last executing test programs: 2m11.549863421s ago: executing program 2 (id=216): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a00)={0x11, 0x9, &(0x7f00000027c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2c}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, @ldst={0x7cf2c4501174a0b7, 0x3, 0x3, 0x0, 0x9, 0x1, 0x1}, @jmp={0x5, 0x1, 0xc, 0x2, 0x1, 0xffffffffffffffa7, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000a80)='GPL\x00'}, 0x94) 2m11.383010178s ago: executing program 2 (id=218): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0x10001}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$FICLONE(r8, 0x40049409, r4) (async) ioctl$FICLONE(r8, 0x40049409, r4) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x24, 0x28, 0xd225f2d3b26ec141, 0x4001, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r3, 0x1}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r3, 0x1}, 0xc) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x4b, r3, 0xffffffff}, 0xc) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000640)={0x1, 0x1, 0x7, r3, 0x2}, 0xc) (async) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000640)={0x1, 0x1, 0x7, r3, 0x2}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@setlink={0xac, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x74, 0x1a, 0x0, 0x1, [@AF_INET6={0x70, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x40}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}]}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}, @IFLA_EVENT={0x8, 0x2c, 0xb0000000}]}, 0xac}, 0x1, 0x0, 0x0, 0x69851}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@setlink={0xac, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x74, 0x1a, 0x0, 0x1, [@AF_INET6={0x70, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x40}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}]}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}, @IFLA_EVENT={0x8, 0x2c, 0xb0000000}]}, 0xac}, 0x1, 0x0, 0x0, 0x69851}, 0x0) 2m11.219464296s ago: executing program 2 (id=223): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000001050000000000000000000700400920000d8008000200ac1e000114000380060001004e240000060001004e23000008000c4000000001100005800900010073797a7070747000000000ad121535805f9fa55699c440f57d90b6013334a6684085c21d748f4731233f840db422d4ef8140f1aa8a"], 0x5c}, 0x1, 0x0, 0x0, 0x189ec900f5555bbd}, 0x40010) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) r5 = socket$inet6(0xa, 0x2, 0x0) close(r5) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r5, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2b}}}], 0x18}, 0x1400c0c0) fchdir(r3) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x183098, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2m11.031781669s ago: executing program 2 (id=229): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') preadv(r0, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/30, 0x1e}, {&(0x7f0000001380)=""/64, 0x40}], 0x5, 0x7, 0x8000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000002, 0x8c012, r0, 0x343e2000) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r3, 0x0, 0x0}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000040)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/loop#\x00'}}, 0x2c) ioctl$LOOP_CHANGE_FD(r1, 0x4c05, r1) openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) (async) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') (async) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') (async) preadv(r0, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/30, 0x1e}, {&(0x7f0000001380)=""/64, 0x40}], 0x5, 0x7, 0x8000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000002, 0x8c012, r0, 0x343e2000) (async) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) (async) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r3, 0x0, 0x0}, 0x10) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) dup3(r4, 0xffffffffffffffff, 0x0) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000040)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/loop#\x00'}}, 0x2c) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c05, r1) (async) 2m10.97948209s ago: executing program 2 (id=231): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x48000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x22, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@remote, @in6=@remote}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000640)=0xe8) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xfe80, &(0x7f0000004a00)=[{&(0x7f0000000440)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4000000004c94215d121cd0c53e27eec317", 0xd8}], 0x1}, 0x800) 2m10.682376466s ago: executing program 2 (id=237): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000040)={0xe4da, 0xa, [{0x7}, {0x7, 0x1}, {0x4, 0x1}, {0xd, 0x1}, {0x6}, {0xf, 0x1}, {0x5}, {0x7}, {0x5}, {0x5}]}) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xffa, 0x100, 0x0, 0x0, 0x0}) 2m10.607562778s ago: executing program 32 (id=237): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000040)={0xe4da, 0xa, [{0x7}, {0x7, 0x1}, {0x4, 0x1}, {0xd, 0x1}, {0x6}, {0xf, 0x1}, {0x5}, {0x7}, {0x5}, {0x5}]}) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xffa, 0x100, 0x0, 0x0, 0x0}) 27.16598795s ago: executing program 3 (id=1310): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7000000018000500000000000000000002000000000200090000000006001500040000004c0016804800088044000180"], 0x70}}, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x0, &(0x7f0000000180)='pquota\x00\x00\xe4\xb7\xceZpB\xe2\x93T\xe4Y\x91\x05\xe1q\xb3\x83\x83\xfe\x14\xe2\xfe\x8b\xfe\xad{$\xbb\xdf\b\x0fN6\xe6N9\x9a\xe2w\x1cW\x9fl\x0fL\x9d\xafE\xeb\x9b;?\xe0\xb4\x8am\xe9\xecv\xe6\xd9\x88\xf2\v\x94D\xb4\xdf\xb3M\xf9\xdaJ\x1e2\x9b\x00\x97\xabe\xc2H.v\x06\xce\xb1\xdd1@2\x14\x85G\xef\xafu\xff\xcdQ\x1d\b!\f\xdbI\xc3\xbd{\xb9\xd8yn\xd0T\x91\xebq\xaauw\x87O\x9e\x15\xd4\xa2\x83\xa5)\t\x96]\xefg\x8e\x16\xa7\xf6\xf5\x9c\xac\xc5\xee\xfb\xff\xff\xff\xff\xff\xff\xff\xb7\x05\xfd\x8b\x93o9:\x00\x80\xe1^\xc8\xe9\x83') syz_emit_ethernet(0x1e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@can={0xc, {{0x3, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "7e24ca884bb15ce8"}}}}, 0x0) 27.161827608s ago: executing program 3 (id=1312): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x1, @ANYRES8, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRES16=r0], 0x50) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x4c}}, 0x40) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f1, &(0x7f0000000000)) r2 = socket$inet_icmp(0x2, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000220000000000ba578c8c70e514964bd1d2d86e34e2acf63960d3c9fb0deeb3902ec425672ee72121e3cf54c42a124da0c8c5312825e69eb6f2ebacf435cedb3d13520332bdf056f5cd02b068f520daa6673225cf20bc8d2a9852065b7aaca944cb0476d7ed29ac72162a27a0e5e3b2da355fac8e6383759eb79e4f2f303595ea9964944d338e8948f932783af3d801d06512dc0578fd4ed1f0b544a0c69ff4e96e2ff7f2f3a071e4c38ac086"]) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x338, 0x1000000, 0xffffffff, 0x280, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x84, 0x0, 0x28}, 0x0, 0x220, 0x280, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x338, 0x0, 0x80000000, 0x3, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0xf, 0x0, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x8, 0x7, 0x4, 0xb], 0x3, 0xdab9f66e79d89cfe}, {0x1, [0x0, 0x4, 0x2, 0x0, 0x5, 0x2], 0x1}}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6d12, 0x3ff, 0x6, 'netbios-ns\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x430) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x80, 0x8, 0x20, @private2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x8, 0x20, 0x800, 0x5}}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x20000, 0x4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='ns\x00') lseek(r3, 0xb, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000001", @ANYBLOB="0102"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8014) io_uring_enter(r4, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) getdents64(r3, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) openat$mice(0xffffffffffffff9c, &(0x7f0000000440), 0x90c40) r5 = socket(0x2b, 0x1, 0x1) connect$inet6(r5, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket(0x2a, 0x2, 0x0) 27.126300156s ago: executing program 0 (id=1313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000002c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c744240600000000c4c11167600066baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x76}], 0x1, 0x11, 0x0, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x8001, 0x9, 0xab}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000001780)=0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r5 = socket(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000280), &(0x7f00000004c0)=@udp6=r5, 0x2}, 0x20) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000880)=@vmx={0x2, 0x0, 0x2080, {0x1, 0x9000, {0xa6cb236d0e7ea362}, 0x1, 0xca}, {"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", "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"}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.193183409s ago: executing program 0 (id=1315): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2000, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000000)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000180)={0x0, r5}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f00000000c0)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r6, &(0x7f0000000180)=ANY=[], 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200002f, 0x10012, r6, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x28}}, 0x5c}}, 0x0) 26.19245073s ago: executing program 3 (id=1316): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000000000)="02629b422f168eca6f", 0x9) 26.190370007s ago: executing program 0 (id=1317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000006840)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x110, 0x700, 0x270, 0x278, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvlan0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500600601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344], 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2713, &(0x7f0000032740)=""/102385, &(0x7f0000000300)=0x18ff1) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f00000004c0)=0xb, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x228, 0x18c, 0x203, 0x0, 0x19030000, 0x368, 0x2e0, 0x2e0, 0x368, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x511e], 0x5df9b3d1, 0x2, 0x5, [@ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x3e}, @empty, @empty, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @empty, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}], 0x13}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) 26.189324306s ago: executing program 3 (id=1319): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x8, 0x4, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x21, 0x21, 0x1, 0xfffe0000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000480)=""/149, 0x95, 0x0, &(0x7f0000000540)=""/152, 0x98}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x1f, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query, @ringbuf_query, @ringbuf_query, @cb_func={0x18, 0x1, 0x4, 0x0, 0x5}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='syzkaller\x00', 0x5, 0xee, &(0x7f00000007c0)=""/238, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000900)=[{0x2, 0x4, 0xe, 0x8}, {0x3, 0x3, 0x2, 0x3}], 0x10, 0x8001}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pi6 \x00'}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1b, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe61, 0x0, 0x0, 0x0, 0xa81}, [@jmp={0x5, 0x1, 0xc, 0x2, 0x0, 0x0, 0x10}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xf3, &(0x7f0000000240)=""/243, 0x40f00, 0x2, '\x00', r0, @fallback, r1, 0x8, &(0x7f0000000400)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x10, 0x10000, 0xa}, 0x10, r2, r3, 0x6, &(0x7f0000000b40)=[r4, r5], &(0x7f0000000b80)=[{0x4, 0x2, 0x5, 0x1}, {0x1, 0x3, 0xd, 0xa}, {0x2, 0x4, 0xd, 0xa}, {0x3, 0x1, 0x3, 0x6}, {0x1, 0x1, 0x6, 0x1}, {0x4, 0x3, 0x2, 0x9}], 0x10, 0x4f}, 0x94) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) restart_syscall() restart_syscall() r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000002010101000000000000000002000006040002800c0019"], 0x24}, 0x1, 0x0, 0x0, 0x80000}, 0x4000) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x2, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0xf01711369d746b9d}, 0x2000800) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000cc0)={0x0, 0x0, '\x00', @raw_data=[0x6ff20000, 0x4, 0xa, 0xfc58, 0x5, 0x9, 0xd7ea, 0x2, 0x1c, 0x7, 0xfffffff4, 0x3ff, 0x400, 0x34, 0xa1de, 0xfffffff8, 0x2, 0x2, 0x4, 0x7, 0x2, 0xffffffc0, 0x8001, 0x8, 0x81, 0x1, 0x9, 0x6, 0x0, 0x9, 0x3, 0x7fffffff]}) setsockopt$sock_int(r9, 0x1, 0x22, &(0x7f0000000040)=0x2, 0x4) ptrace$pokeuser(0x6, r7, 0x388, 0x41d9fda7) 26.09919451s ago: executing program 0 (id=1320): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x26) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x1, 0xfe, 0x4e, 0x0, 0x88, 0x0, 0x4, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x4, 0x20, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)={0x3, 0x0, [{0x2ff, 0x0, 0xffffffff}, {0x326, 0x0, 0x80000001}, {0xaca, 0x0, 0xffffffffffffffff}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000002c0)="e0b88c0000f30f0110180f66f30f0966b88847928d66efbafc0c66edd1d50f20430f01d10f01c36766c7442400c70000006766c7442402000001006766c74424060000000064d37c02640f87e91266b80e0000000f23c80f21f86635040040000d58d818", 0x64}], 0x1, 0x0, 0x0, 0x0) (async) r3 = accept4$x25(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)=0x12, 0x800) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) ioctl$KVM_TDX_INIT_MEM_REGION(r1, 0xc008aeba, &(0x7f0000000400)={0x3, 0x0, &(0x7f00000003c0)={&(0x7f0000000000/0x4000)=nil, 0x54000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x8, 0x3e5, 0x9, 0x2, 0x8000, 0x6, 0x4, 0xc, 0x7fff, 0xa, 0xc, 0x5, 0xa50, 0x6750, 0x3ff, 0xffffffff], 0xa000}) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) (async, rerun: 32) umount2(&(0x7f0000000000)='./file0\x00', 0x4) (async, rerun: 32) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) 26.028068071s ago: executing program 3 (id=1321): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) r1 = socket$kcm(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x46, &(0x7f0000000100)=0x1, 0x4) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000000b0601010000000000000001000006040007800900020073797a32000000000500010007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x4000) sendmmsg$inet(r0, &(0x7f0000002280)=[{{&(0x7f0000000100)={0x2, 0x4c23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b6cac1e00017f000001000000000011000000000000"], 0x38}}, {{&(0x7f0000000440)={0x2, 0x4e23, @private=0xa0100fe}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000480)="5a6db14ae4fe128a44f29063c30676c7376e25a656cfd9", 0x17}], 0x1}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000580)="33388293acbc80ce732218357bb93621f4cfbeed5274bc313823342b71a1a8a1b59357c2312dc5f0db8d2f11dc8ce40083830cb133f4a2ec93edffc5eeb83a8604b7eca38fcb76ea878863231251f9efaa0009936cb09313141da5753451cd796d5fa7103aff3b18df7a93bd44640f7cefef969abfe5b577c415da5f952bb157ea12449bbc819612e488b9e086ec65e52d7ba70f", 0x94}, {&(0x7f0000000640)="7aacb2a2c5988fc6a254b2b2f4bf28abe050771999d1b4f5bdd84b5f347393e18e0afce0943a8b4c963f973bbd8feea9", 0x30}, {&(0x7f0000001100)="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", 0xfe4}], 0x3, &(0x7f0000002180)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7ce7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x44, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x92, [@multicast1, @multicast2, @multicast2]}, @cipso={0x86, 0x23, 0x5, [{0x5, 0xb, "1d1aa51c0f382a6f3d"}, {0x2, 0xc, "99fd761d867a91b9d331"}, {0x6, 0x3, "ee"}, {0xd, 0x3, "c5"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0xe0}}], 0x3, 0x4000000) 25.350622873s ago: executing program 3 (id=1329): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3a7f, 0x80, 0x0, 0x10f}, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 25.308607798s ago: executing program 33 (id=1329): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3a7f, 0x80, 0x0, 0x10f}, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 24.670311195s ago: executing program 0 (id=1336): r0 = socket(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}}, [0x5d, 0x8, 0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0x0, 0x7, 0x9, 0x6, 0x4, 0x9, 0x8000000000000000, 0x0, 0x100000001]}, &(0x7f00000003c0)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000400)={0x401, 0x9, 0x4, 0x800, r2}, 0x10) (async) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x101080, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000480)={0x3f, 0x2, 0x2, 0x3}, 0x10) (async) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000000000001000000080009001d000000", 0x24) 23.380412571s ago: executing program 0 (id=1344): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x26, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x21, 0x85, 0x0, 0x81, 0x4c, 0x2}, 0xe) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x4, 0x6, 0xfffa}, 0x38, [0xb, 0xc95a, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x7, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x100, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x80000001, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0xd, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x7, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x4, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c8, 