last executing test programs: 10m39.307164234s ago: executing program 32 (id=258): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010101}, 0x8) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000000c0)=0x8, 0x4) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff}) (async) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000240)={@empty, @multicast2, @multicast2}, 0xc) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x996}}, './file0\x00'}) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f00000002c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010100}, 0xc) openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = getpid() r5 = syz_open_procfs(r4, &(0x7f0000000380)='net/rfcomm\x00') r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x40) (async) r7 = socket$inet6(0xa, 0x80000, 0x6) fsync(r7) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000500)) (async) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34) (async) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000540), 0x4c400, 0x0) write$dsp(r9, &(0x7f0000000580)="4735d7f0757ee9e41f4bf8bed875666e6af42172d4fd9574963332851c7e192d3114cf0dc8fd51f194cd4e621128ab5284a17a3165e01f56f597799442e0bfa8e523b73eac982d6cc1df8370e95a7ff5681b6e8ad56b47af70581c06ecef38cc64073379fd46c2bb083a5bace709989bbabd6f01dbaa893e1314d49e629ed8ac985ea3bc33772f756c973ffb5bd815245d172bc4bc79300f920cde175a9c8f61", 0xa0) (async) getpeername$tipc(r5, &(0x7f0000000640), &(0x7f0000000680)=0x10) (async) ioctl$FS_IOC_SETFSLABEL(r8, 0x41009432, &(0x7f00000006c0)="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") (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x6, 0x401, 0x9, 0x4, 0x2, 0x7a1, 0xa}, &(0x7f0000000880)=0x9c) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000008c0)=@assoc_value={r10}, &(0x7f0000000900)=0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=@getneigh={0x14, 0x1e, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x44) (async) sendmsg$nl_route(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x4, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x10) 9m44.35074855s ago: executing program 33 (id=917): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r2, r2, 0x2f}, 0x20) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='/'], 0x20) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r2, 0x2f, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r3, r0, 0x0, 0x80009) 8m55.044783007s ago: executing program 34 (id=1611): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x007', @ANYBLOB="1800000004000000020000000000000001"], 0x50) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) (async) socketpair(0x1e, 0xa, 0xe, &(0x7f0000000040)) 8m18.247206696s ago: executing program 35 (id=2056): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b", 0xe3}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="680000000000000017010000020000004f000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16000000000018000000000000001701000004000000060000000000000036b01a06bfa0450a95c85e192c3e04beaa663010259f815dcdb6cf3c57b707d8"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef2860", 0x5c}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d", 0x30}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb5584920271", 0x43}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df", 0xc4}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000000100)=""/54) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x26) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x51) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000280)=[{0x1d, '\x00', @st={0x4, [{0x2, @uvalue=0x8}, {0x0, @uvalue=0xaa}, {0x0, @uvalue=0x3}, {0x3, @svalue=0xd7}]}, 0x3}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) 7m43.131379099s ago: executing program 36 (id=2371): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f00000005c0)={0x0, 0xc5bd, 0x40, 0x2, 0x26e}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x4, 0xecd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x80}}}, &(0x7f0000000300)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000440)={0x0, 0x5cce, 0x8, 0x3, 0xfd, 0x0, r0}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe279, 0x0, 0x0, 0x19f, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfbae, 0x2000, 0x0, 0x329, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e9b, 0x4000, 0x3, 0x326, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4b58, 0x7a3869e852380492, 0x3, 0x2bd, 0x0, r0}}], 0x4, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r7, 0xb15, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40884}, 0x1400c000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r12) sendmsg$NLBL_MGMT_C_REMOVE(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r13, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x840) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r13, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x13}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048000}, 0x80) 6m50.803296187s ago: executing program 37 (id=3036): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c001980"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{}, {r4, r5/1000+10000}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040), 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x404c091) ioctl$sock_bt_hci(r8, 0x800448d5, &(0x7f0000000080)) bind$bt_hci(r3, &(0x7f00000001c0), 0x6) mount(&(0x7f00000004c0)=@nullb, &(0x7f0000000440)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x0, 0x0) 6m32.213589355s ago: executing program 38 (id=3076): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020000000000000008400000008000000200100000000000000000400000000002000000000000000840000000800000000000000000000000000ffff0a010100"], 0x58, 0x4855}, 0x24000052) 6m27.26208241s