ 406.041560][ T7383] syzkaller0: entered allmulticast mode [ 406.068819][ T6003] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 406.075147][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.376'. [ 406.132524][ T6084] usb 5-1: Using ep0 maxpacket: 16 [ 406.143967][ T6084] usb 5-1: config index 0 descriptor too short (expected 8192, got 68) [ 406.148387][ T6084] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.152676][ T6084] usb 5-1: config 0 has no interfaces? [ 406.157718][ T6084] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 406.161417][ T6084] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 406.165695][ T6084] usb 5-1: SerialNumber: syz [ 406.170731][ T6084] usb 5-1: config 0 descriptor?? [ 406.175180][ T7403] netlink: 'syz.4.380': attribute type 2 has an invalid length. [ 406.180109][ T40] audit: type=1400 audit(1768451448.698:581): avc: denied { create } for pid=7402 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 406.188376][ T40] audit: type=1400 audit(1768451448.698:582): avc: denied { bind } for pid=7402 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 406.391977][ T6084] usb 5-1: USB disconnect, device number 8 [ 406.425543][ T40] audit: type=1400 audit(1768451448.948:583): avc: denied { append } for pid=7422 comm="syz.4.385" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 406.444134][ T40] audit: type=1400 audit(1768451448.968:584): avc: denied { map } for pid=7422 comm="syz.4.385" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 406.454336][ T40] audit: type=1400 audit(1768451448.978:585): avc: denied { execute } for pid=7422 comm="syz.4.385" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 406.499012][ T7425] syzkaller0: entered promiscuous mode [ 406.501426][ T7425] syzkaller0: entered allmulticast mode [ 406.540052][ T7430] NILFS (nbd4): device size too small [ 406.552774][ T7425] FAULT_INJECTION: forcing a failure. [ 406.552774][ T7425] name failslab, interval 1, probability 0, space 0, times 1 [ 406.558161][ T7425] CPU: 0 UID: 0 PID: 7425 Comm: syz.0.386 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.558188][ T7425] Tainted: [L]=SOFTLOCKUP [ 406.558194][ T7425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 406.558204][ T7425] Call Trace: [ 406.558211][ T7425] [ 406.558218][ T7425] dump_stack_lvl+0x16c/0x1f0 [ 406.558414][ T7425] should_fail_ex+0x512/0x640 [ 406.558448][ T7425] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 406.558469][ T7425] should_failslab+0xc2/0x120 [ 406.558492][ T7425] kmem_cache_alloc_node_noprof+0x86/0x800 [ 406.558509][ T7425] ? __alloc_skb+0x156/0x410 [ 406.558531][ T7425] ? __alloc_skb+0x156/0x410 [ 406.558545][ T7425] __alloc_skb+0x156/0x410 [ 406.558559][ T7425] ? __alloc_skb+0x35d/0x410 [ 406.558573][ T7425] ? __pfx___alloc_skb+0x10/0x10 [ 406.558595][ T7425] ? process_measurement+0x4a6/0x22d0 [ 406.558625][ T7425] alloc_skb_with_frags+0xe0/0x860 [ 406.558646][ T7425] ? __might_fault+0xe3/0x190 [ 406.558661][ T7425] ? __might_fault+0x13b/0x190 [ 406.558682][ T7425] sock_alloc_send_pskb+0x7f9/0x980 [ 406.558710][ T7425] ? _copy_from_iter+0x161/0x16c0 [ 406.558742][ T7425] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 406.558769][ T7425] ? find_held_lock+0x2b/0x80 [ 406.558796][ T7425] ? dev_get_by_index+0x17c/0x380 [ 406.558822][ T7425] packet_sendmsg+0x1fe4/0x54a0 [ 406.558854][ T7425] ? sock_has_perm+0x258/0x2f0 [ 406.558875][ T7425] ? __pfx_sock_has_perm+0x10/0x10 [ 406.558893][ T7425] ? __pfx_packet_sendmsg+0x10/0x10 [ 406.558919][ T7425] ____sys_sendmsg+0xa5d/0xc30 [ 406.558942][ T7425] ? copy_msghdr_from_user+0x10a/0x160 [ 406.558960][ T7425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.558988][ T7425] ___sys_sendmsg+0x134/0x1d0 [ 406.559006][ T7425] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.559052][ T7425] __sys_sendmsg+0x16d/0x220 [ 406.559071][ T7425] ? __pfx___sys_sendmsg+0x10/0x10 [ 406.559099][ T7425] do_syscall_64+0xcd/0xf80 [ 406.559123][ T7425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.559161][ T7425] RIP: 0033:0x7fad0cf8f7c9 [ 406.559180][ T7425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.559194][ T7425] RSP: 002b:00007fad0df05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.559209][ T7425] RAX: ffffffffffffffda RBX: 00007fad0d1e5fa0 RCX: 00007fad0cf8f7c9 [ 406.559220][ T7425] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 406.559229][ T7425] RBP: 00007fad0df05090 R08: 0000000000000000 R09: 0000000000000000 [ 406.559237][ T7425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.559245][ T7425] R13: 00007fad0d1e6038 R14: 00007fad0d1e5fa0 R15: 00007ffdcb903298 [ 406.559268][ T7425] [ 406.662457][ T6035] ------------[ cut here ]------------ [ 406.666205][ T6035] [CRTC:37:crtc-0] vblank wait timed out [ 406.668061][ T6035] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1920 at drm_atomic_helper_wait_for_vblanks.part.0+0x760/0x8c0, CPU#2: kworker/2:2/6035 [ 406.672316][ T6035] Modules linked in: [ 406.675080][ T6035] CPU: 2 UID: 0 PID: 6035 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.678531][ T6035] Tainted: [L]=SOFTLOCKUP [ 406.679919][ T6035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 406.684054][ T6035] Workqueue: events drm_fb_helper_damage_work [ 406.686779][ T6035] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x766/0x8c0 [ 406.689810][ T6035] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 3f 01 00 00 48 8d 3d b0 47 3a 0b 8b b5 d8 00 00 00 <67> 48 0f b9 3a e9 ed fc ff ff e8 9b 6d 66 fc e9 81 fe ff ff e8 d1 [ 406.698514][ T6035] RSP: 0018:ffffc9000408f688 EFLAGS: 00010246 [ 406.701403][ T6035] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff11004dfc023 [ 406.705086][ T6035] RDX: ffff888101beb560 RSI: 0000000000000025 RDI: ffffffff9092d5d0 [ 406.707781][ T6035] RBP: ffff888026fe0040 R08: 0000000000000005 R09: 0000000000000000 [ 406.711520][ T6035] R10: 0000000000000000 R11: ffff888028f58b30 R12: dffffc0000000000 [ 406.715670][ T6035] R13: ffff88805fa7de00 R14: 0000000000000000 R15: 0000000000000000 [ 406.719281][ T6035] FS: 0000000000000000(0000) GS:ffff8880d6af4000(0000) knlGS:0000000000000000 [ 406.723439][ T6035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.726191][ T6035] CR2: 00007f3387363fb8 CR3: 000000002859d000 CR4: 0000000000352ef0 [ 406.729162][ T6035] Call Trace: [ 406.730378][ T6035] [ 406.731355][ T6035] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 406.733919][ T6035] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 406.735929][ T6035] ? lockdep_hardirqs_on+0x7c/0x110 [ 406.737630][ T6035] ? __pfx_autoremove_wake_function+0x10/0x10 [ 406.739567][ T6035] ? drm_atomic_helper_commit_hw_done+0x330/0x490 [ 406.741619][ T6035] drm_atomic_helper_commit_tail+0xff/0x130 [ 406.743698][ T6035] commit_tail+0x334/0x410 [ 406.745269][ T6035] drm_atomic_helper_commit+0x300/0x380 [ 406.747069][ T6035] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 406.749390][ T6035] drm_atomic_commit+0x234/0x300 [ 406.750970][ T6035] ? __pfx_drm_atomic_commit+0x10/0x10 [ 406.752937][ T6035] ? __pfx___drm_printfn_info+0x10/0x10 [ 406.755299][ T6035] ? modeset_lock+0x114/0x6d0 [ 406.757348][ T6035] drm_atomic_helper_dirtyfb+0x5fd/0x780 [ 406.759718][ T6035] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 406.763065][ T6035] ? do_raw_spin_lock+0x12c/0x2b0 [ 406.765016][ T6035] ? find_held_lock+0x2b/0x80 [ 406.766648][ T6035] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 406.768642][ T6035] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x310 [ 406.770578][ T6035] drm_fb_helper_damage_work+0x34a/0x650 [ 406.772484][ T6035] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 406.774894][ T6035] ? rcu_is_watching+0x12/0xc0 [ 406.776781][ T6035] process_one_work+0x9ba/0x1b20 [ 406.778452][ T6035] ? __pfx_fb_flashcursor+0x10/0x10 [ 406.780200][ T6035] ? __pfx_process_one_work+0x10/0x10 [ 406.781962][ T6035] ? assign_work+0x1a0/0x250 [ 406.783610][ T6035] worker_thread+0x6c8/0xf10 [ 406.785286][ T6035] ? __kthread_parkme+0x19e/0x250 [ 406.786960][ T6035] ? __pfx_worker_thread+0x10/0x10 [ 406.788754][ T6035] kthread+0x3c5/0x780 [ 406.790098][ T6035] ? __pfx_kthread+0x10/0x10 [ 406.791617][ T6035] ? rcu_is_watching+0x12/0xc0 [ 406.793501][ T6035] ? __pfx_kthread+0x10/0x10 [ 406.795259][ T6035] ret_from_fork+0x983/0xb10 [ 406.796808][ T6035] ? __pfx_ret_from_fork+0x10/0x10 [ 406.798669][ T6035] ? __switch_to+0x7af/0x10d0 [ 406.800368][ T6035] ? __pfx_kthread+0x10/0x10 [ 406.801847][ T6035] ret_from_fork_asm+0x1a/0x30 [ 406.803533][ T6035] [ 406.804537][ T6035] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 406.806837][ T6035] CPU: 2 UID: 0 PID: 6035 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.810364][ T6035] Tainted: [L]=SOFTLOCKUP [ 406.811731][ T6035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 406.815338][ T6035] Workqueue: events drm_fb_helper_damage_work [ 406.817305][ T6035] Call Trace: [ 406.818381][ T6035] [ 406.819339][ T6035] dump_stack_lvl+0x3d/0x1f0 [ 406.820866][ T6035] vpanic+0x640/0x6f0 [ 406.822158][ T6035] ? drm_atomic_helper_wait_for_vblanks.part.0+0x760/0x8c0 [ 406.824447][ T6035] panic+0xca/0xd0 [ 406.825641][ T6035] ? __pfx_panic+0x10/0x10 [ 406.827082][ T6035] ? check_panic_on_warn+0x1f/0xb0 [ 406.828696][ T6035] check_panic_on_warn+0xab/0xb0 [ 406.830248][ T6035] __warn+0x108/0x3c0 [ 406.831512][ T6035] __report_bug+0x2a0/0x520 [ 406.832984][ T6035] ? drm_atomic_helper_wait_for_vblanks.part.0+0x760/0x8c0 [ 406.835231][ T6035] ? __pfx___report_bug+0x10/0x10 [ 406.836866][ T6035] ? debug_object_free+0x295/0x550 [ 406.838474][ T6035] ? lockdep_hardirqs_on+0x7c/0x110 [ 406.840168][ T6035] report_bug_entry+0xe1/0x290 [ 406.841695][ T6035] ? drm_atomic_helper_wait_for_vblanks.part.0+0x766/0x8c0 [ 406.843953][ T6035] handle_bug+0x18a/0x260 [ 406.845331][ T6035] exc_invalid_op+0x17/0x50 [ 406.846785][ T6035] asm_exc_invalid_op+0x1a/0x20 [ 406.848328][ T6035] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x766/0x8c0 [ 406.850751][ T6035] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 3f 01 00 00 48 8d 3d b0 47 3a 0b 8b b5 d8 00 00 00 <67> 48 0f b9 3a e9 ed fc ff ff e8 9b 6d 66 fc e9 81 fe ff ff e8 d1 [ 406.856761][ T6035] RSP: 0018:ffffc9000408f688 EFLAGS: 00010246 [ 406.858656][ T6035] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff11004dfc023 [ 406.861463][ T6035] RDX: ffff888101beb560 RSI: 0000000000000025 RDI: ffffffff9092d5d0 [ 406.864202][ T6035] RBP: ffff888026fe0040 R08: 0000000000000005 R09: 0000000000000000 [ 406.866731][ T6035] R10: 0000000000000000 R11: ffff888028f58b30 R12: dffffc0000000000 [ 406.869212][ T6035] R13: ffff88805fa7de00 R14: 0000000000000000 R15: 0000000000000000 [ 406.871693][ T6035] ? drm_atomic_helper_wait_for_vblanks.part.0+0x70e/0x8c0 [ 406.874444][ T6035] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 406.876870][ T6035] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 406.878704][ T6035] ? lockdep_hardirqs_on+0x7c/0x110 [ 406.880376][ T6035] ? __pfx_autoremove_wake_function+0x10/0x10 [ 406.882413][ T6035] ? drm_atomic_helper_commit_hw_done+0x330/0x490 [ 406.884478][ T6035] drm_atomic_helper_commit_tail+0xff/0x130 [ 406.886354][ T6035] commit_tail+0x334/0x410 [ 406.887779][ T6035] drm_atomic_helper_commit+0x300/0x380 [ 406.889526][ T6035] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 406.891439][ T6035] drm_atomic_commit+0x234/0x300 [ 406.893048][ T6035] ? __pfx_drm_atomic_commit+0x10/0x10 [ 406.894757][ T6035] ? __pfx___drm_printfn_info+0x10/0x10 [ 406.896661][ T6035] ? modeset_lock+0x114/0x6d0 [ 406.898153][ T6035] drm_atomic_helper_dirtyfb+0x5fd/0x780 [ 406.900000][ T6035] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 406.902007][ T6035] ? do_raw_spin_lock+0x12c/0x2b0 [ 406.903703][ T6035] ? find_held_lock+0x2b/0x80 [ 406.905261][ T6035] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 406.907486][ T6035] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x310 [ 406.909571][ T6035] drm_fb_helper_damage_work+0x34a/0x650 [ 406.911356][ T6035] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 406.913928][ T6035] ? rcu_is_watching+0x12/0xc0 [ 406.915592][ T6035] process_one_work+0x9ba/0x1b20 [ 406.917554][ T6035] ? __pfx_fb_flashcursor+0x10/0x10 [ 406.919480][ T6035] ? __pfx_process_one_work+0x10/0x10 [ 406.921257][ T6035] ? assign_work+0x1a0/0x250 [ 406.922829][ T6035] worker_thread+0x6c8/0xf10 [ 406.924366][ T6035] ? __kthread_parkme+0x19e/0x250 [ 406.926012][ T6035] ? __pfx_worker_thread+0x10/0x10 [ 406.927644][ T6035] kthread+0x3c5/0x780 [ 406.928942][ T6035] ? __pfx_kthread+0x10/0x10 [ 406.930408][ T6035] ? rcu_is_watching+0x12/0xc0 [ 406.931895][ T6035] ? __pfx_kthread+0x10/0x10 [ 406.933404][ T6035] ret_from_fork+0x983/0xb10 [ 406.934884][ T6035] ? __pfx_ret_from_fork+0x10/0x10 [ 406.936564][ T6035] ? __switch_to+0x7af/0x10d0 [ 406.938314][ T6035] ? __pfx_kthread+0x10/0x10 [ 406.940095][ T6035] ret_from_fork_asm+0x1a/0x30 [ 406.941739][ T6035] [ 406.943677][ T6035] Kernel Offset: disabled [ 406.945072][ T6035] Rebooting in 86400 seconds..