0x2000af, 0x3, 0x8, 0x7ff, 0x123, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x42c2, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x8000, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x4b2a, 0x10000018, 0xfffffffe, 0x80000003, 0x6, 0x4, 0x0, 0x9, 0xfffff000, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0x0, 0x5, 0x45, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a00)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x2, 0x40402) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r4, &(0x7f0000000300), 0x6) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000240)={0x1, 0x4, 0x8, &(0x7f0000000080)={0xe, "c955000000d5ac81e630a59afe000000000200"}}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) (async) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000350000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4318123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) (async) syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x26, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x21, 0x85, 0x0, 0x81, 0x4c, 0x2}, 0xe) (async) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x4, 0x6, 0xfffa}, 0x38, [0xb, 0xc95a, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x7, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x100, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x80000001, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0xd, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x7, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x4, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c8, 0x2000af, 0x3, 0x8, 0x7ff, 0x123, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x42c2, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x8000, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x4b2a, 0x10000018, 0xfffffffe, 0x80000003, 0x6, 0x4, 0x0, 0x9, 0xfffff000, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0x0, 0x5, 0x45, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) syz_usb_control_io$uac3(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a00)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$I2C(&(0x7f00000000c0), 0x2, 0x40402) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) (async) write$binfmt_misc(r4, &(0x7f0000000300), 0x6) (async) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000240)={0x1, 0x4, 0x8, &(0x7f0000000080)={0xe, "c955000000d5ac81e630a59afe000000000200"}}) (async) 23.221980616s ago: executing program 34 (id=1344): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x26, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x21, 0x85, 0x0, 0x81, 0x4c, 0x2}, 0xe) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x4, 0x6, 0xfffa}, 0x38, [0xb, 0xc95a, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x7, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x100, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x80000001, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0xd, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x7, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x4, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c8, 0x2000af, 0x3, 0x8, 0x7ff, 0x123, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x42c2, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x8000, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x4b2a, 0x10000018, 0xfffffffe, 0x80000003, 0x6, 0x4, 0x0, 0x9, 0xfffff000, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0x0, 0x5, 0x45, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a00)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x2, 0x40402) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r4, &(0x7f0000000300), 0x6) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000240)={0x1, 0x4, 0x8, &(0x7f0000000080)={0xe, "c955000000d5ac81e630a59afe000000000200"}}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) (async) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000350000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4318123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) (async) syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x26, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x21, 0x85, 0x0, 0x81, 0x4c, 0x2}, 0xe) (async) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x4, 0x6, 0xfffa}, 0x38, [0xb, 0xc95a, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x7, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x100, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x80000001, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0xd, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x7, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x4, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c8, 0x2000af, 0x3, 0x8, 0x7ff, 0x123, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x42c2, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x8000, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x4b2a, 0x10000018, 0xfffffffe, 0x80000003, 0x6, 0x4, 0x0, 0x9, 0xfffff000, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0x0, 0x5, 0x45, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) syz_usb_control_io$uac3(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a00)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$I2C(&(0x7f00000000c0), 0x2, 0x40402) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) (async) write$binfmt_misc(r4, &(0x7f0000000300), 0x6) (async) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000240)={0x1, 0x4, 0x8, &(0x7f0000000080)={0xe, "c955000000d5ac81e630a59afe000000000200"}}) (async) 10.459922674s ago: executing program 4 (id=1513): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, &(0x7f00000001c0)={0x9, 0x0, [{0x0, 0x2, 0x4, 0x3, 0xffff, 0x5, 0x6}, {0x80000001, 0x7f, 0x6, 0x7, 0x2, 0x3, 0xd195}, {0x80000008, 0x5, 0x6, 0x4, 0xb347, 0x6, 0x6}, {0x80000001, 0xa, 0x2, 0x8, 0x14, 0x401, 0x5}, {0xc0000000, 0x7fffffff, 0x2, 0x4, 0x3, 0x3, 0x7}, {0x40000001, 0x2, 0x1, 0xfffffffe, 0x6, 0x6, 0x5}, {0x80000008, 0x5d, 0x5, 0x0, 0xd27e, 0x5, 0x10001}, {0x1, 0x40, 0x1, 0x81, 0x0, 0x4, 0xfffffff9}, {0xc0000000, 0x7, 0x1, 0x2, 0x719, 0x5}]}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r0, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x8c0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="f5af25bd7000000000000e00000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20048080}, 0x8000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xc200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04ef25bd7000fedbdf250700000008003a00ff0700000500290000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x133a, 0x4) write(r2, &(0x7f0000000540)="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", 0x191) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r6, &(0x7f00000003c0)={0x2, 0x4e21, @broadcast}, 0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x0]}, &(0x7f0000000080)=0x8) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x85, &(0x7f00000000c0)={r8, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x833, 0x0, 0x4}, &(0x7f00000001c0)=0x9c) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 9.616768757s ago: executing program 4 (id=1524): prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4008850) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) 9.428494409s ago: executing program 4 (id=1530): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe0, 0x42, 0x800, 0x70bd25, 0x25dfdbfc, {0x13}, [@generic="b22b449b38d5bc4ba5309ddfc173a84775a8482f1a52c144628223d7dcf8ac9e040b21554602caeaf124a064e577ef93d99aab84cfc5035f781c2e286ded8964311c3e5f7f594836272fbb096e0001df55413192c43692d5b0a259613f1970b75a95cc0872a7399ea39bee5503697fcd716e67805b4d9f525e65612406d401692533454fa6b7e9d9a0333dfcbc230d40f996614cbb6d96a5b1bbad183f681867bdbbb472e78540274a86ae014e648f1c51630850b391e8534e634036e82f0c573fb6d62da607c3c122eb862e"]}, 0xe0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gre0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x7, 0x22, 0x7, 0x2, {{0x34, 0x4, 0x2, 0x4, 0xd0, 0x64, 0x0, 0x80, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast2, {[@lsrr={0x83, 0xf, 0x4e, [@local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x54, 0x5f, 0x3, 0x7, [{@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x7653}, {@loopback, 0x8f}, {@broadcast}, {@local}, {@multicast1, 0x5}, {@remote, 0xb5}, {@broadcast, 0xd399}, {@loopback, 0x7fffffff}, {@empty, 0xb}]}, @noop, @timestamp_prespec={0x44, 0x24, 0x80, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@local, 0x7}, {@loopback, 0x2}]}, @timestamp={0x44, 0x10, 0x23, 0x0, 0x3, [0x4, 0x8, 0x400]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0x44, [@multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1]}, @timestamp={0x44, 0xc, 0xd9, 0x0, 0xc, [0x4b, 0x7ff]}]}}}}}) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x7}}}}}}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x127}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) (async) syz_emit_ethernet(0x1f, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b0003424203"], 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) (async, rerun: 64) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) lseek(r3, 0x1, 0x3) getdents(r1, &(0x7f00000001c0)=""/240, 0xf0) (async) getdents64(r1, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0xc7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000400000400000000000000000013379747770861feb3f015701144a1f4a982105d0054e87f9666906cd31866bcf9ee2bc7b1646213ef57ffad162f781599f8928e167e8bdc50eeccf2ae342194bbfc810608be5fd89c6a5ca73397456378325b9dda52324d208070ed8dcba99ce57269176032cf3b761f7bac3091fa3825b0740f39b2ddde4a659f0b54f940a24efa902ae308109cf815e6d58505e1d3db4ac07c60a1ea128c0d40a591b59569435e7b46d65a6a0c740268c866a138eb7aa7e19970a5eb64b197dc24cc397cbf31ad2972c3634bc5", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3ce0}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x519f, 0x0, 0x0, 0x70e26045991ed765, 0x22, '\x00', r0, 0x0, r1, 0x8, &(0x7f0000000300)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x10, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000480)=[r5, r6], &(0x7f00000004c0)=[{0x5, 0x4, 0x4, 0xa}, {0x2, 0x4, 0xd, 0x2}], 0x10, 0x8f7}, 0x94) (async) signalfd4(r6, &(0x7f0000000080)={[0x8000000000000001]}, 0x8, 0x800) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) 9.347904678s ago: executing program 4 (id=1531): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x0, 0x27, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @call={0x85, 0x0, 0x0, 0x49}, @alu={0x7, 0x1, 0xb, 0x6, 0x2, 0x10, 0xfffffffffffffffa}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001140)='syzkaller\x00', 0x9, 0x9d, &(0x7f0000001180)=""/157, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001280)={0x1, 0x0, 0x9, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000012c0), &(0x7f0000001300), 0x10, 0x7}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002580)=@generic={&(0x7f0000001580)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@bloom_filter={0x1e, 0x9a2a, 0x8e9, 0x4, 0x9006, r1, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001480)={r0, r2}, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000b0601020000000000000000010000030900020073797a31000000000500010007000000100007800c000180"], 0x38}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 9.346267268s ago: executing program 4 (id=1532): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x200000000000028a, &(0x7f0000000100)}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) open(&(0x7f00000002c0)='./file0\x00', 0x101000, 0x42) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x9, 0xfffffffffffffffb, 0x2, 0x40000000002, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0x81000000, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000000be, 0x8d], 0xeeee8000, 0x2010d3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200800001000010400000000000000000000e0cf31cc0974", @ANYRES32=0x0, @ANYBLOB="004000008e800000"], 0x20}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc841}, 0x8004) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000002c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c744240600000000c4c11167600066baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x76}], 0x1, 0x11, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCGNAME(r7, 0x80404806, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) 1.608468032s ago: executing program 1 (id=1544): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) write$sndseq(r0, &(0x7f00000000c0)=[{0x84, 0x74, 0x0, 0x0, @time={0xe, 0x425}, {0xfd}, {0x7}, @raw32={[0x2, 0x6, 0x7fffffe]}}, {0x2, 0x0, 0x5, 0x83, @time={0xed, 0x1}, {0xfd}, {0x3}, @note={0x81, 0x0, 0xfc}}], 0x38) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05033900d3fc142e0006478886dd", 0x50, 0x4, &(0x7f0000000000)={0x11, 0x86dd, r3, 0x1, 0x10, 0x6, @multicast}, 0x14) (async) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000000)={0x77359400}, 0x10) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) 1.60508114s ago: executing program 1 (id=1547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x6, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r3], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r6, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x1) 1.52659369s ago: executing program 4 (id=1549): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) (async) syz_usb_connect$cdc_ncm(0x3, 0x6f, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x0) (async) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 1.390147042s ago: executing program 5 (id=1553): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x200001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0xff, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000180)={r1, &(0x7f0000000040)='-*\\#:(/-\x00', 0x40000, &(0x7f0000000080)={@align=0x8, {0x1, 0x4, 0x6, 0x9a13}}, 0x4, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xa}) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/config\x00') pread64(r2, &(0x7f0000000780)=""/185, 0xb9, 0x3c) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, 0x0) 1.310609848s ago: executing program 5 (id=1554): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x5) recvmsg$inet_nvme(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x120) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, 0x0}, 0x30004040) close(r0) fcntl$dupfd(r0, 0x406, r0) 1.30770806s ago: executing program 1 (id=1555): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x8}]}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0xf400, 0x1}, 0xf4240}, 0x94) 1.22773605s ago: executing program 5 (id=1556): r0 = socket$alg(0x26, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000080)="99", 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) ioctl(r0, 0x1, &(0x7f0000000340)="d3dcd99937d5a7d4bd8181853c8aac53148401057a0b79589ecf67fc32649923bf42c9115006e99b9e8402f207de40d729aba08a8ab9595f5de6b83cf0163038f6c6fbabdcf6399bc17027199c0b0951d0bddd409cb479900674a2c8a2f127ddf3c249f3bca343dd48c950f2a6c36d8c18c7e92a6499bd3f1a7413656899d0225b1bfd1ffb") sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000010801020000000000000000010000041400048008000b400000000008000240000000090600024000f7000005000300060000000600024000f800004ee487d74353d0287aa99cc5eb72f68f87de5702a782d9b8185da9a1159b1e034f0000000000000800f881f70536c6eae2c0271ab8dd5fbd7abb315b7f9f102fcbc76d9cfef1e68f7ab34fa13a903c3086c7b4361f10e5b1afb231558c9de938aabb5bd67f83dd7c75b2542fc0f9297f8ae0564ab28a6957222addfcb459132d97db275a4ada345bd9bf33661378316a149efd375db62b7644fbe91411d970da4e8f297bd80518578871fb3ed8252009b170586c62e0"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3", 0x10) 1.227366922s ago: executing program 6 (id=1557): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000000, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0xf000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) umount2(&(0x7f0000000140)='./file0\x00', 0x1) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='user.incfs.size\x00', 0x0, 0x0) openat(r2, &(0x7f0000000380)='./file0\x00', 0x6480, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}, 0x20, 0xfffffffffffffffc, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000000c0), 0x4) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000300)=0xc, 0x1) 1.147914071s ago: executing program 6 (id=1558): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1e, &(0x7f0000000640)=@mangle={'mangle\x00', 0x2, 0x6, 0x4f0, 0x3e0, 0x1b0, 0xd0, 0xd0, 0x1b0, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0xff], 'macvlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [0x0, 0x0, 0x0, 0xff000000], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0xfd}, {0xffffffffffffffff}, {}, 0xf3d9, 0x2}}}, {{@ipv6={@mcast1, @remote, [], [0xff, 0x0, 0x0, 0xff], '\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1000, 0x6, 0x3}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x31}, [0x0, 0x0, 0xff000000], [0xff000000, 0xff, 0x0, 0xff], 'veth1_to_bond\x00', 'gre0\x00', {}, {0xff}, 0x33, 0x4, 0x5, 0x25}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) syz_usbip_server_init(0x1) 599.632445ms ago: executing program 1 (id=1559): r0 = syz_open_dev$audion(&(0x7f0000000240), 0x7, 0x2000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x46, 0x20, 0x1, 0x5, {{0x13, 0x4, 0x0, 0x2b, 0x4c, 0x65, 0x0, 0x6, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0xd, 0x2, [{0x5, 0x7, "69988ff03d"}]}, @lsrr={0x83, 0xf, 0xb9, [@remote, @broadcast, @broadcast]}, @ssrr={0x89, 0x13, 0x3e, [@private=0xa010100, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x7, 