ago: executing program 39 (id=3146): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$CDROMPLAYMSF(r0, 0x5303, &(0x7f0000000040)={0x93, 0xd, 0x31, 0x1, 0x2, 0x7}) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x140f, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x44000) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002240), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x64, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xca8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x10001}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000023c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x4c, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x68}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf975}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc81d}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20048091) fcntl$setsig(r5, 0xa, 0x1a) (async) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x80048070}, 0xc, &(0x7f0000002680)={&(0x7f0000002540)={0x11c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffde}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4800}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'team0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'gre0\x00'}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x10044050}, 0x4000000) (async) r7 = fcntl$getown(r0, 0x9) sched_setaffinity(r7, 0x8, &(0x7f0000002700)=0x44) r8 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r8, &(0x7f0000002740)="894efb79111be46984b1d65d1287a77ba9ce0364203df4181889", 0x1a) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x50, 0x0, 0x920, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) r10 = syz_open_dev$dri(&(0x7f00000028c0), 0x8393, 0x240) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002900)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000002a80)={&(0x7f0000002980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000029c0)=[0x0, 0x0, 0x0], &(0x7f0000002a00)=[0x0], &(0x7f0000002a40)=[0x0, 0x0], 0x7, 0x3, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, &(0x7f0000002b00)={0x0, r11, r12, 0x0, 0x0, 0x4, &(0x7f0000002ac0)=[0x0, 0x0, 0x0, 0x0]}) (async) close(r2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r10, 0xc01064bd, &(0x7f0000002c40)={&(0x7f0000002b40)="7006a12e63238912e88db8d9516638041c5707339a219207496ba7d9e5286193fdb47040843fa849674c04305b6a8876b20b34f5222393c7112f15131f5e0f0aca10f9aa0aea3d82f50d76e9622f86bc9b07cf5d31d5d71ebe33c7657b45ae9492cd94ca42a80e814981c9cb7b259ff408005e320b8dd9aa74d5158e61e4b4747972059ad0b3c9b17f29c2e1897da676c868fb46a4739ff62546fea30d8e0559848d4a712b2ec1ac57f52a37c1f9754bf54039f52113e70a29cfb65ba249da31788d8efb71c9d11f597d188f924eeff4841edd6dca700e15d43009d3a6a82bb6ab342f0c9e9be7a58a87e6442728b7a3cee8", 0xf2}) (async) ioctl$CDROMREADCOOKED(r0, 0x5315, &(0x7f0000002c80)) (async) ioctl$XFS_IOC_GET_RESBLKS(0xffffffffffffffff, 0x80105873, &(0x7f0000003700)) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000003740)={0x29, 0x3, 0x0, {0x2, 0x8, 0x0, 'geneve1\x00'}}, 0x29) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) 6m14.800287349s ago: executing program 40 (id=3427): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000501"], 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r5 = socket(0x23, 0x80805, 0x0) accept(r5, 0x0, 0x0) socket(0xa, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0xfffffffffffffe6d}, 0x20000001) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) r10 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000080)={0x20004, r8, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000280)={0x1, r12, 0xff, 0x100007, 0xa, 0x1ff, 0x80001}) close(0x3) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x3, 0x0, 0x1000}, 0x20) 5m34.229702085s ago: executing program 41 (id=3728): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/route\x00') preadv(r1, &(0x7f0000001180)=[{&(0x7f0000000180)=""/181, 0xb5}], 0x1, 0x9bfd, 0x2) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x30}, &(0x7f00000000c0)=0x18) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x30}, &(0x7f00000000c0)=0x18) connect(r0, &(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) connect(r0, &(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) 4m57.605629304s ago: executing program 42 (id=4157): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x8e341d, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x14, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)={[&(0x7f0000000100)='\x1a$\\\x00']}, 0x0) 4m31.318251792s ago: executing program 43 (id=4305): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000e80)) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000640)="97452a307eb495fe223600000000000000", 0x11}, {&(0x7f00000000c0)="9e762d", 0x3}], 0x2, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102}}}], 0x20}, 0x2400c804) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x414881, 0x1c3) fdatasync(r2) r3 = io_uring_setup(0x664b, &(0x7f0000000180)) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000018c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0xb799, 0x3}, {0x0}, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/89, 0x59}], 0x1, 0x30, 0xee}}], 0x90}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="08b4fffffede", 0x0, 0xfffffffe, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x1, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xe5e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x80) mlockall(0x7) 2m45.845932831s ago: executing program 44 (id=5297): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$nci(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) mlock(&(0x7f000015c000/0x3000)=nil, 0x3000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair(0x2, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x0, 