0x8d, [@empty]}]}}}}}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002880)=ANY=[@ANYRES64=r2, @ANYRES32=r0, @ANYBLOB="1000"/20, @ANYBLOB="4279701fb2a0c60016647288f915d73de43d72e5be8f9b78be5e3b18b353012281424843077bf6", @ANYRESDEC=r2, @ANYBLOB="02000000050000000200000000000000000000000000000000000000d6280931dd6062fc358d45ca6bbfc665f7116630505976a229a24d6c78f8b1d8d47e9e1a06217a4a460552de9879f0c02feb883c0869008cddcf29e888deef7084c2045901fdb5e0176eca542e6631d3f9cdeb08849df1b171735ea4c9d84d43e26179c322a0f726a0ea4ea9c0756ba420a961c9260870df207a069983ddd25486615479eb8c4878b49551a00680b202fa0988cc92667c39646abb2eb205912482c129d66b1a9b27b68b8f2ffe942821422581247f"], 0x50) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000080)=""/230) r4 = syz_clone(0x10080, &(0x7f0000000000)="6f5c29b3e2f4cc6647f0af0e5b9d2470b3b22a41e0", 0x15, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)="20d97440219618d6e1c61302cdbb2ff779245c021cb0bdcf57a94bc3b9fff1dd20e0a627334a67be57ae665f5d24dfc7fd2cf0d70bac8306631411551436ac94ccc3ccee0c2f47d587ab504ca79e6a47b78ae9c2bc") fcntl$setownex(r3, 0xf, &(0x7f0000000200)={0x1, r4}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e2a, 0x3, @local, 0x401}, 0x1c) syz_clone(0x40400, &(0x7f0000000400)="615edb9d5e5306b03a53a374e1ffdd4db7a00629f04cc561bf2e6f906a720bee7953125c17d1c4d8f5413f3927340a18c4185b0dae9ab9548ebe56c8ce279d62baf347d81cc565a1be3e84bd5e53417788ef581237177000"/101, 0x65, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000002a80)="0b75a794adf7ddcc9574c1ca671826ca61e2470b9d0f09e2211413e541f7ccd5fb5a510ffc9bf2b029d0c87a12d243671cdbf7f26aae873909d73e458401e122c2f9956b5f370c01c4a9efba75ec3d7c4c8ecffc4d1f6e870587e2b36688846937111e09bec19929a1b1ad3c47564e56ae7bee1ab4e4adc6adf04c7f8b70733926c4afda443a0db83053df83995993adeea898da933e549372b1c4877a9d8614251b246df4cdcd18fe3bffda4b156c0dfd7bea91e5fbcaf6783c16c77666ffeebfddeda5442b37ef48000000000000000000000000000073c87070b79543683188c723c266f58672936a3e691822d3050b02dc75535652f64e9602d5b9e6b4f5e1539ddd5a291b3fa456a2145da233a14030d1ed7c75483cf544d91e358644d3e355e103fb99de5e21aabc1e") sendmmsg$unix(r2, &(0x7f00000005c0)=[{{&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000500)="951f1149996a6fa3a0415f6b9256a80b6c05aa3fabbbe7bb519f79b5a0a39103ec581ce624e6bb5ef842b10396722b5a31aefaec4a02ea9fbb586b6847d6907ec8585c3b8783fed8e6655f36a79bb206a404207b0f3f", 0x56}], 0x1, 0x0, 0x0, 0x24040890}}], 0x1, 0x48004) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$pptp(0x18, 0x1, 0x2) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000340)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x6620, &(0x7f0000000040)={0x0, 0x8bab, 0x4000, 0x8, 0x1d6}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x40f00, 0x20, '\x00', r1, @fallback=0xc, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x94) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r10 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x1, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0, 0xc000}) io_uring_enter(r10, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000800)=[@increfs], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 400.080642ms ago: executing program 6 (id=1560): syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000880)=0x3) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7) 399.350807ms ago: executing program 6 (id=1561): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x110) ioctl$DVB_DVR_DMX_QBUF(r0, 0xc0186f3f, &(0x7f0000000040)={0x9, 0x7, 0x1000, 0x7, 0x0, 0xfffffff7}) open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x148) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200)="c4263a6497bcd4cec6499d40e77dc22ef5973e4264cd4947971a4f573c8d339be6f894eec50b6728e1152002d28125ce8f1dc8e516e906a685eb2584c9029c981511c012bf4e27bf0f63479c40e890cc6f2b41093f059686abb484a882bae29edd6e68d3af2873e0134c906e2c4f16e1dfba41a2128a19adf94905f0bd89488e273a9b072527d359bd6d2fa681fe08102ba072222263d51fcdd6d37a7d457c9b3786e5005e9bdf5b328211a597b738ebe896f7b8b0c26c0639efb15ac8e3d95ce9ba598febf08997c12512a121eaaa03b49b4dadd29859ca737b57e5a2bc984dbd9e83d6", 0xe4}, 0x68) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x4a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4081}, 0x50) mount$9p_virtio(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x40040, &(0x7f00000005c0)={'trans=virtio,', {[{@access_user}, {@access_client}, {@version_u}, {@noxattr}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x800}}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}}) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r5, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'ip6gre0\x00', 0x0, 0x29, 0x53, 0x80, 0x971c, 0xf, @private2, @rand_addr=' \x01\x00', 0x8, 0x8000, 0x5fd, 0xfffff07f}}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x80000001, 0x7f, 0x141, 0x48800, r0, 0x9, '\x00', r6, r0, 0x4, 0x4, 0x0, 0xb, @value=r0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@ipv4_newaddr={0x28, 0x14, 0x100, 0x70bd29, 0x25dfdbfd, {0x2, 0x78, 0x11, 0xfe}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9a08}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x28}}, 0x0) r7 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1000}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x1, 0x6, 0x5, 0x8]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x100}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x16b}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000042}, 0x4000) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b80)={r0, r6, 0x25, 0x1, @void}, 0x10) ioctl$BSG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000bc0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c00)={'wlan1\x00'}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x58, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5c2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x58}}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4d8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10845) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000f00)='/proc/partitions\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000f40)=@o_path={&(0x7f0000000ec0)='./file0\x00', r11, 0x4000, r1}, 0x18) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r9, 0x80286722, &(0x7f0000001000)={&(0x7f0000000f80)=""/97, 0x61, 0xf, 0xa}) socket(0x2a, 0x1, 0x7ff) 398.311457ms ago: executing program 5 (id=1562): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80600, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000380)={0xbc, 0x0, 0x6}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0x2ed, 0x5}}], 0x20}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) (async) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r14, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) recvmsg(r14, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x20}, &(0x7f0000000300)='./file1\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r17, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) (async) sendmsg$inet(r17, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r16, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r17, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x80) recvmsg(r16, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) (async) recvmsg(r16, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000540)={[0x1100, 0x710a, 0x3, 0x5, 0x1000, 0x0, 0x2, 0x8000000000000001, 0xf0, 0x80000004, 0x5, 0x3, 0x0, 0xfffffffffffffeff, 0x7, 0x3], 0xffffffff, 0xa0000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r18 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r18, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) 319.516612ms ago: executing program 6 (id=1563): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) recvmsg(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000380)=""/206, 0xce}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000580)=""/170, 0xaa}, {0x0, 0x48}, {&(0x7f0000001bc0)=""/4098, 0x1000}], 0x5, &(0x7f0000001a80)=""/217, 0xd9}, 0x10000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'pim6reg\x00', 0x4}, 0x18) socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r6 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f00000002c0), &(0x7f0000000340)=r6}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, 0xffffffffffffffff}, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000001400), r8) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r8, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="040025b67000fcdfdf06000000d4070b66ecdd05100800fe00", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1808000018000000000000000100000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509020002000000739a00fe00000000b509000004000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b700000000000000950000000000000080b9cce915973e617aaab05ccd26f39262da7db4e6065a60d2c24584abae9f07526650783ed61b333b5a06e1536f99b047a4da07a7703c65fe239eddf0e3e996acf23ba7611b0c4738d6d73e7919fe06254a4bd2cc005322d155595c0ad368a0708fefebc60cad7cdc9f132a351a69c14a21e6c5982dce4d00ee138e1ba597e298def334732be47c395b"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 228.026223ms ago: executing program 1 (id=1564): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="1400000030000103000000000000000001"], 0x114}], 0x1}, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0x4a8e) write$binfmt_misc(r3, &(0x7f0000000280)="1a", 0x1) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[], [], 0x2f}) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) 227.297663ms ago: executing program 6 (id=1565): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/consoles\x00', 0x0, 0x0) io_uring_setup(0x1053e3, &(0x7f0000000240)={0x0, 0x55b6, 0x800, 0x2, 0x89, 0x0, r2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) connect$unix(r2, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x2010, r3, 0xaa73b000) syz_usb_connect_ath9k(0x3, 0x5a, 0xfffffffffffffffe, 0x0) preadv(r3, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/139, 0x8b}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r5, 0x209, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x8004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x30, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x5e}}}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x157c}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x1b4, 0x7fff, 0x0, 0x1, 0x6, 0x9, 0xd, 0x4, 0x3, 0x4, 0x2, 0x2182, 0x6, 0x4, 0x1f, 0x14, {0x9, 0xdd8}, 0x10, 0x3}}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r8, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "55fdd9d517211776371d3fef19b05524"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0xa, 0x18}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r10, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x38, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_WEIGHT={0x8, 0xf, 0x3}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r8, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x55}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x7, 0x3, 0x9]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r10}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3f1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r12}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x6}]}, 0x68}}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0xffffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000000) 110.076941ms ago: executing program 1 (id=1566): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$BTRFS_IOC_ENCODED_READ(r2, 0x80809440, &(0x7f00000018c0)={&(0x7f0000001880)=[{&(0x7f00000000c0)="76a27042ecbcf4d017aa1e22188687ccab4cad39f39fe6328ef943b48b506eb5ede78b3c04ea28bb74be8ce1faf8a2a2e5d42a32996d5a139f60fee60626a7b450e3e2", 0x43}, {&(0x7f0000000880)="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", 0x1000}], 0x2, 0x3, 0x0, 0x7, 0x4, 0x7, 0x0, 0xdc1}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x6, 0x381}, 0x9c) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc4c85512, &(0x7f0000000280)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000080)=0xe7) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x1c, 0x26, 0x1, 0x870bd22, 0xfffffff9, {0x45}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c953}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff7, 0x84, &(0x7f0000000000)={0x20, 0x1, 0x11, 0x2}, 0x8, 0x2037fffb, 0x300, 0x0, 0x2, 0x20000, 0x0}) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b02000000000000c100020000002400048020000180070001006374000014000280080001400000000d08000240000000010900000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) close(r1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r9, 0x29, 0x4c, 0x0, &(0x7f0000000180)) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x2, 0x1, @vifc_lcl_ifindex, @multicast1}, 0x10) close(r3) 109.707607ms ago: executing program 5 (id=1567): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) syz_open_dev$sndctrl(0x0, 0x1, 0x4000) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') link(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) 0s ago: executing program 5 (id=1568): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x102}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtclass={0x38, 0x28, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x1, 0x1e}, {0xc, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x7}}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000700000000040014001a80100005800c00038008"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r2, &(0x7f0000000540)="2952a97f65cd105058fc41cdc4fb9ac6ff2c22a1e5865d20126ed7cbfb87b9f0a8b152a7bd86c10c7db19ee0136ec6953cdd8bbebb17e0143f261978d79f9859f4ed2c7b809ce89d6646280fb79a8351900b72791f1219", &(0x7f00000005c0)=@tcp6=r0}, 0x20) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x200, r2}, 0x38) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000000)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000023c0)={0x0, 'bond_slave_1\x00', {0x1}, 0x109}) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) kernel console output (not intermixed with test programs): , changing to 10 [ 143.419607][ T5891] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.424568][ T5891] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 143.428694][ T5891] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.446598][ T5891] hub 9-1:1.0: bad descriptor, ignoring hub [ 143.449313][ T5891] hub 9-1:1.0: probe with driver hub failed with error -5 [ 143.453150][ T5891] cdc_wdm 9-1:1.0: skipping garbage [ 143.458739][ T5891] cdc_wdm 9-1:1.0: skipping garbage [ 143.477648][ T5891] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 143.482775][ T5891] cdc_wdm 9-1:1.0: Unknown control protocol [ 143.574207][ T5147] buffer_io_error: 24 callbacks suppressed [ 143.574248][ T5147] Buffer I/O error on dev loop5, logical block 3, async page read [ 143.574357][ C1] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.584884][ C1] Buffer I/O error on dev loop5, logical block 1, async page read [ 143.588131][ C1] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.591964][ C1] Buffer I/O error on dev loop5, logical block 2, async page read [ 143.653510][ T5147] Buffer I/O error on dev loop5, logical block 3, async page read [ 143.656476][ C2] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.659525][ C2] Buffer I/O error on dev loop5, logical block 1, async page read [ 143.662140][ C2] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.665660][ C2] Buffer I/O error on dev loop5, logical block 2, async page read [ 143.673689][ T5147] Buffer I/O error on dev loop5, logical block 3, async page read [ 143.673699][ C2] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.678759][ C2] Buffer I/O error on dev loop5, logical block 1, async page read [ 143.681463][ C2] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.685686][ C2] Buffer I/O error on dev loop5, logical block 2, async page read [ 143.688602][ T5147] Buffer I/O error on dev loop5, logical block 3, async page read [ 143.688678][ C1] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.694725][ C1] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.699026][ C1] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.702953][ C1] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.710850][ T5147] ldm_validate_partition_table(): Disk read failed. [ 143.714065][ T5147] Dev loop5: unable to read RDB block 0 [ 143.728076][ T5147] loop5: unable to read partition table [ 143.730676][ T5147] loop5: partition table beyond EOD, truncated [ 143.757725][ T8763] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 143.793672][ T6117] usb 9-1: USB disconnect, device number 11 [ 144.084978][ T5891] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 144.238806][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'. [ 144.244884][ T5891] usb 8-1: Using ep0 maxpacket: 16 [ 144.249776][ T5891] usb 8-1: config 0 has no interfaces? [ 144.258981][ T5891] usb 8-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 144.262385][ T5891] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.267032][ T5891] usb 8-1: Product: syz [ 144.268783][ T5891] usb 8-1: Manufacturer: syz [ 144.271041][ T5891] usb 8-1: SerialNumber: syz [ 144.280634][ T5891] usb 8-1: config 0 descriptor?? [ 144.705920][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.785'. [ 144.809825][ T8835] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 144.813350][ T8835] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 144.865499][ T5891] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 145.015043][ T5891] usb 9-1: device descriptor read/64, error -71 [ 145.018993][ T8847] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 145.065026][ T5750] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.238559][ T8851] netlink: 'syz.1.788': attribute type 14 has an invalid length. [ 145.274881][ T5891] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 145.405029][ T5891] usb 9-1: device descriptor read/64, error -71 [ 145.515504][ T5891] usb usb9-port1: attempt power cycle [ 145.855276][ T5891] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 145.885448][ T5891] usb 9-1: device descriptor read/8, error -71 [ 145.950879][ T5750] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 145.962052][ T5750] Bluetooth: hci1: Injecting HCI hardware error event [ 145.968324][ T5750] Bluetooth: hci1: hardware error 0x00 [ 146.124955][ T5891] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 146.145586][ T5891] usb 9-1: device descriptor read/8, error -71 [ 146.255755][ T5891] usb usb9-port1: unable to enumerate USB device [ 146.350643][ T8874] IPVS: length: 18 != 8  [ 146.517143][ T5829] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 146.669921][ T8886] Cannot find map_set index 3 as target [ 146.676560][ T5829] usb 6-1: Invalid ep0 maxpacket: 64 [ 146.736077][ T8888] bridge0: port 3(vlan3) entered blocking state [ 146.738188][ T29] usb 8-1: USB disconnect, device number 18 [ 146.739204][ T8888] bridge0: port 3(vlan3) entered disabled state [ 146.751154][ T8888] vlan3: entered allmulticast mode [ 146.754499][ T8888] geneve0: entered allmulticast mode [ 146.763069][ T8888] vlan3: entered promiscuous mode [ 146.764724][ T8888] geneve0: entered promiscuous mode [ 146.817706][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 146.817794][ T42] audit: type=1400 audit(2000000054.559:727): avc: denied { getopt } for pid=8890 comm="syz.3.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.825695][ T5829] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 146.995214][ T5829] usb 6-1: Invalid ep0 maxpacket: 64 [ 146.997823][ T5829] usb usb6-port1: attempt power cycle [ 147.102101][ T42] audit: type=1400 audit(2000000054.839:728): avc: denied { setopt } for pid=8908 comm="syz.3.806" lport=34344 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 147.132695][ T8911] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 147.143547][ T8912] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8912 comm=syz.0.807 [ 147.151680][ T8913] netlink: 36 bytes leftover after parsing attributes in process `syz.0.807'. [ 147.157107][ T8913] netlink: 36 bytes leftover after parsing attributes in process `syz.0.807'. [ 147.300134][ T8923] /dev/sg0: Can't lookup blockdev [ 147.375504][ T5829] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 147.395695][ T5829] usb 6-1: Invalid ep0 maxpacket: 64 [ 147.534880][ T5829] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 147.561011][ T5829] usb 6-1: Invalid ep0 maxpacket: 64 [ 147.572037][ T5829] usb usb6-port1: unable to enumerate USB device [ 148.033819][ T5750] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 148.035132][ T42] audit: type=1400 audit(2000000055.769:729): avc: denied { append } for pid=8936 comm="syz.3.813" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 149.317374][ T42] audit: type=1400 audit(2000000057.049:730): avc: denied { read } for pid=8940 comm="syz.1.815" dev="nsfs" ino=4026532902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 149.325982][ T42] audit: type=1400 audit(2000000057.049:731): avc: denied { open } for pid=8940 comm="syz.1.815" path="net:[4026532902]" dev="nsfs" ino=4026532902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 149.784218][ T8945] 0x00000000001d-0x000000020000 : "" [ 149.788796][ T42] audit: type=1400 audit(2000000057.519:732): avc: denied { ioctl } for pid=8943 comm="syz.1.816" path="/dev/mtd0" dev="devtmpfs" ino=716 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 149.818405][ T8945] ftl_cs: FTL header corrupt! [ 149.864498][ T42] audit: type=1400 audit(2000000057.599:733): avc: denied { read } for pid=8952 comm="syz.0.819" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 149.886068][ T42] audit: type=1400 audit(2000000057.599:734): avc: denied { open } for pid=8952 comm="syz.0.819" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 149.900135][ T42] audit: type=1400 audit(2000000057.609:735): avc: denied { ioctl } for pid=8952 comm="syz.0.819" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 150.010734][ T8967] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 150.049623][ T8967] Invalid option length (480) for dns_resolver key [ 150.107533][ T8972] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8972 comm=syz.0.825 [ 150.114214][ T8972] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8972 comm=syz.0.825 [ 150.200298][ T8980] bond2: Unable to set up delay as MII monitoring is disabled [ 150.205902][ T848] libceph: connect (1)[c::]:6789 error -101 [ 150.210494][ T848] libceph: mon0 (1)[c::]:6789 connect error [ 150.212349][ T8980] bond2 (unregistering): Released all slaves [ 150.228815][ T848] libceph: connect (1)[c::]:6789 error -101 [ 150.231616][ T848] libceph: mon0 (1)[c::]:6789 connect error [ 150.287346][ T8987] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 150.325150][ T8991] fuse: Unknown parameter 'grou' [ 150.363242][ T8978] ceph: No mds server is up or the cluster is laggy [ 150.391010][ T42] audit: type=1400 audit(2000000058.129:736): avc: denied { shutdown } for pid=8990 comm="syz.0.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.440629][ T9001] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 150.585120][ T1045] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 150.735852][ T1045] usb 9-1: Using ep0 maxpacket: 8 [ 150.739770][ T1045] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 150.743590][ T1045] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.745149][ T848] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 150.762367][ T1045] pvrusb2: Hardware description: Terratec Grabster AV400 [ 150.765474][ T1045] pvrusb2: ********** [ 150.767169][ T1045] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 150.773007][ T1045] pvrusb2: Important functionality might not be entirely working. [ 150.777476][ T1045] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 150.782479][ T1045] pvrusb2: ********** [ 150.800693][ T5147] buffer_io_error: 47 callbacks suppressed [ 150.800712][ T5147] Buffer I/O error on dev loop5, logical block 3, async page read [ 150.800961][ C0] blk_print_req_error: 28 callbacks suppressed [ 150.800972][ C0] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.811730][ C0] Buffer I/O error on dev loop5, logical block 1, async page read [ 150.815076][ C3] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.818290][ C3] Buffer I/O error on dev loop5, logical block 2, async page read [ 150.861606][ T5147] Buffer I/O error on dev loop5, logical block 3, async page read [ 150.862588][ C3] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.865678][ C0] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.869158][ C3] Buffer I/O error on dev loop5, logical block 1, async page read [ 150.873118][ C0] Buffer I/O error on dev loop5, logical block 2, async page read [ 150.879556][ C1] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.879665][ T5147] Buffer I/O error on dev loop5, logical block 3, async page read [ 150.883494][ C1] Buffer I/O error on dev loop5, logical block 1, async page read [ 150.890981][ C1] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.895968][ C1] Buffer I/O error on dev loop5, logical block 2, async page read [ 150.901799][ C1] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.901907][ T5147] Buffer I/O error on dev loop5, logical block 3, async page read [ 150.904959][ C0] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.914102][ C1] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.915245][ T848] usb 5-1: Using ep0 maxpacket: 8 [ 150.918449][ C1] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.931392][ T5147] ldm_validate_partition_table(): Disk read failed. [ 150.933492][ T848] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 150.936807][ T5147] Dev loop5: unable to read RDB block 0 [ 150.937347][ T848] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.940700][ T5147] loop5: unable to read partition table [ 150.943343][ T848] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.943376][ T848] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.946777][ T5147] loop5: partition table beyond EOD, [ 150.950137][ T848] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.953702][ T5147] truncated [ 150.961453][ T848] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.964942][ T848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.971582][ T2521] pvrusb2: Invalid write control endpoint [ 151.130779][ T2521] pvrusb2: Invalid write control endpoint [ 151.137018][ T2521] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 151.143690][ T2521] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 151.148215][ T2521] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 151.151871][ T2521] pvrusb2: Device being rendered inoperable [ 151.162101][ T2521] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 151.165685][ T2521] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 151.173534][ T8992] netlink: 11396 bytes leftover after parsing attributes in process `syz.4.830'. [ 151.181217][ T2521] pvrusb2: Attached sub-driver cx25840 [ 151.186113][ T8992] pvrusb2: Attempted to execute control transfer when device not ok [ 151.187774][ T2521] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 151.194135][ T2521] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 151.200302][ T1045] usb 9-1: USB disconnect, device number 16 [ 151.201941][ T848] usb 5-1: usb_control_msg returned -32 [ 151.206555][ T848] usbtmc 5-1:16.0: can't read capabilities [ 151.315098][ T9000] Dead loop on virtual device ip6_vti0 (net 31), fix it urgently! [ 151.328142][ T5892] usb 5-1: USB disconnect, device number 12 [ 151.591408][ T9047] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 151.593712][ T9047] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 151.600801][ T9047] vhci_hcd vhci_hcd.0: Device attached [ 151.608345][ T9049] vhci_hcd: unknown pdu 1 [ 151.617045][ T5576] vhci_hcd vhci_hcd.3: stop threads [ 151.626155][ T5576] vhci_hcd vhci_hcd.3: release socket [ 151.628027][ T5576] vhci_hcd vhci_hcd.3: disconnect device [ 151.744148][ T9054] netlink: 44 bytes leftover after parsing attributes in process `syz.1.844'. [ 151.753058][ T9053] netlink: 44 bytes leftover after parsing attributes in process `syz.1.844'. [ 151.786987][ T9067] netlink: 'syz.3.848': attribute type 1 has an invalid length. [ 151.838420][ T9067] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.925706][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 151.925726][ T42] audit: type=1400 audit(2000000059.669:740): avc: denied { execmod } for pid=9083 comm="syz.1.852" path="/216/blkio.bfq.io_service_bytes_recursive" dev="tmpfs" ino=1187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 152.076491][ T6100] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 152.139499][ T42] audit: type=1400 audit(2000000059.879:741): avc: denied { append } for pid=9100 comm="syz.0.859" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 152.223487][ T6100] usb 9-1: device descriptor read/64, error -71 [ 152.259657][ T9103] /dev/sg0: Can't lookup blockdev [ 152.280573][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'. [ 152.306378][ T9107] Mount JFS Failure: -22 [ 152.308189][ T42] audit: type=1400 audit(2000000060.049:742): avc: denied { setopt } for pid=9109 comm="syz.3.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 152.309517][ T9107] jfs_mount failed w/return code = -22 [ 152.317871][ T9110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.862'. [ 152.332205][ T9106] Mount JFS Failure: -22 [ 152.333629][ T9106] jfs_mount failed w/return code = -22 [ 152.479029][ T6100] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 152.509578][ T42] audit: type=1400 audit(2000000060.249:743): avc: denied { read } for pid=9131 comm="syz.1.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 152.518809][ T9133] overlayfs: workdir and upperdir must be separate subtrees [ 152.521443][ T9134] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 152.532331][ T9133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.869'. [ 152.532334][ T9134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.869'. [ 152.532372][ T9134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.869'. [ 152.535209][ T9133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.869'. [ 152.603738][ T9136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.869'. [ 152.607517][ T9136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.869'. [ 152.624895][ T6100] usb 9-1: device descriptor read/64, error -71 [ 152.738039][ T6100] usb usb9-port1: attempt power cycle [ 152.778082][ T9145] syz_tun: entered allmulticast mode [ 152.791322][ T9145] dvmrp8: entered allmulticast mode [ 152.795482][ T9144] syz_tun: left allmulticast mode [ 152.891295][ T42] audit: type=1400 audit(2000000060.629:744): avc: denied { create } for pid=9146 comm="syz.1.873" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 152.902009][ T42] audit: type=1400 audit(2000000060.639:745): avc: denied { setattr } for pid=9146 comm="syz.1.873" name="file0" dev="tmpfs" ino=1232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 153.084956][ T6100] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 153.107906][ T6100] usb 9-1: device descriptor read/8, error -71 [ 153.345789][ T6100] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 153.375997][ T6100] usb 9-1: device descriptor read/8, error -71 [ 153.485342][ T6100] usb usb9-port1: unable to enumerate USB device [ 153.586756][ T9160] geneve2: entered allmulticast mode [ 153.595899][ T9163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.877'. [ 153.625073][ T6100] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 153.714721][ T42] audit: type=1400 audit(2000000061.449:746): avc: denied { write } for pid=9167 comm="syz.0.879" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 153.767387][ T6100] usb 9-1: device descriptor read/64, error -71 [ 153.880541][ T9175] comedi comedi2: comedi_test: 320 microvolt, 100000 microsecond waveform attached [ 153.927389][ T42] audit: type=1400 audit(2000000061.669:747): avc: denied { setattr } for pid=9173 comm="syz.1.881" name="/" dev="9p" ino=72374877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.014977][ T6100] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 154.094965][ T848] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 154.172933][ T6100] usb 9-1: device descriptor read/64, error -71 [ 154.235215][ T848] usb 5-1: device descriptor read/64, error -71 [ 154.295307][ T6100] usb usb9-port1: attempt power cycle [ 154.314070][ T42] audit: type=1400 audit(2000000062.049:748): avc: denied { write } for pid=9187 comm="syz.1.885" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 154.484944][ T848] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 154.614962][ T848] usb 5-1: device descriptor read/64, error -71 [ 154.657982][ T6100] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 154.685604][ T6100] usb 9-1: device descriptor read/8, error -71 [ 154.725577][ T848] usb usb5-port1: attempt power cycle [ 154.878083][ T42] audit: type=1400 audit(2000000062.619:749): avc: denied { append } for pid=9199 comm="syz.4.888" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 155.065217][ T848] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 155.095548][ T848] usb 5-1: device descriptor read/8, error -71 [ 155.345377][ T848] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 155.376990][ T848] usb 5-1: device descriptor read/8, error -71 [ 155.426245][ T9217] tipc: Failed to remove unknown binding: 66,0,0/0:332588698/332588700 [ 155.430242][ T9217] tipc: Failed to remove unknown binding: 66,0,0/0:332588698/332588699 [ 155.438680][ T9217] tipc: Failed to remove unknown binding: 66,0,0/0:332588698/332588700 [ 155.464314][ T9217] tipc: Failed to remove unknown binding: 66,0,0/0:332588698/332588699 [ 155.495265][ T848] usb usb5-port1: unable to enumerate USB device [ 155.585352][ T9230] tc_dump_action: action bad kind [ 155.808546][ T9240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.902'. [ 155.834541][ T9240] virtiofs: Bad value for 'dax' [ 156.357902][ T9262] Bluetooth: hci4: Frame reassembly failed (-84) [ 156.901617][ T9268] xt_hashlimit: size too large, truncated to 1048576 [ 157.069101][ T9284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=9284 comm=syz.1.915 [ 157.172599][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 157.172650][ T42] audit: type=1400 audit(2000000064.909:751): avc: denied { execute } for pid=9287 comm="syz.0.917" dev="hugetlbfs" ino=29484 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 157.190863][ T42] audit: type=1400 audit(2000000064.909:752): avc: denied { execute_no_trans } for pid=9287 comm="syz.0.917" path=2F6D656D66643A5B0BDB58AE5B1A02FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=29484 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 157.421148][ T8304] Bluetooth: hci5: Frame reassembly failed (-84) [ 157.769345][ T9315] openvswitch: netlink: Duplicate or invalid key (type 0). [ 157.772518][ T9315] openvswitch: netlink: Actions may not be safe on all matching packets [ 157.878363][ T8313] Bluetooth: hci6: Frame reassembly failed (-84) [ 158.001662][ T9329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9329 comm=syz.3.930 [ 158.007865][ T9329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9329 comm=syz.3.930 [ 158.239392][ T42] audit: type=1400 audit(2000000065.979:753): avc: denied { write } for pid=9335 comm="syz.3.