0xe2bc, 0x0, @loopback, @remote, 0x20, 0x20, 0x3ff, 0x200}}) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, @ax25={0x3, @default, 0x3}, @xdp={0x2c, 0x1, r3, 0x22}, @vsock={0x28, 0x0, 0x2711, @local}, 0x1ff, 0x0, 0x0, 0x0, 0x100, &(0x7f0000000280)='team0\x00', 0x4, 0x8, 0xffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) ioctl$BLKPG(r4, 0x5415, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="240000002600090122bd7008f9ffffff1c7c00000800030047"], 0x24}, 0x1, 0x0, 0x0, 0x1000c953}, 0x0) read$dsp(r4, &(0x7f0000000340)=""/200, 0xc8) 2m35.060452042s ago: executing program 5 (id=5403): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@flushpolicy={0x10, 0x12, 0x105, 0x4, 0x25dfdbff}, 0x10}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x76, 0x101301) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x8, 0x228200) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f00000000c0)={0x5fdc, 0x10, [{0x6}, {0xf, 0x1}, {0x4}, {0xd}, {0xc}, {0x9, 0x1}, {0xc}, {0x6, 0x1}, {0x2, 0x1}, {0xe}, {0x4}, {0x6}, {0xb}, {0x5}, {0x1}, {0x6, 0x1}]}) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) fanotify_init(0x8, 0x8000) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r10 = socket$phonet(0x23, 0x2, 0x1) recvmsg(r10, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x42) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000880)=@urb_type_iso={0x0, {0x1, 0x1}, 0x402, 0x2, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x8001, 0x0, [{0x0, 0x0, 0x8}]}) 2m34.819932688s ago: executing program 5 (id=5405): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) move_mount(0xffffffffffffffff, &(0x7f0000001040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000002200)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002100)={0x8c, r2, 0x420, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xa, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff10}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd5c}]}]}, 0x8c}}, 0x40000c4) r3 = dup(r0) write$UHID_INPUT(r3, &(0x7f0000002240)={0x8, {"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", 0x1000}}, 0x1006) 2m34.726349627s ago: executing program 5 (id=5406): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000200)={&(0x7f00000003c0)=[r1], &(0x7f0000000400)=[0xffffffffffffa820], 0x800000ea25, 0x1, 0x6}) r2 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x9, @vbi={0x8, 0xfffff2ed, 0x3, 0x59555956, [0x9, 0x4], [0x8, 0x1], 0x108}}) 2m34.72489367s ago: executing program 5 (id=5407): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="07000000040000000001000001ee000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 2m34.621266378s ago: executing program 5 (id=5408): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000200)="bf021258234e27fc80d37944f330b6f386964cb274535bd148fa9119709b3eedd57546a8243985db272c2fcc53452dfecbe5ee7badb07b3dabcc51ba36da41f46b1f5f0da7e4a26b13600a3b5f1cac0b1ce052cbac0640d2868d0f5253ad4223594e9615c649852204e0dfc76a2e889eaa58eeed215fc9388aaeb24152d02888e7", 0x81}], 0x1}, 0x4001) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r0, &(0x7f0000000340)="8b", 0x47f, 0x6}]) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r5, 0x80084522, &(0x7f0000001f40)=""/231) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0x17) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x4e) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x8, r4, 0x0, 0x4, 0x2c, &(0x7f0000000000)="2610bb0c32caf6045eda890c7d4b36aa98489a13c57a18f8844a0c1d48458eec3aa78f5c30555c266d651d92", 0x1}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r6, 0x0, &(0x7f0000000340)=""/140}, 0x20) 2m33.741370676s ago: executing program 5 (id=5410): r0 = open(&(0x7f0000000000)='./file0\x00', 0x444900, 0x59) fcntl$setlease(r0, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x2) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400000000fef4df2500000000", @ANYRES32=0x0, @ANYBLOB="004900008a0a03001c0012800b00010067726574617000000c0002800500130001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10004}, 0x4080) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r3, 0x40106e8c, &(0x7f0000000700)=[0x7, 0x10]) r4 = syz_ublk_setup_io_uring(0x2409, &(0x7f0000000300)={0x0, 0xdf3f, 0x80, 0x1, 0x1da}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000240)="66b8e20000000f23c00f21f8663502000e000f23f866b8cf957a2c0f23d80f21f86635c00000000f23f80f01c9360f070f00140f9e220f090f20c06635100000000f22c0ba2100b010eef2f018af0300"}], 0xf, 0x18, 0x0, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000240)=ANY=[], 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01fca2712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f0000000440)={0x40000000, 0x3ef}, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x346f, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000740)=0x101) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '\x9e\x01h\n\xcd\xf1\x833g\x91\xabP\x99\xf4V\xbaP\xa99\xa8N\t.\xf5\v\x97\xc5\xc4\xf4~\xe2\xa6^\\\x1a \x84\xc7*\xe3\xf2Y\xc6\xb8\xa0\xa4`&\a\x91/\x9dq\xb5\xc2S\xef\xcf\x12\x96+\xe8\xd0\xff\xff\x1d\xc6\x84\xcf\xcb\xabq\xcaF!3'}}]}}) 2m18.581685251s ago: executing program 45 (id=5410): r0 = open(&(0x7f0000000000)='./file0\x00', 0x444900, 0x59) fcntl$setlease(r0, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x2) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400000000fef4df2500000000", @ANYRES32=0x0, @ANYBLOB="004900008a0a03001c0012800b00010067726574617000000c0002800500130001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10004}, 0x4080) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r3, 0x40106e8c, &(0x7f0000000700)=[0x7, 0x10]) r4 = syz_ublk_setup_io_uring(0x2409, &(0x7f0000000300)={0x0, 0xdf3f, 0x80, 0x1, 0x1da}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000240)="66b8e20000000f23c00f21f8663502000e000f23f866b8cf957a2c0f23d80f21f86635c00000000f23f80f01c9360f070f00140f9e220f090f20c06635100000000f22c0ba2100b010eef2f018af0300"}], 0xf, 0x18, 0x0, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000240)=ANY=[], 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01fca2712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f0000000440)={0x40000000, 0x3ef}, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x346f, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000740)=0x101) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '\x9e\x01h\n\xcd\xf1\x833g\x91\xabP\x99\xf4V\xbaP\xa99\xa8N\t.