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 158.414910][ T5750] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 158.415033][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 158.794566][ T42] audit: type=1400 audit(2000000066.529:754): avc: denied { load_policy } for pid=9349 comm="syz.4.937" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 158.794644][ T9350] SELinux: policydb version 1032085719 does not match my version range 15-35 [ 158.807950][ T9350] SELinux: failed to load policy [ 158.815424][ T5849] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 158.866427][ T9355] comedi comedi3: dac02: I/O base address or length out of range [ 158.923487][ T42] audit: type=1400 audit(2000000066.659:755): avc: denied { write } for pid=9356 comm="syz.4.939" name="/" dev="9p" ino=72374877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.934275][ T42] audit: type=1400 audit(2000000066.659:756): avc: denied { write } for pid=9356 comm="syz.4.939" name="/" dev="9p" ino=72374877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.947122][ T42] audit: type=1400 audit(2000000066.659:757): avc: denied { rename } for pid=9356 comm="syz.4.939" name="file0" dev="9p" ino=72374917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.957619][ T42] audit: type=1400 audit(2000000066.689:758): avc: denied { write } for pid=9356 comm="syz.4.939" name="/" dev="9p" ino=72374877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.986991][ T5849] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.991176][ T5849] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.998684][ T5849] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.003219][ T5849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.219080][ T5849] usb 8-1: usb_control_msg returned -32 [ 159.222777][ T5849] usbtmc 8-1:16.0: can't read capabilities [ 159.245434][ T9366] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 159.250193][ T9366] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 159.256811][ T9366] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 159.260443][ T9366] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 159.455338][ T5755] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 159.455381][ T5750] Bluetooth: hci5: command 0x1003 tx timeout [ 159.547331][ T42] audit: type=1400 audit(2000000067.289:759): avc: denied { getopt } for pid=9375 comm="syz.1.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 159.637684][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 159.640910][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.945'. [ 159.678335][ T9383] gfs2: error -5 reading superblock [ 159.775202][ C3] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 159.877342][ T42] audit: type=1400 audit(2000000067.609:760): avc: denied { mount } for pid=9389 comm="syz.1.948" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 159.935233][ T5754] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 160.144600][ T9414] netlink: 20 bytes leftover after parsing attributes in process `syz.4.956'. [ 160.169941][ T9414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.249662][ T9416] Bluetooth: hci0: unsupported parameter 255 [ 160.256525][ T9416] Bluetooth: hci0: unsupported parameter 255 [ 160.549797][ T9423] netlink: 7 bytes leftover after parsing attributes in process `syz.1.959'. [ 160.751989][ T9431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.962'. [ 160.985140][ T9446] Failed to get privilege flags for destination (handle=0x2:0xffffff01) [ 160.985378][ T9447] dvmrp8: left allmulticast mode [ 161.281943][ T5849] usb 8-1: USB disconnect, device number 19 [ 161.399528][ T9467] program syz.0.971 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.511112][ T9475] overlayfs: regular lower layers cannot follow data lower layers [ 161.763254][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'. [ 161.955767][ T9503] netlink: 6 bytes leftover after parsing attributes in process `syz.0.983'. [ 161.961683][ T9503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.975517][ T9503] binder: 9502:9503 ioctl c0306201 200000000640 returned -22 [ 162.053504][ T9517] netlink: 'syz.4.986': attribute type 11 has an invalid length. [ 162.057374][ T9518] netlink: 'syz.4.986': attribute type 11 has an invalid length. [ 162.193694][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 162.193768][ T42] audit: type=1400 audit(2000000069.929:766): avc: denied { write } for pid=9531 comm="syz.1.990" lport=42813 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 162.212076][ T42] audit: type=1400 audit(2000000069.939:767): avc: denied { getopt } for pid=9527 comm="syz.3.989" lport=37290 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 162.257862][ T9532] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 162.263612][ T9532] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 162.313097][ T9537] libceph: resolve '0' (ret=-3): failed [ 162.421838][ T9544] netlink: 216 bytes leftover after parsing attributes in process `syz.4.994'. [ 162.521473][ T9554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.587101][ T9560] XFS (nbd1): SB validate failed with error -5. [ 162.623100][ T9559] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd1": -EINTR [ 162.685355][ T9580] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 162.686018][ T9583] netlink: 'syz.1.1002': attribute type 10 has an invalid length. [ 162.692662][ T9580] loop6: detected capacity change from 0 to 8 [ 162.695410][ T9583] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1002'. [ 162.711161][ T9583] nicvf0: Port device geneve1 added [ 162.759447][ T9588] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 162.773905][ T9580] loop6: detected capacity change from 8 to 7 [ 162.837314][ C0] blk_print_req_error: 28 callbacks suppressed [ 162.837339][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.844454][ C0] buffer_io_error: 47 callbacks suppressed [ 162.844497][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.844682][ T9592] NILFS (nbd3): device size too small [ 162.848829][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.856054][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.861024][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.864458][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.867932][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.871140][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.874410][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.878056][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.883247][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.887414][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.893211][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.897035][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.901117][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.905468][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.914805][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.918761][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.922475][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.927423][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.934285][ T9580] ldm_validate_partition_table(): Disk read failed. [ 162.939447][ T9580] Dev loop6: unable to read RDB block 0 [ 162.943492][ T9580] loop6: unable to read partition table [ 162.950324][ T9580] loop6: partition table beyond EOD, truncated [ 162.955518][ T9580] loop_reread_partitions: partition scan of loop6 (uG ܱ.:0 [ 162.955518][ T9580] 咁 HID v0.03 Device [syz1] on syz0 [ 171.958243][ T9938] fido_id[9938]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 172.248868][ T42] audit: type=1400 audit(4000000412.977:774): avc: denied { map } for pid=9941 comm="syz.0.1100" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 172.576954][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 172.702597][ T42] audit: type=1400 audit(4000000413.437:775): avc: denied { write } for pid=9958 comm="syz.1.1105" name="netfilter" dev="proc" ino=4026532904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 172.713701][ T42] audit: type=1400 audit(4000000413.437:776): avc: denied { add_name } for pid=9958 comm="syz.1.1105" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 172.713938][ T42] audit: type=1400 audit(4000000413.437:777): avc: denied { create } for pid=9958 comm="syz.1.1105" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 172.755414][ T42] audit: type=1400 audit(4000000413.437:778): avc: denied { associate } for pid=9958 comm="syz.1.1105" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 172.937107][ T42] audit: type=1400 audit(4000000413.677:779): avc: denied { getopt } for pid=9960 comm="syz.1.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 173.615232][ T5755] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 173.622658][ T5755] Bluetooth: hci2: Injecting HCI hardware error event [ 173.629809][ T5755] Bluetooth: hci2: hardware error 0x00 [ 174.024205][ T9920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.234582][ T42] audit: type=1400 audit(4000000414.967:780): avc: denied { mounton } for pid=9975 comm="syz.3.1111" path="/282/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 174.346746][ T9981] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1112'. [ 174.408109][ T42] audit: type=1400 audit(4000000415.137:781): avc: denied { unlink } for pid=9975 comm="syz.3.1111" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 174.465739][ T42] audit: type=1400 audit(4000000415.207:782): avc: denied { mount } for pid=9983 comm="syz.3.1113" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 174.475600][ T42] audit: type=1400 audit(4000000415.217:783): avc: denied { mounton } for pid=9983 comm="syz.3.1113" path="/283/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 174.488133][ T42] audit: type=1400 audit(4000000415.227:784): avc: denied { read } for pid=9983 comm="syz.3.1113" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 174.621488][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1116'. [ 174.636193][ T9990] bridge0: port 4(macvlan2) entered blocking state [ 174.641526][ T9990] bridge0: port 4(macvlan2) entered disabled state [ 174.646314][ T9990] macvlan2: entered allmulticast mode [ 174.650633][ T9992] netlink: 'syz.3.1117': attribute type 1 has an invalid length. [ 174.657461][ T9990] macvlan2: left allmulticast mode [ 174.695466][ T9994] 9p filesystem being mounted at /214/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 174.716459][ T9992] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.729249][ T9996] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.732224][ T9996] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 174.737834][ T9996] bond4: (slave gre1): Error -95 calling set_mac_address [ 174.876834][ T9999] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1119'. [ 174.995083][ T1045] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 175.044058][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'. [ 175.144928][ T1045] usb 8-1: Using ep0 maxpacket: 8 [ 175.148707][ T1045] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 175.153104][ T1045] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.160995][ T1045] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 175.164917][ T1045] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.173940][ T1045] usbtmc 8-1:16.0: bulk endpoints not found [ 175.703635][ T5755] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 175.739512][ T9996] gretap1: entered promiscuous mode [ 175.748232][ T9996] bond4: (slave gretap1): making interface the new active one [ 175.752399][ T9996] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 176.075154][T10020] netlink: 'syz.4.1125': attribute type 3 has an invalid length. [ 176.393861][T10043] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 176.822129][T10059] speed is unknown, defaulting to 1000 [ 177.363754][T10073] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 177.518628][T10087] netlink: 'syz.4.1145': attribute type 39 has an invalid length. [ 177.540420][T10087] hsr_slave_0 (unregistering): left promiscuous mode [ 177.677584][ T848] usb 8-1: USB disconnect, device number 20 [ 177.790420][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 177.790433][ T42] audit: type=1400 audit(4000000418.527:801): avc: denied { mounton } for pid=10094 comm="syz.0.1147" path="/file0" dev="ramfs" ino=36454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 177.962561][ T42] audit: type=1400 audit(4000000418.697:802): avc: denied { ioctl } for pid=10106 comm="syz.3.1151" path="socket:[37029]" dev="sockfs" ino=37029 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 177.966871][T10107] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1151'. [ 177.991488][T10107] bridge0: port 1(vlan3) entered blocking state [ 177.993819][T10107] bridge0: port 1(vlan3) entered disabled state [ 177.996510][T10107] vlan3: entered allmulticast mode [ 177.998474][T10107] geneve0: entered allmulticast mode [ 178.001548][T10107] vlan3: entered promiscuous mode [ 178.003635][T10107] geneve0: entered promiscuous mode [ 178.067828][T10108] netlink: 'syz.3.1151': attribute type 8 has an invalid length. [ 178.280240][ T42] audit: type=1400 audit(4000000419.017:803): avc: denied { map } for pid=10110 comm="syz.1.1153" path="socket:[37034]" dev="sockfs" ino=37034 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 178.282888][T10112] gfs2: not a GFS2 filesystem [ 178.292211][ T42] audit: type=1400 audit(4000000419.017:804): avc: denied { mounton } for pid=10110 comm="syz.1.1153" path="/305/bus" dev="tmpfs" ino=1651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 178.344915][T10116] x_tables: duplicate underflow at hook 1 [ 178.347955][T10117] x_tables: duplicate underflow at hook 1 [ 178.382382][ T42] audit: type=1326 audit(4000000419.117:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="syz.4.1152" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbebb9de59 code=0x0 [ 178.393279][ T42] audit: type=1400 audit(4000000419.117:806): avc: denied { ioctl } for pid=10119 comm="syz.1.1155" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 178.694326][T10126] input: syz0 as /devices/virtual/input/input25 [ 178.750670][T10130] netlink: 'syz.1.1159': attribute type 63 has an invalid length. [ 178.753361][T10130] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1159'. [ 178.812098][T10133] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.1159'. [ 178.816114][T10133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1159'. [ 178.848665][T10135] EXT4-fs (nbd3): unable to read superblock [ 178.952824][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1162'. [ 178.958767][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1162'. [ 179.045330][ T5892] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 179.205015][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 179.210363][ T5892] usb 5-1: config 0 has no interfaces? [ 179.215570][ T5892] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.219582][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 179.223230][ T5892] usb 5-1: SerialNumber: syz [ 179.231343][ T5892] usb 5-1: config 0 descriptor?? [ 179.384965][ T5829] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 179.424949][ T848] usb 9-1: new low-speed USB device number 29 using dummy_hcd [ 179.444179][ C2] Unknown status report in ack skb [ 179.510263][ T6117] usb 5-1: USB disconnect, device number 21 [ 179.535764][ T5829] usb 8-1: Using ep0 maxpacket: 8 [ 179.540319][ T5829] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 179.543996][ T5829] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 179.548248][ T5829] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 179.552865][ T5829] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 179.557942][ T5829] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 179.562561][ T5829] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.568431][ T5829] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 179.572035][ T5829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.598190][ T848] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.605742][ T848] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 179.609963][ T848] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 179.614088][ T848] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.619554][ T848] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 179.622928][ T848] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.633340][ T848] hub 9-1:1.0: bad descriptor, ignoring hub [ 179.637535][ T848] hub 9-1:1.0: probe with driver hub failed with error -5 [ 179.641276][ T848] cdc_wdm 9-1:1.0: skipping garbage [ 179.643136][ T848] cdc_wdm 9-1:1.0: skipping garbage [ 179.650052][ T848] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 179.652534][ T848] cdc_wdm 9-1:1.0: Unknown control protocol [ 179.781905][ T5829] usb 8-1: GET_CAPABILITIES returned 0 [ 179.784203][ T5829] usbtmc 8-1:16.0: can't read capabilities [ 179.797407][T10162] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 179.836061][T10152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.839842][T10152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.930512][T10152] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 179.970184][ T5849] usb 9-1: USB disconnect, device number 29 [ 180.041620][T10151] SELinux: ebitmap: truncated map [ 180.043412][T10151] SELinux: invalid class [ 180.085023][T10151] SELinux: failed to load policy [ 180.121197][ T42] audit: type=1400 audit(4000000420.857:807): avc: denied { map } for pid=10187 comm="syz.0.1175" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 180.132331][T10151] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 180.136771][ T42] audit: type=1400 audit(4000000420.857:808): avc: denied { execute } for pid=10187 comm="syz.0.1175" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 180.221449][T10192] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1177'. [ 180.265109][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 180.472305][T10206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=10206 comm=syz.1.1180 [ 180.544112][T10211] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1180'. [ 180.548394][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1180'. [ 180.591769][ T5849] usb 8-1: USB disconnect, device number 21 [ 181.031196][ T42] audit: type=1400 audit(4000000421.767:809): avc: denied { getopt } for pid=10233 comm="syz.0.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.260395][ T42] audit: type=1400 audit(4000000421.997:810): avc: denied { read append } for pid=10237 comm="syz.3.1189" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 182.106125][T10238] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 182.116196][T10238] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 182.133134][T10238] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 182.152321][T10238] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 182.155371][T10238] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 182.166963][T10238] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 182.277451][T10266] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1196'. [ 182.294544][T10267] afs: Unknown parameter 'dyn(' [ 182.458086][T10279] veth1_macvtap: left allmulticast mode [ 182.461836][T10279] veth1_macvtap: left promiscuous mode [ 182.465569][T10279] macsec0: entered promiscuous mode [ 182.480257][T10279] veth1_macvtap: entered promiscuous mode [ 182.483228][T10279] veth1_macvtap: entered allmulticast mode [ 182.494640][T10279] macsec0: left promiscuous mode [ 183.374921][ T5755] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.377554][T10238] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 183.477588][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1207'. [ 183.482269][T10293] netlink: 'syz.1.1207': attribute type 1 has an invalid length. [ 183.484911][T10293] nbd: error processing sock list [ 183.625972][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 183.625992][ T42] audit: type=1400 audit(4000000424.357:813): avc: denied { connect } for pid=10304 comm="syz.3.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 183.814932][ T50] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 183.881568][ T42] audit: type=1400 audit(4000000424.617:814): avc: denied { mount } for pid=10314 comm="syz.0.1214" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 183.898540][ T42] audit: type=1400 audit(4000000424.617:815): avc: denied { mounton } for pid=10314 comm="syz.0.1214" path="/281/file0" dev="gadgetfs" ino=7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 183.987491][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.992450][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.004391][ T50] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.010169][ T50] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.014251][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.070144][ T50] usb 6-1: config 0 descriptor?? [ 184.175785][ T5755] Bluetooth: hci3: command 0x0405 tx timeout [ 184.495538][ T50] hid_parser_main: 91 callbacks suppressed [ 184.495586][ T50] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 184.502658][ T50] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 184.515914][ T50] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 184.519112][ T50] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 184.522379][ T50] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 184.529904][ T50] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 184.533259][ T50] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 184.536805][ T50] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 184.539944][ T50] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 184.542677][ T50] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 184.589267][ T50] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 184.703707][T10345] 9pnet: Found fid 0 not clunked [ 184.826918][ T50] usb 6-1: USB disconnect, device number 29 [ 185.465312][ T5755] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.565596][T10363] 0x687069636b730026-0x687069636b73728b : "" [ 185.582235][T10363] mtd: partition "" is out of reach -- disabled [ 185.643510][T10363] ftl_cs: FTL header not found. [ 186.267291][ T5755] Bluetooth: hci3: command 0x0405 tx timeout [ 187.166816][T10368] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 187.204536][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1232'. [ 187.219686][T10372] vlan4: entered promiscuous mode [ 187.221996][T10372] gretap0: entered promiscuous mode [ 187.297135][T10385] overlayfs: missing 'workdir' [ 187.299631][T10387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1237'. [ 187.465235][ T5829] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 187.545024][ T5755] Bluetooth: hci0: command 0x0c1a tx timeout [ 187.618117][ T5829] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.622973][ T5829] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 187.626821][ T5829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.646864][ T5829] usb 9-1: config 0 descriptor?? [ 187.673065][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1244'. [ 187.801246][T10413] TCP: TCP_TX_DELAY enabled [ 187.854646][ T42] audit: type=1400 audit(4000000428.587:816): avc: denied { mounton } for pid=10374 comm="syz.4.1233" path="/241/file0" dev="tmpfs" ino=1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 187.938621][ T5829] usbhid 9-1:0.0: can't add hid device: -71 [ 187.940551][ T5829] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 187.960045][ T5829] usb 9-1: USB disconnect, device number 30 [ 188.020595][T10428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1248'. [ 188.026904][T10428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1248'. [ 188.092667][T10430] Bluetooth: hci0: unsupported parameter 255 [ 188.102680][T10430] Bluetooth: hci0: unsupported parameter 255 [ 188.141708][T10430] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.160472][T10430] geneve3: entered promiscuous mode [ 188.163186][T10430] geneve3: entered allmulticast mode [ 188.281472][T10434] vxfs: WRONG superblock magic 00000000 at 1 [ 188.289695][T10434] vxfs: WRONG superblock magic 00000000 at 8 [ 188.293697][T10434] vxfs: can't find superblock. [ 188.334956][ T5754] Bluetooth: hci3: command 0x0405 tx timeout [ 188.426439][T10445] xt_cgroup: path and classid specified [ 188.442116][T10445] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 188.721251][ T42] audit: type=1400 audit(4000000429.457:817): avc: denied { read write } for pid=10461 comm="syz.1.1261" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 188.734206][T10458] Option ''MO' to dns_resolver key: bad/missing value [ 188.745223][ T42] audit: type=1400 audit(4000000429.457:818): avc: denied { open } for pid=10461 comm="syz.1.1261" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 188.829824][T10475] netlink: 'syz.1.1263': attribute type 1 has an invalid length. [ 188.854438][T10475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.195152][T10515] trusted_key: encrypted_key: insufficient parameters specified [ 189.228490][T10517] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 189.399614][ T42] audit: type=1400 audit(4000000430.137:819): avc: denied { map } for pid=10522 comm="syz.0.1271" path="/dev/video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 189.456949][ T42] audit: type=1400 audit(4000000430.197:820): avc: denied { accept } for pid=10531 comm="syz.0.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 189.619328][ T5754] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.832672][T10543] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 189.840479][T10543] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 189.987251][T10557] program syz.1.1278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.007615][T10563] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1281'. [ 190.012042][T10563] openvswitch: netlink: Flow key attr not present in new flow. [ 190.150668][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1284'. [ 190.315852][ T1045] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 190.414962][ T5754] Bluetooth: hci3: command 0x0405 tx timeout [ 190.475897][ T1045] usb 5-1: Using ep0 maxpacket: 8 [ 190.482539][ T1045] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.494989][ T1045] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 190.501440][ T1045] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 190.528847][ T1045] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 190.533759][ T1045] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 190.539309][ T1045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.555310][ T1045] hub 5-1:1.0: bad descriptor, ignoring hub [ 190.558027][ T1045] hub 5-1:1.0: probe with driver hub failed with error -5 [ 190.562120][ T1045] cdc_wdm 5-1:1.0: skipping garbage [ 190.574369][ T1045] cdc_wdm 5-1:1.0: skipping garbage [ 190.581450][ T1045] cdc_wdm 5-1:1.0: skipping garbage [ 190.588286][ T1045] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 190.592495][ T1045] cdc_wdm 5-1:1.0: Unknown control protocol [ 190.723198][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'. [ 190.806732][T10593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.811306][T10593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.815737][T10593] trusted_key: encrypted_key: insufficient parameters specified [ 190.939445][T10594] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.943580][T10594] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.071055][T10594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.095035][T10594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.306758][T10594] bond1: left allmulticast mode [ 191.308735][T10594] bridge1: left allmulticast mode [ 191.310800][T10594] bridge1: left promiscuous mode [ 191.357288][ T848] speed is unknown, defaulting to 1000 [ 191.357450][ T5821] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.359173][ T848] sy2: Port: 1 Link DOWN [ 191.364391][ T5821] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.364468][ T5821] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.364485][ T5821] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.364506][ T5821] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.364521][ T5821] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.364541][ T5821] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.364555][ T5821] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.452274][ T42] audit: type=1400 audit(4000000432.187:821): avc: denied { name_bind } for pid=10613 comm="syz.1.1296" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 191.638007][T10568] cdc_wdm 5-1:1.0: Error autopm - -16 [ 191.638363][ T1045] usb 5-1: USB disconnect, device number 22 [ 191.677773][T10618] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 191.685107][T10618] CIFS: VFS: Malformed UNC in devname [ 191.689315][T10619] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 191.692247][T10619] CIFS: VFS: Malformed UNC in devname [ 191.753753][ T42] audit: type=1400 audit(4000000432.487:822): avc: denied { setattr } for pid=10622 comm="syz.3.1300" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.812215][T10629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1302'. [ 191.952047][T10640] netlink: 239 bytes leftover after parsing attributes in process `syz.4.1306'. [ 191.961315][T10640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1306'. [ 191.985454][ T42] audit: type=1400 audit(4000000432.727:823): avc: denied { unmount } for pid=6716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 192.059423][T10644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10644 comm=syz.4.1307 [ 192.162567][T10652] XFS (nbd3): SB validate failed with error -5. [ 192.236343][T10651] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1310'. [ 192.255951][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 192.308837][T10663] SET target dimension over the limit! [ 192.490832][ T29] bridge0: entered promiscuous mode [ 192.522479][ T42] audit: type=1400 audit(4000000433.257:824): avc: denied { link } for pid=10673 comm="syz.0.1315" name="#24" dev="tmpfs" ino=1667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 192.544899][ T42] audit: type=1400 audit(4000000433.257:825): avc: denied { rename } for pid=10673 comm="syz.0.1315" name="#25" dev="tmpfs" ino=1667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 192.625616][T10677] xt_connbytes: Forcing CT accounting to be enabled [ 192.629110][T10677] set match dimension is over the limit! [ 193.258040][T10680] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.263067][ T42] audit: type=1400 audit(4000000433.997:826): avc: denied { mount } for pid=10681 comm="syz.1.1318" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 193.263802][T10683] mac80211_hwsim hwsim8 : renamed from wlan0 [ 193.593282][T10693] blktrace: Concurrent blktraces are not allowed on loop4 [ 193.710986][T10699] netlink: 'syz.1.1325': attribute type 2 has an invalid length. [ 193.869539][T10706] netlink: 'syz.1.1327': attribute type 16 has an invalid length. [ 193.873540][T10706] netlink: 'syz.1.1327': attribute type 3 has an invalid length. [ 193.878463][T10706] netlink: 'syz.1.1327': attribute type 1 has an invalid length. [ 193.882140][T10706] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1327'. [ 194.184397][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'. [ 194.188501][T10717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.194682][T10717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.270614][ T5755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.291065][ T5755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.296401][ T5755] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.305781][ T5755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.312467][ T5755] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.449791][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 194.449814][ T42] audit: type=1400 audit(4000000435.187:828): avc: denied { map } for pid=10724 comm="syz.1.1333" path="socket:[40373]" dev="sockfs" ino=40373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 194.509609][T10731] netlink: 'syz.4.1334': attribute type 1 has an invalid length. [ 194.539708][T10731] 8021q: adding VLAN 0 to HW filter on device bond3 [ 194.560384][T10731] 8021q: adding VLAN 0 to HW filter on device bond3 [ 194.565447][T10731] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 194.571267][T10731] bond3: (slave gre1): Error -95 calling set_mac_address [ 194.637040][T10737] vti1: entered promiscuous mode [ 194.660498][T10737] macvlan2: entered promiscuous mode [ 194.663199][T10737] macvlan2: entered allmulticast mode [ 194.667324][T10737] bond3: entered promiscuous mode [ 194.717166][T10737] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 194.741149][T10742] kvm: user requested TSC rate below hardware speed [ 194.804242][T10737] bond3: left promiscuous mode [ 194.811460][T10742] nfs4: Unknown parameter '' [ 194.868976][T10718] speed is unknown, defaulting to 1000 [ 195.136386][ T42] audit: type=1400 audit(4000000435.877:829): avc: denied { watch watch_reads } for pid=10754 comm="syz.4.1340" path="/262/file1" dev="tmpfs" ino=1395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 195.178537][T10718] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.185092][T10718] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.192639][T10718] bridge_slave_0: entered allmulticast mode [ 195.199573][T10718] bridge_slave_0: entered promiscuous mode [ 195.215179][T10718] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.217538][T10718] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.219965][T10718] bridge_slave_1: entered allmulticast mode [ 195.224594][T10718] bridge_slave_1: entered promiscuous mode [ 195.253058][T10718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.261719][T10718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.295491][T10718] team0: Port device team_slave_0 added [ 195.298975][T10718] team0: Port device team_slave_1 added [ 195.321683][T10718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.324087][T10718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.332585][T10718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.338644][T10718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.341679][T10718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.352566][T10718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.631964][T10718] hsr_slave_0: entered promiscuous mode [ 195.635641][T10718] hsr_slave_1: entered promiscuous mode [ 195.642368][T10718] debugfs: 'hsr0' already exists in 'hsr' [ 195.645869][T10718] Cannot create hsr debugfs directory [ 195.924930][ T5892] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 195.965315][T10718] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 195.977006][T10718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 195.980422][T10718] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 195.990724][T10718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 195.994070][T10718] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 196.001524][T10718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 196.005867][T10718] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 196.013022][T10718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.085326][ T5892] usb 9-1: Using ep0 maxpacket: 8 [ 196.092130][ T5892] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 196.102350][ T5892] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 196.115850][ T5892] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 63520, setting to 1024 [ 196.121160][ T5892] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 196.128420][ T5892] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.132914][ T5892] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 196.137229][ T5892] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.159846][T10718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.183998][T10718] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.196102][ T8315] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.198612][ T8315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.210253][ T8315] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.212925][ T8315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.261976][T10776] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 196.276273][T10776] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 196.322919][ T5754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.331555][ T5754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.338026][ T5754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.348689][ T5754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.351752][ T5892] usb 9-1: GET_CAPABILITIES returned 0 [ 196.354017][ T5892] usbtmc 9-1:16.0: can't read capabilities [ 196.359733][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.415387][ T5755] Bluetooth: hci1: command tx timeout [ 196.564105][T10760] usbtmc 9-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 196.579672][ T10] usb 9-1: USB disconnect, device number 31 [ 196.636900][T10718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.642676][ T42] audit: type=1400 audit(4000000437.377:830): avc: denied { create } for pid=10804 comm="syz.1.