\xf5\v\x97\xc5\xc4\xf4~\xe2\xa6^\\\x1a \x84\xc7*\xe3\xf2Y\xc6\xb8\xa0\xa4`&\a\x91/\x9dq\xb5\xc2S\xef\xcf\x12\x96+\xe8\xd0\xff\xff\x1d\xc6\x84\xcf\xcb\xabq\xcaF!3'}}]}}) 1m54.611018908s ago: executing program 9 (id=5797): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffee2, &(0x7f0000000040)={&(0x7f00000000c0)=@setneightbl={0x12, 0x43, 0x1, 0x70bd25, 0x25dfdbfb, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x7fff}, @NDTA_THRESH1={0x8, 0x2, 0x8}, @NDTA_THRESH3={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40008c4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="420f01cb64366566d9eeb9b80a00000f2318ba000000000f3042c10890f30f015e00c4a3515ea2f2ffffff00f34a0f2c77000fc72e4e0fc76d28", 0x3a}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m54.610628594s ago: executing program 9 (id=5798): capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaeaaffffffffff74ab00450001280000000000019078ac1e0001ffffffff0e0090787fff01fbfffffff30054271e"], 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r2, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) (async) r4 = memfd_secret(0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x48960}, [@IFLA_IFNAME={0x14, 0x3, 'lo\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5}}]}]}]}, 0x50}}, 0x80000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) 1m54.530339741s ago: executing program 9 (id=5799): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84340}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x4, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m54.381724569s ago: executing program 9 (id=5800): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) (async) r1 = syz_clone(0x80100, &(0x7f0000000080)="ca1ad234964a0516756b2b7cb84e107290baa088a8686d5fcbadc8b275678d1de0e928befa7a0fa09e9d73b5716f6d2e7ac5de1e265b679318ee152870ae25e10adccd24c21722e51ad981199ca2c63c03e1ff29b8504d5045e042fa5c851ff6a91b994685db21a57f", 0x69, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)) ioprio_set$pid(0x1, r1, 0x4000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.state\x00', 0x275a, 0x0) ftruncate(r2, 0x101fff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000440)}) (async) ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0xb, 0x100a}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f00000002c0)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc4cec0f01310f019c09000f01c2", 0x6f}], 0x1, 0x7d, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x400}) (async) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r4, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) copy_file_range(r2, 0x0, r0, 0x0, 0xe003e45c, 0x700000000000000) 1m54.121787811s ago: executing program 9 (id=5802): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24, 0xe091}, 0x1c) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x3, 0x0, [{0x40000092}, {0x890}, {0x260, 0x0, 0x5}]}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000580)='vegas', 0x5) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc52b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0xf0, 0x2, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x3, 0x90, {0x9, 0x21, 0xff, 0x9, 0x1, {0x22, 0x3c8}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x3, 0x7f}}}}}]}}]}}, 0x0) (async) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) (async) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) (async) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) (async, rerun: 32) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x1, 0x0) (rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x80, r6, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x8e}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x80}}, 0x0) (async) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) (async, rerun: 64) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4f0a2c00e436e34c) (rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000040)) 1m53.519935479s ago: executing program 9 (id=5806): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x178, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x13}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fc2ce24a31990fbc1fd3cd9e74"}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "5a928d63b5"}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fc4eb82"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "af7de26605"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "abe89e1bad93b13fdec0d796ed"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xcf6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x678}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20a}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ef}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x232}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) socket$inet6(0xa, 0x3, 0x8000000003c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 1m53.482739762s ago: executing program 46 (id=5806): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x178, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x13}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fc2ce24a31990fbc1fd3cd9e74"}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "5a928d63b5"}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "5fc4eb82"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "af7de26605"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "abe89e1bad93b13fdec0d796ed"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xcf6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x678}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20a}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ef}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x232}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) socket$inet6(0xa, 0x3, 0x8000000003c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 1m33.327462661s ago: executing program 1 (id=6028): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newsa={0xf0, 0x10, 0xeac0e19b6999623b, 0x0, 0x0, {{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x11}, 0x4d4, 0x2b}, @in, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0xfd}}, 0xf0}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xec5d, 0x1c881, 0x0, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad"], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x40, r3, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x81}]}, 0x40}}, 0x0) 1m33.238847376s ago: executing program 1 (id=6031): r0 = socket$inet6(0x10, 0x3, 0xfffffffe) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x5, 0x0, 0x0, r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x7, 0xffeffffe}, {0x16, 0x0, 0x0, 0x40000000}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x408d6, 0x0, 0x0) 1m33.139668515s ago: executing program 1 (id=6032): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="1800000000000000000000000000000061198000000000009500000000000000ae677c82d651785d7fbd2bc827892f223bd11f2b91c9a8af1ca9b2794220f576a66b9a0dbfc3be5c4229e6a4d49fa27e5b0f78e77229fa58b716e113c495598c0d87a591d0588e434a5d81822230cf5f09d91f2207b6f2c2c25adcc60bc50259494912"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000001100010029bd7000fbdbdf2520010000000000000000000000000001000004d60a08000000000000001414bb000000000000000000000000e00000010000000000000000000000000000000002000000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@gettaction={0x14, 0x5a, 0x1, 0xffffffff}, 0x14}}, 0x24004000) (async, rerun: 32) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) (async, rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181843, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd2(0xe5c, 0x80000) (async, rerun: 64) r7 = eventfd2(0x42000006, 0x801) (rerun: 64) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000240)={r7, 0x10, 0x2, r6}) (async) writev(r3, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000040)="b845d9", 0x3}], 0x2) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000240)={0x2020}, 0x2020) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x30}, 0xc4) 1m33.028203254s ago: executing program 1 (id=6034): ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x2, 0x1, 0x0, 0xc, 0x7fffffff, 0x2}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x49, 0x10, 0x0, 0x0}, {0x49, 0x0, 0x0, 0x0}], 0x2}) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f00000040c0), 0x87, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xff}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 1m31.560993708s ago: executing program 1 (id=6046): r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r2, @ANYRES16], 0x14) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x380c}, 0x1c) 1m30.934855865s ago: executing program 1 (id=6051): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="cca9efaa32a4009ea301f8c4cd3e8a2800daf9f7fcadfe677fe774109efbab5e9a00a08f6145640ff49d2c711fdf719ea8daa38a5306ddbf11a6ed1b53f931d8853c57a829aababd627e4f252059df3a"}) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x4, 0x0, 0x6, 0x0, "1e73ee7a1ceb334e593f7671c26124b3b85c39f59b505df1dc367e063fa3087c906ae4362cbccec118a7372a2d4fcb8b9167e5baf881512677b31b0c6f791f1d", "41690bdea535142fb848f691d575ecef90f894744cd1664f840c9058bed72825", [0x6, 0xc]}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) 1m30.881949029s ago: executing program 47 (id=6051): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="cca9efaa32a4009ea301f8c4cd3e8a2800daf9f7fcadfe677fe774109efbab5e9a00a08f6145640ff49d2c711fdf719ea8daa38a5306ddbf11a6ed1b53f931d8853c57a829aababd627e4f252059df3a"}) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x4, 0x0, 0x6, 0x0, "1e73ee7a1ceb334e593f7671c26124b3b85c39f59b505df1dc367e063fa3087c906ae4362cbccec118a7372a2d4fcb8b9167e5baf881512677b31b0c6f791f1d", "41690bdea535142fb848f691d575ecef90f894744cd1664f840c9058bed72825", [0x6, 0xc]}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) 1m18.009316755s ago: executing program 7 (id=6184): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (rerun: 64) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000480)={0x3, 0x5, 0x5, 0xf}) (async) getsockopt$inet_tcp_buf(r3, 0x6, 0x21, &(0x7f00000006c0)=""/155, &(0x7f00000007c0)=0x9b) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 1m17.7589529s ago: executing program 7 (id=6187): syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@broadcast, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x40, 0x3a, 0x1, @empty, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x24a4, {0x7, 0x6, "b1ce39", 0x200, 0x33, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@srh={0x4, 0x0, 0x4, 0x0, 0x0, 0x50, 0x9}], "e7dee9204a281be3"}}}}}}}, 0x0) socket$packet(0x11, 0xc2340cf684d20d18, 0x300) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800470000300000000000019078ac1e0001ac1414aa860600da000300000e009078000741be5f907bc6000000040000a40a"], 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x13, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}}, 