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 196.651167][T10778] speed is unknown, defaulting to 1000 [ 196.846069][T10718] veth0_vlan: entered promiscuous mode [ 196.882632][T10718] veth1_vlan: entered promiscuous mode [ 196.905056][ C3] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 196.939906][T10778] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.944256][T10778] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.949554][T10778] bridge_slave_0: entered allmulticast mode [ 196.953635][T10778] bridge_slave_0: entered promiscuous mode [ 196.958811][T10778] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.962219][T10778] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.966731][T10778] bridge_slave_1: entered allmulticast mode [ 196.971772][T10778] bridge_slave_1: entered promiscuous mode [ 197.013362][T10778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.018906][T10778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.043070][T10718] veth0_macvtap: entered promiscuous mode [ 197.058413][T10778] team0: Port device team_slave_0 added [ 197.062809][T10718] veth1_macvtap: entered promiscuous mode [ 197.070287][T10778] team0: Port device team_slave_1 added [ 197.111135][T10778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.116078][T10778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.125445][T10778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.137371][T10778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.140935][T10778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.152138][T10778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.167757][T10718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.196679][T10718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.226401][T10778] hsr_slave_0: entered promiscuous mode [ 197.229283][T10778] hsr_slave_1: entered promiscuous mode [ 197.232345][T10778] debugfs: 'hsr0' already exists in 'hsr' [ 197.234584][T10778] Cannot create hsr debugfs directory [ 197.253802][ T5820] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.257724][ T5820] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.282403][ T5820] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.286508][ T5820] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.388875][ T42] audit: type=1400 audit(4000000438.117:831): avc: denied { setattr } for pid=10832 comm="syz.4.1353" name="SCTP" dev="sockfs" ino=43052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 197.528262][ T8315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.535834][ T8315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.564459][T10840] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 197.737766][ T8315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.743501][ T8315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.786946][ T42] audit: type=1400 audit(4000000438.527:832): avc: denied { mounton } for pid=10718 comm="syz-executor" path="/syzkaller.8CnUZv/syz-tmp" dev="sda1" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 197.829292][T10778] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 197.838505][T10778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 197.843001][T10778] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 197.852174][T10778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 197.872090][T10778] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 197.891261][T10778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 197.897429][T10778] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 197.907044][T10850] fuse: Bad value for 'group_id' [ 197.908927][T10850] fuse: Bad value for 'group_id' [ 197.914031][T10778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 197.944600][T10850] 9p: Bad value for 'uname' [ 197.951034][ T42] audit: type=1400 audit(4000000438.687:833): avc: denied { read } for pid=10856 comm="syz.5.1337" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 197.960877][ T42] audit: type=1400 audit(4000000438.697:834): avc: denied { open } for pid=10856 comm="syz.5.1337" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 197.970998][T10849] speed is unknown, defaulting to 1000 [ 197.972460][ T42] audit: type=1400 audit(4000000438.707:835): avc: denied { ioctl } for pid=10856 comm="syz.5.1337" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 198.169224][T10778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.188528][T10778] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.207017][ T8313] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.210221][ T8313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.234645][ T8313] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.238415][ T8313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.240886][T10876] dlm: no locking on control device [ 198.415525][ T5755] Bluetooth: hci0: command tx timeout [ 198.496724][ T5755] Bluetooth: hci1: command tx timeout [ 198.794595][T10909] tmpfs: Unknown parameter 'hugethiiz%3D/e' [ 198.859692][ T42] audit: type=1400 audit(4000000439.597:836): avc: denied { setattr } for pid=10912 comm="syz.4.1373" name="[userfaultfd]" dev="anon_inodefs" ino=40694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 198.884921][ T42] audit: type=1400 audit(4000000439.597:837): avc: denied { getattr } for pid=10912 comm="syz.4.1373" name="[userfaultfd]" dev="anon_inodefs" ino=40694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 198.899040][T10778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.030649][T10923] fuse: Bad value for 'user_id' [ 199.032967][T10923] fuse: Bad value for 'user_id' [ 199.039436][T10923] tmpfs: Bad value for 'mpol' [ 199.044242][T10923] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 199.049066][T10923] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 199.059942][T10923] overlayfs: failed to get uuid (278/file2, err=-13); falling back to uuid=null. [ 199.091874][T10778] veth0_vlan: entered promiscuous mode [ 199.109770][T10778] veth1_vlan: entered promiscuous mode [ 199.141900][T10778] veth0_macvtap: entered promiscuous mode [ 199.149733][T10778] veth1_macvtap: entered promiscuous mode [ 199.162198][T10778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.172051][T10778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.180486][ T5820] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.184530][ T5820] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.188777][ T5820] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.195485][ T5820] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.365042][ T8313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.373117][ T8313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.410218][ T8313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.412843][ T8313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.462073][T10928] xt_limit: Overflow, try lower: 271964/0 [ 199.572168][T10936] syzkaller0: entered promiscuous mode [ 199.574107][T10936] syzkaller0: entered allmulticast mode [ 199.603226][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 199.603239][ T42] audit: type=1400 audit(4000000440.337:840): avc: denied { view } for pid=10932 comm="syz.6.1377" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 199.620006][ T42] audit: type=1400 audit(4000000440.357:841): avc: denied { append } for pid=10932 comm="syz.6.1377" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 199.819012][ T42] audit: type=1804 audit(4000000440.557:842): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1378" name="/newroot/2/file0" dev="tmpfs" ino=28 res=1 errno=0 [ 199.903080][T10951] Bluetooth: MGMT ver 1.23 [ 199.946756][T10953] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 200.062278][T10959] bridge_slave_0: left allmulticast mode [ 200.065176][T10959] bridge_slave_0: left promiscuous mode [ 200.067521][T10959] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.073651][T10959] bridge_slave_1: left allmulticast mode [ 200.079626][T10959] bridge_slave_1: left promiscuous mode [ 200.082348][T10959] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.091615][T10959] bond0: (slave bond_slave_0): Releasing backup interface [ 200.101713][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.130962][T10959] bond0: (slave bond_slave_1): Releasing backup interface [ 200.144362][T10959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.148091][T10959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.152739][T10959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.156575][T10959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.161033][T10959] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 200.291193][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'. [ 200.339571][T10965] 9p filesystem being mounted at /383/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 200.345888][ T42] audit: type=1400 audit(4000000441.087:843): avc: denied { write } for pid=10964 comm="syz.1.1386" name="/" dev="9p" ino=72374877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.410835][ T42] audit: type=1400 audit(4000000441.147:844): avc: denied { write } for pid=10964 comm="syz.1.1386" name="/" dev="9p" ino=72374877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.427113][ T42] audit: type=1400 audit(4000000441.147:845): avc: denied { create } for pid=10975 comm="syz.4.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 200.440174][ T42] audit: type=1400 audit(4000000441.147:846): avc: denied { setopt } for pid=10975 comm="syz.4.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 200.449722][ T42] audit: type=1400 audit(4000000441.157:847): avc: denied { create } for pid=10975 comm="syz.4.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 200.459538][ T42] audit: type=1400 audit(4000000441.157:848): avc: denied { write } for pid=10975 comm="syz.4.1390" path="socket:[41931]" dev="sockfs" ino=41931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 200.470032][ T42] audit: type=1800 audit(4000000441.177:849): pid=10965 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1386" name="file1" dev="9p" ino=72374919 res=0 errno=0 [ 200.508066][ T5755] Bluetooth: hci0: command tx timeout [ 200.575286][ T5755] Bluetooth: hci1: command tx timeout [ 200.662718][T10992] ipt_ECN: cannot use operation on non-tcp rule [ 200.702985][T10994] o2cb: This node has not been configured. [ 200.706276][T10994] o2cb: Cluster check failed. Fix errors before retrying. [ 200.710026][T10994] (syz.4.1396,10994,3):user_dlm_register:674 ERROR: status = -22 [ 200.713228][T10994] (syz.4.1396,10994,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 200.723283][T10996] xt_cgroup: path and classid specified [ 200.771615][T10998] IPVS: set_ctl: invalid protocol: 59 172.20.20.57:20001 [ 200.793808][T11002] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1399'. [ 201.036694][T11015] xt_bpf: check failed: parse error [ 201.211004][T11034] sctp: [Deprecated]: syz.1.1406 (pid 11034) Use of int in maxseg socket option. [ 201.211004][T11034] Use struct sctp_assoc_value instead [ 201.325124][T11046] tmpfs: Bad value for 'mpol' [ 201.348499][T11045] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 201.360868][T11045] kvm: pic: level sensitive irq not supported [ 201.361194][T11045] kvm: pic: level sensitive irq not supported [ 201.422233][T11049] speed is unknown, defaulting to 1000 [ 201.472680][T11054] ): renamed from hsr0 [ 201.525854][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1412'. [ 201.566771][T11055] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 201.573813][T11055] bond1 (unregistering): Released all slaves [ 201.636189][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1410'. [ 202.010851][T11083] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1419'. [ 202.223606][T11097] Bluetooth: hci0: unsupported parameter 255 [ 202.229808][T11097] Bluetooth: hci0: unsupported parameter 255 [ 202.279795][T11095] 9p filesystem being mounted at /10 supports timestamps until 2106-02-07 (0xffffffff) [ 202.314402][T11104] (syz.6.1427,11104,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 202.322105][T11104] (syz.6.1427,11104,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 202.558665][T11115] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 202.566913][T11115] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 202.570997][T11115] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 202.574910][ T5755] Bluetooth: hci0: command tx timeout [ 202.576375][T11115] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 202.604361][T11130] overlay: Bad value for 'workdir' [ 202.665595][ T5755] Bluetooth: hci1: command tx timeout [ 202.670812][T11126] could not allocate digest TFM handle sha3-224-ce [ 202.779875][T11139] speed is unknown, defaulting to 1000 [ 202.841399][T11147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11147 comm=syz.6.1439 [ 202.853616][T11147] netlink: 'syz.6.1439': attribute type 1 has an invalid length. [ 202.943907][T11147] bond1: (slave bridge1): making interface the new active one [ 202.948417][T11147] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 203.088957][T11167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.092282][T11167] IPv6: NLM_F_CREATE should be set when creating new route [ 203.201994][T11169] vxcan1: tx drop: invalid da for name 0xffffffffffffffff [ 203.264142][ T5108] hid_parser_main: 28 callbacks suppressed [ 203.264192][ T5108] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 203.270848][ T5108] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 203.274723][ T5108] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 203.278753][ T5108] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 203.282178][ T5108] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 203.286519][ T5108] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 203.290606][ T5108] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 203.294333][ T5108] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 203.298742][ T5108] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 203.302094][ T5108] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 203.316502][ T5108] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [sy] on syz0 [ 203.363953][T11179] fido_id[11179]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 204.664962][ T5755] Bluetooth: hci0: command tx timeout [ 205.777526][T11145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.861705][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 205.861726][ T42] audit: type=1400 audit(4000000446.597:860): avc: denied { ioctl } for pid=11204 comm="syz.5.1454" path="socket:[46134]" dev="sockfs" ino=46134 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 205.880095][ T42] audit: type=1400 audit(4000000446.607:861): avc: denied { create } for pid=11206 comm="syz.4.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 205.888568][ T42] audit: type=1400 audit(4000000446.607:862): avc: denied { bind } for pid=11206 comm="syz.4.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 205.898347][ T42] audit: type=1400 audit(4000000446.617:863): avc: denied { listen } for pid=11206 comm="syz.4.