0x0) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000002380)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002340)={&(0x7f00000021c0)={0x11c, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffe}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2f5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5b0}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf86}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xeb}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8001}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x400}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x10006003}, 0x40011) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) r6 = syz_open_dev$dri(&(0x7f0000000f00), 0x1, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000280)=[@request_death={0x400c6313}, @decrefs], 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000300)={0x4, r10, r5}) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2084) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010029bd7000fedbdf256300000008000300", @ANYRES32=r14], 0x38}, 0x1, 0x0, 0x0, 0x4000050}, 0x4048000) (async) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r4, 0xc0186445, &(0x7f00000023c0)={0xfffffffffffffff8, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r9, 0xc0106446, &(0x7f0000002400)={r15}) 1m17.60948081s ago: executing program 7 (id=6188): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$watch_queue(r1, &(0x7f0000000140)=""/4096, 0x1000) sendto$phonet(r1, &(0x7f00000001c0)="3807c30ba2c43ae7594b3cb084f5a067b8eedd070c7610009da2107bba7e13c813f53ae5a9f174301e30d7494ed081cee10abba3703d6a90d8aee0f9696ed5bdf5871623edd2ff743647ac76871bfb97be92cfd917e29b866265f7eadf23298b48940eb525a9ba5659125ce863d5bbdda90b225cdb89ca9db83d52cbf683cfe8cf189d5afcaa39d27a0dfc6e98987c1c4bd2c787f1df7ded88c3b7e9a8caf13fb9dfa65bae07ec51736cd912a88b9b7d69e71aae1241ef1968dead54c214008398a2d510aa8d6294f6043d0a86c4805e8ca92c0a89", 0xd5, 0x40000, &(0x7f00000002c0)={0x23, 0x6, 0x80, 0x1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee00) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ac1414280c0001800800010000ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x5, r0, &(0x7f0000000a00)="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", 0x200, 0x200}]) 1m17.603841743s ago: executing program 7 (id=6190): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) llistxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200080c0, &(0x7f0000000400)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1e}, 0x1c) 1m17.467280707s ago: executing program 7 (id=6192): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x1e}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00'}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000001280), 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000801000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) io_uring_setup(0xd, &(0x7f0000000040)={0x0, 0x24c8a1, 0x1c891, 0x8, 0xd1}) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000380)='./file1/file0\x00', 0x40, 0x147) mkdirat(r2, &(0x7f0000000300)='./file1\x00', 0x131) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) recvmmsg(r1, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1m17.390414057s ago: executing program 7 (id=6194): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x16, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 1m3.490354265s ago: executing program 8 (id=6309): r0 = socket(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x22024, 0x4) (async) r1 = socket(0x2, 0x3, 0xff) (async, rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000100)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0004010a0000000d0085a168216b46d32345653600648d040012000a00050049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004d1ddf66ed538f252325000"/120, 0x78, 0x0, 0x0, 0x0) 1m3.400715286s ago: executing program 8 (id=6311): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b7ec) write$binfmt_elf32(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x2, 0x7, 0x55, 0x1, 0x3, 0x6, 0xffffff00, 0x19e, 0x38, 0x160, 0x9, 0x9, 0x20, 0x1, 0x7, 0x7, 0x101}, [{0x3, 0x3, 0x7f, 0x1, 0x8, 0x400, 0x7fff, 0x7f}]}, 0x58) (async) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRESOCT], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="120000000401000000000000005ea8756ffb77bf10fcc4239e5ba6ecfceb1a871ebbb3020ba78ccb0b45bfd75fb4e57ac1b06ab6060e7cb62cbda9574236c1efc6c31ffaab87fc27dabfb82ed076b8d720e4dc166e0ccfa304f20defaf5920a089e538452c5a5ea391680bb26145835a7ea27b96a4ec35b245d2726445b0a2855f2ce47636d5c0a0a2ff3d"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r2, 0x7, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003500)={r2, &(0x7f0000002480)="cb8774e816995402976627d8dcb96b0023b302d61fa480a4ffc2c4d9096641ae9cad3f86803586ed7ad3537541472b7bb9da128008343550d4c2b430cca3fae3c6e94caf69663e3ce9d6ce", &(0x7f0000002500)=""/4096}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r6, 0x10000) shutdown(r5, 0x0) (async) connect$unix(r5, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r7 = accept(r6, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000000)='\x00', 0x1, 0x800c815, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000003640)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003600)={&(0x7f0000003580)=ANY=[@ANYBLOB="50040000", @ANYRES16=r3, @ANYBLOB="000229bd7000fddbdf25420000000c00990001040000520000000a0006003825cb2545e800000a0006001ced5bde0e1400000a00060050505050505000000a0006005050505050500000"], 0x50}, 0x1, 0x0, 0x0, 0x8000000}, 0x20004094) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000002340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010022bd7000000000008900000008000300", @ANYRES32=r8, @ANYBLOB="14001d801000008006000500f00000000400040051006a24fda5af3a95eacc0bd348f3924bbc0d142a79981596e86975f3ce4db61abebd4e9023527a1a1107d7b60a5fe54db4d3e1ee28a9d3613c9c655e48a09fa6c5f7b25c264b21fa2233fd14ebe9864cb6cd9c2f85260a24e66f1c9d1b6afab29dfb103aa890dda59aec6ff842c8dee566e8a14a083068d1"], 0x30}, 0x1, 0x0, 0x0, 0xc081}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x2c, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x1000003, 0x100000, 0x1}, 0x10) (async) write(r9, &(0x7f0000000000)="1c0000001a005f0214f9f407000904ff80000000fe000000000a0000", 0x1c) (async) r10 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000000, 0x10012, r10, 0x4000) (async) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r11, 0xfffffffc) (async) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 1m3.330706257s ago: executing program 8 (id=6312): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_crypto(0x10, 0x3, 0x15) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000200)='ip6gretap0\x00') ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r7, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000ac1e0001000000000000000000000000efff000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000021"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x5, 0x1, 0x1000, &(0x7f000000f000/0x1000)=nil}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000000000)="0a000000010003", 0x7) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000b40)=ANY=[@ANYBLOB="1401000010000905000000000000000001013180e7fd1cc987412abd12a61250be1a1ad1f9a11f196ac7446aa3a450935abca7f7f7200509e180ddc434b3a717de9332954acf415edd6e5cc1b36848dfc020a0d3196b64af1050252d4c77e46e53c0b45278490ca70e88acb72aa0fd88699e6d071b8c6cd70173cb8500279d021f7b7517489a38bb000000000000000000", @ANYRES32, @ANYBLOB="08008e00d100000074007e8070005e8059009300ea423366c0f43f13e7cd3199f6900d0d8d42d45cb86a90453c268ab4974703b8b010e74a0a1e65739f0fbb49f3425cc76eeb0b44731b62148e7624508396077fcdd87bc2c98e500b74bb786441a50bc90c3e6e59ae0000000800e600ac1414aa0800008004008c80000000"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075c, 0xfffffffb}}]}, 0xc4}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x2040000) 1m2.999623175s ago: executing program 8 (id=6319): r0 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x2, 0x7fff7ffc}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x1, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x10001}]}, 0x34}}, 0x24008084) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x1) close_range(r2, 0xffffffffffffffff, 0x200000000000000) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f00000001c0)='\x18\xbd@\xbd\xc9e2\x0e\xb2\xe2OAq\xa7\xa8\xadcz::\x00', 0x0) 1m2.918675519s ago: executing program 8 (id=6320): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0x4, 0x29a13e, 0x1058a}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r3, 0x0, 0xffff, 0x1100, &(0x7f0000000480)='|0', 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m2.821991367s ago: executing program 8 (id=6323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x8, 0x0, 0x4}) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x17) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0x1, 0x10, 0x0, 0x0) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x4f8cdd45d82c123a, 0x0, 0x0) 1m1.739544473s ago: executing program 48 (id=6194): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x16, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000020000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 47.839868065s ago: executing program 49 (id=6323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x8, 0x0, 0x4}) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x17) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0x1, 0x10, 0x0, 0x0) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x4f8cdd45d82c123a, 0x0, 0x0) 26.377112987s ago: executing program 4 (id=6610): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1300"], 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x38b1, 0x1c080, 0x2, 0x20002f7}) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2004c800}, 0x20040000) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 26.264917263s ago: executing program 4 (id=6613): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x17, &(0x7f0000000080)=@gcm_256={{0x303}, '\x00', "4867f60c9366f8caca55097828d9173185df9cd607089de85deb98049bc3b01e", "71856135", 'N_3\t\x00\x00\x008'}, 0x38) 26.140137356s ago: executing program 4 (id=6614): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0xb, 0x0, &(0x7f0000000040)) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000000c0)={0x48, 0x1, r3, 0x0, 0xe, 0xca}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r3, 0x0, &(0x7f00007d6000/0x3000)=nil, 0x3000, 0xfffffffffffffffe}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0xce22, 0x7b, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x71a175bda7669d8c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 26.080317183s ago: executing program 4 (id=6616): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f014, 0x1}) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pidfd_getfd(0xffffffffffffffff, r1, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='binder\x00', 0x16a00a, &(0x7f0000000200)='+!