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 206.095806][ T42] audit: type=1400 audit(4000000446.827:864): avc: denied { name_connect } for pid=11233 comm="syz.1.1460" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 206.162065][ T42] audit: type=1400 audit(4000000446.897:865): avc: denied { nosuid_transition } for pid=11238 comm="syz.5.1462" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 206.174037][ T42] audit: type=1400 audit(4000000446.897:866): avc: denied { transition } for pid=11238 comm="syz.5.1462" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=3103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 206.184415][ T42] audit: type=1400 audit(4000000446.897:867): avc: denied { entrypoint } for pid=11238 comm="syz.5.1462" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=3103 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 206.205070][ T42] audit: type=1400 audit(4000000446.897:868): avc: denied { noatsecure } for pid=11238 comm="syz.5.1462" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 206.345807][T11252] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 206.444532][T11258] pim6reg: entered allmulticast mode [ 206.489124][T11258] pim6reg: left allmulticast mode [ 206.682535][T11270] fuse: Bad value for 'group_id' [ 206.685347][T11270] fuse: Bad value for 'group_id' [ 206.694607][ T42] audit: type=1400 audit(4000000447.427:869): avc: denied { name_bind } for pid=11267 comm="syz.1.1473" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 206.864932][ T5108] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 206.991671][ T6117] IPVS: starting estimator thread 0... [ 207.016112][ T5108] usb 10-1: Using ep0 maxpacket: 8 [ 207.020702][ T5108] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 207.024071][ T5108] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.027955][ T5108] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.030285][T11287] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 207.031373][ T5108] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 207.040311][ T5108] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.045014][ T5108] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 207.046067][T11287] geneve3: entered promiscuous mode [ 207.048483][ T5108] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.052995][T11287] geneve3: entered allmulticast mode [ 207.057428][T11287] batman_adv: batadv0: Adding interface: geneve3 [ 207.059683][T11287] batman_adv: batadv0: Interface activated: geneve3 [ 207.105674][T11290] IPVS: using max 43 ests per chain, 103200 per kthread [ 207.266059][ T5108] usb 10-1: GET_CAPABILITIES returned 0 [ 207.268065][ T5108] usbtmc 10-1:16.0: can't read capabilities [ 207.419282][T11315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1481'. [ 207.470174][T11317] overlayfs: maximum fs stacking depth exceeded [ 207.470331][ T5108] usb 10-1: USB disconnect, device number 2 [ 207.476733][T11263] usbtmc 10-1:16.0: stb usb_control_msg returned -19 [ 207.726772][T11329] netlink: 'syz.4.1485': attribute type 10 has an invalid length. [ 207.782654][T11331] netlink: 4484 bytes leftover after parsing attributes in process `syz.4.1486'. [ 207.915499][T11339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.921413][T11339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.959098][T11342] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 208.118637][T11355] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1494'. [ 208.122249][T11355] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1494'. [ 208.127855][T11355] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1494'. [ 208.148584][T11355] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 208.155769][T11355] program syz.5.1494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.164951][ T10] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 208.290364][T11368] tmpfs: Bad value for 'huge' [ 208.293573][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1499'. [ 208.297083][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1499'. [ 208.325858][ T10] usb 11-1: too many configurations: 13, using maximum allowed: 8 [ 208.335212][ T10] usb 11-1: config 0 has no interfaces? [ 208.340351][ T10] usb 11-1: config 0 has no interfaces? [ 208.347636][ T10] usb 11-1: config 0 has no interfaces? [ 208.353108][ T10] usb 11-1: config 0 has no interfaces? [ 208.360667][ T10] usb 11-1: config 0 has no interfaces? [ 208.365138][ T10] usb 11-1: config 0 has no interfaces? [ 208.368756][ T10] usb 11-1: config 0 has no interfaces? [ 208.372176][ T10] usb 11-1: config 0 has no interfaces? [ 208.377473][ T10] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.382621][ T10] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.386016][ T10] usb 11-1: Product: syz [ 208.388032][ T10] usb 11-1: Manufacturer: syz [ 208.389954][ T10] usb 11-1: SerialNumber: syz [ 208.395647][ T10] usb 11-1: config 0 descriptor?? [ 208.432825][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1503'. [ 208.503698][T11382] mtd partition "" doesn't have enough space: 0x20003 < 0x2001f, disabled [ 208.515709][T11382] ftl_cs: FTL header not found. [ 208.631327][T11392] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 208.631374][ T5891] usb 11-1: USB disconnect, device number 2 [ 208.790399][T11396] geneve0 speed is unknown, defaulting to 1000 [ 208.799395][T11396] geneve0 speed is unknown, defaulting to 1000 [ 208.804185][T11396] geneve0 speed is unknown, defaulting to 1000 [ 208.804457][T11401] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1509'. [ 208.811029][T11401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1509'. [ 208.944376][T11411] syzkaller0: entered promiscuous mode [ 208.952270][T11411] syzkaller0: entered allmulticast mode [ 209.028305][ T5822] geneve0 speed is unknown, defaulting to 1000 [ 209.042163][T11396] infiniband syz2: set active [ 209.045200][T11396] infiniband syz2: added geneve0 [ 209.058553][T11339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.067872][T11339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.073336][T11396] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 209.079496][T11396] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 209.085476][T11396] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 209.121358][T11396] RDS/IB: syz2: added [ 209.124302][T11396] smc: adding ib device syz2 with port count 1 [ 209.127244][T11396] smc: ib device syz2 port 1 has no pnetid [ 209.136112][ T5108] geneve0 speed is unknown, defaulting to 1000 [ 209.141084][T11396] geneve0 speed is unknown, defaulting to 1000 [ 209.202388][T11420] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 209.284959][ T5891] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 209.353278][T11396] geneve0 speed is unknown, defaulting to 1000 [ 209.378765][T11430] Cannot find del_set index 14804 as target [ 209.443111][T11430] loop2: detected capacity change from 0 to 7 [ 209.445012][ T5891] usb 11-1: Using ep0 maxpacket: 32 [ 209.462392][T11430] Dev loop2: unable to read RDB block 7 [ 209.465262][T11430] loop2: unable to read partition table [ 209.466517][ T5891] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 209.468511][T11430] loop2: partition table beyond EOD, truncated [ 209.476336][T11430] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 209.484373][ T5891] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 209.488990][ T5891] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 209.493046][ T5891] usb 11-1: Product: syz [ 209.495475][ T5891] usb 11-1: Manufacturer: syz [ 209.497566][ T5891] usb 11-1: SerialNumber: syz [ 209.515824][ T5891] usb 11-1: config 0 descriptor?? [ 209.519116][T11340] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 209.605850][T11396] geneve0 speed is unknown, defaulting to 1000 [ 209.627437][T11436] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 209.706701][T11396] geneve0 speed is unknown, defaulting to 1000 [ 209.724158][T11340] ipt_REJECT: TCP_RESET invalid for non-tcp [ 209.724950][T11339] ipt_REJECT: TCP_RESET invalid for non-tcp [ 209.799277][T11396] geneve0 speed is unknown, defaulting to 1000 [ 209.881811][T11449] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 209.885950][T11449] overlayfs: overlapping lowerdir path [ 209.898166][T11396] geneve0 speed is unknown, defaulting to 1000 [ 210.056559][ T5108] usb 11-1: USB disconnect, device number 3 [ 210.282629][T11472] xt_hashlimit: invalid interval [ 210.365037][ T6117] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 210.524932][ T6117] usb 9-1: Using ep0 maxpacket: 32 [ 210.529155][ T6117] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.533286][ T6117] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.537167][ T6117] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 210.540333][ T6117] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.545399][ T6117] usb 9-1: config 0 descriptor?? [ 210.912858][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 210.912881][ T42] audit: type=1400 audit(4000000451.647:877): avc: denied { bind } for pid=11483 comm="syz.6.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 210.978245][T11493] input: syz0 as /devices/virtual/input/input30 [ 211.013731][ T6117] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 211.099534][ T42] audit: type=1400 audit(4000000451.837:878): avc: denied { append } for pid=11505 comm="syz.6.1542" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 211.111461][ T42] audit: type=1400 audit(4000000451.847:879): avc: denied { write } for pid=11502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.180467][ T42] audit: type=1400 audit(4000000451.917:880): avc: denied { write } for pid=11511 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.196428][ T42] audit: type=1326 audit(4000000451.937:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11494 comm="syz.5.1539" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdbdf9de59 code=0x0 [ 211.227191][T11503] speed is unknown, defaulting to 1000 [ 211.266374][ T42] audit: type=1400 audit(4000000452.007:882): avc: denied { write } for pid=11516 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.300263][T11503] geneve0 speed is unknown, defaulting to 1000 [ 211.344275][ T42] audit: type=1400 audit(4000000452.077:883): avc: denied { write } for pid=11520 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.443095][ T42] audit: type=1400 audit(4000000452.177:884): avc: denied { write } for pid=11523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.523532][ T42] audit: type=1400 audit(4000000452.257:885): avc: denied { write } for pid=11526 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.641900][ T42] audit: type=1400 audit(4000000452.377:886): avc: denied { write } for pid=11529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.394997][ T5892] usb 9-1: reset high-speed USB device number 32 using dummy_hcd [ 213.455153][ T5755] Bluetooth: hci3: command 0x0405 tx timeout [ 213.459093][ T5891] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 213.463233][ T5891] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 215.535092][ T5891] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 215.535259][ T5755] Bluetooth: hci1: command 0x0c1a tx timeout [ 215.537807][ T5891] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 217.595201][ T5892] usb 9-1: device descriptor read/64, error -110 [ 217.615253][ T5755] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.617510][ T5891] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 217.620316][ T5891] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 217.944007][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 217.944025][ T42] audit: type=1400 audit(4000000458.677:892): avc: denied { listen } for pid=11570 comm="syz.6.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 217.959341][T11553] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 218.079182][ T42] audit: type=1326 audit(4000000458.817:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11584 comm="syz.1.1555" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2525d9de59 code=0x0 [ 218.097547][ T42] audit: type=1326 audit(4000000458.817:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11584 comm="syz.1.1555" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2525d9de59 code=0x0 [ 218.109208][ T42] audit: type=1400 audit(4000000458.847:895): avc: denied { listen } for pid=11587 comm="syz.5.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 218.179245][ T42] audit: type=1326 audit(4000000458.917:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.5.1556" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdbdf9de59 code=0x0 [ 218.335143][ T5892] usb 9-1: reset high-speed USB device number 32 using dummy_hcd [ 218.439209][T11595] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 218.441401][T11595] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 218.444094][T11595] vhci_hcd vhci_hcd.0: Device attached [ 218.454659][T11596] vhci_hcd: connection closed [ 218.457409][ T12] vhci_hcd vhci_hcd.6: stop threads [ 218.463757][ T12] vhci_hcd vhci_hcd.6: release socket [ 218.466403][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 218.484957][ T5892] usb 9-1: device descriptor read/64, error -71 [ 218.754867][ T5892] usb 9-1: reset high-speed USB device number 32 using dummy_hcd [ 218.776233][ T5892] usb 9-1: device descriptor read/8, error -71 [ 219.044909][ T5892] usb 9-1: reset high-speed USB device number 32 using dummy_hcd [ 219.065464][ T5892] usb 9-1: device descriptor read/8, error -71 [ 219.117314][T11604] binder: 11603:11604 ioctl c0306201 200000000080 returned -22 [ 219.164577][T11613] __nla_validate_parse: 3 callbacks suppressed [ 219.164598][T11613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1564'. [ 219.171202][T11613] netlink: 'syz.1.1564': attribute type 7 has an invalid length. [ 219.174583][T11613] netlink: 'syz.1.1564': attribute type 8 has an invalid length. [ 219.179213][ T5822] usb 9-1: USB disconnect, device number 32 [ 219.182416][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1564'. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 219.220844][ T42] audit: type=1400 audit(4000000459.947:897): avc: denied { write } for pid=11612 comm="syz.1.1564" name="/" dev="9p" ino=72374877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.236690][ T42] audit: type=1400 audit(4000000459.957:898): avc: denied { map } for pid=11612 comm="syz.1.1564" path="/434/file0/blkio.throttle.io_service_bytes" dev="9p" ino=72374961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 219.344931][ T5822] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 219.351038][T11619] 9p filesystem being mounted at /40/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 219.362286][ T42] audit: type=1400 audit(4000000460.097:899): avc: denied { write } for pid=11618 comm="syz.5.1567" name="/" dev="9p" ino=72374877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.494938][ T5822] usb 9-1: device descriptor read/64, error -71 [ 219.587181][T11623] BUG: using smp_processor_id() in preemptible [00000000] code: syz.5.1568/11623 [ 219.590274][T11623] caller is bpf_mem_cache_free_rcu+0x41/0xb0 [ 219.592544][T11623] CPU: 2 UID: 0 PID: 11623 Comm: syz.5.1568 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.592564][T11623] Tainted: [L]=SOFTLOCKUP [ 219.592570][T11623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.592601][T11623] Call Trace: [ 219.592628][T11623] [ 219.592634][T11623] dump_stack_lvl+0x100/0x190 [ 219.592701][T11623] check_preemption_disabled+0xd8/0xe0 [ 219.592782][T11623] bpf_mem_cache_free_rcu+0x41/0xb0 [ 219.592800][T11623] rhtab_delete_elem+0x96f/0x24e0 [ 219.592840][T11623] __rhtab_map_lookup_and_delete_batch+0x925/0xf40 [ 219.592867][T11623] ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10 [ 219.592887][T11623] bpf_map_do_batch+0x2b2/0x6d0 [ 219.592907][T11623] __sys_bpf+0xeb8/0x4e80 [ 219.592932][T11623] ? __pfx___sys_bpf+0x10/0x10 [ 219.592950][T11623] ? find_held_lock+0x2b/0x80 [ 219.593026][T11623] ? futex_wake+0x4ea/0x5e0 [ 219.593069][T11623] ? futex_wait+0x11e/0x370 [ 219.593089][T11623] ? __pfx_futex_wait+0x10/0x10 [ 219.593125][T11623] ? __x64_sys_futex+0x34f/0x4d0 [ 219.593145][T11623] ? __x64_sys_futex+0x358/0x4d0 [ 219.593165][T11623] ? __pfx___x64_sys_futex+0x10/0x10 [ 219.593186][T11623] ? __x64_sys_bpf+0xce/0x140 [ 219.593207][T11623] __x64_sys_bpf+0xce/0x140 [ 219.593228][T11623] ? do_syscall_64+0x90/0x870 [ 219.593248][T11623] do_syscall_64+0x115/0x870 [ 219.593264][T11623] ? clear_bhb_loop+0x40/0x90 [ 219.593280][T11623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.593292][T11623] RIP: 0033:0x7fbdbdf9de59 [ 219.593305][T11623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.593317][T11623] RSP: 002b:00007fbdbed85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 219.593352][T11623] RAX: ffffffffffffffda RBX: 00007fbdbe225fa0 RCX: 00007fbdbdf9de59 [ 219.593360][T11623] RDX: 0000000000000038 RSI: 0000200000000700 RDI: 0000000000000019 [ 219.593368][T11623] RBP: 00007fbdbe033e6f R08: 0000000000000000 R09: 0000000000000000 [ 219.593375][T11623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.593383][T11623] R13: 00007fbdbe226038 R14: 00007fbdbe225fa0 R15: 00007fffcd5ef578 [ 219.593400][T11623] [ 219.687775][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1566'. [ 219.767747][T11625] dvmrp0: entered allmulticast mode [ 219.804895][ T5822] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 219.935020][ T5822] usb 9-1: device descriptor read/64, error -71 [ 220.045760][ T5822] usb usb9-port1: attempt power cycle [ 220.395089][ T5822] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 220.417818][ T5822] usb 9-1: device descriptor read/8, error -71 [ 220.665236][ T5822] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 220.685593][ T5822] usb 9-1: device descriptor read/8, error -71 [ 220.805417][ T5822] usb usb9-port1: unable to enumerate USB device