%%[\x18}W]\x00') 26.009091273s ago: executing program 4 (id=6619): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="d9", 0x1}], 0x1}}], 0x1, 0x2004c044) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x3c, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0x4, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xe) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x1b, 0x0}, 0x2}], 0x88, 0x20, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'bridge_slave_1\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031400d3fc140088004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket(0x2, 0x80805, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) 25.419492956s ago: executing program 4 (id=6626): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r2 = syz_open_pts(r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, 0x0, 0x30, 0xa, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) creat(&(0x7f0000000440)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x0) r7 = dup3(r2, r0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f00000001c0)={0x6, &(0x7f00000000c0)=""/6}) r8 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x80, 0x0, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x23456, 0x0, 0x12, 0x1}) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r12}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r14 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r14, 0xc008561c, &(0x7f0000000040)={0x980901, 0x3, @name="75b6ebd22c9ea6adc527b3537a12a9dac319d36c77fd90f47112735f3d8ea3c3"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4) r16 = fanotify_init(0x0, 0x0) fanotify_mark(r16, 0x1, 0x48001013, r7, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xff8c, 0x0) 25.261149767s ago: executing program 50 (id=6626): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r2 = syz_open_pts(r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, 0x0, 0x30, 0xa, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) creat(&(0x7f0000000440)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x0) r7 = dup3(r2, r0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f00000001c0)={0x6, &(0x7f00000000c0)=""/6}) r8 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x80, 0x0, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x23456, 0x0, 0x12, 0x1}) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r12}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r14 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r14, 0xc008561c, &(0x7f0000000040)={0x980901, 0x3, @name="75b6ebd22c9ea6adc527b3537a12a9dac319d36c77fd90f47112735f3d8ea3c3"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4) r16 = fanotify_init(0x0, 0x0) fanotify_mark(r16, 0x1, 0x48001013, r7, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xff8c, 0x0) 4.439993462s ago: executing program 3 (id=6795): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0x2, 0x4) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0x400000001fc, 0x301) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xd, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}}], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0xc1, &(0x7f00000002c0)=""/193, 0x41100, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xd, 0xfff, 0xfe}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)=[{0x4, 0x4, 0xc, 0x4}, {0x2, 0x1, 0xc, 0x7}, {0x3, 0x5, 0x3, 0x3}], 0x10, 0x3cf1}, 0x94) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r3, r3) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5) fcntl$setlease(0xffffffffffffffff, 0x400, 0x3) read$FUSE(r4, &(0x7f0000000700)={0x2020}, 0x2020) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map, 0xc, 0x0, 0xfffffc01, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) syz_open_dev$sg(&(0x7f0000000140), 0x800, 0x48942) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x3, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000006c0), 0x20000, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@cgroup=r7, r2, 0x12, 0x11, r4, @void, @value=r8, @void, @void, r5}, 0x20) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff7, 0x84, &(0x7f0000000180)={0x4b5a9da54893e123, 0x1, 0x1, 0x2}, 0x8, 0x203ffffb, 0x300, 0x0, 0x2, 0x20000, 0x0}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, 0x0) 3.583898782s ago: executing program 3 (id=6806): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) (async) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62981) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2e, 0x4, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x1, {@in6_addr=@private2, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000002000/0x4000)=nil, 0x4000}, 0x1}) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) 3.210015829s ago: executing program 3 (id=6810): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000240)={0x980902, 0x8081, @value=0x7}) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x4, 0x4}) 3.034019977s ago: executing program 3 (id=6811): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101500, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRESOCT=r2, @ANYRESDEC=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x4004050}, 0x40040c0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(r0, &(0x7f0000000280)='*', 0xffffffffffffff38) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) (async) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000300), 0xfffffffffffffffc, 0x46483) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000180)=[{0x18, '\x00', @st={0x4, [{0x0, @svalue=0x9}, {0x3, @svalue=0x7}, {0x0, @uvalue=0x44}, {0x0, @svalue=0xe}]}, 0xffffffff}]}) (async) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000180)=[{0x18, '\x00', @st={0x4, [{0x0, @svalue=0x9}, {0x3, @svalue=0x7}, {0x0, @uvalue=0x44}, {0x0, @svalue=0xe}]}, 0xffffffff}]}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000004700)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d00000000140006007665745f746f5f7465616d0000000400cc000863050009000300140004007300002867f1cfb0ce2da46a71b5c8bc74dde354f88ebc199415236e6d150df95efb7a641cd86f4679a4710f273e30632159f578f86ff5abe69b623296757ee8264c165bb5a77db52f2c9177a11b9a4c4230df8f4d07de3a4b3f940b0146a041f11e85133ebc92b7b667c3064f2511dee61246bc09406f48332e822d20d8bda1d43ddd86c04453baf6a90540707788aa033b5bd5a1450e7164df77b270"], 0x58}, 0x1, 0x0, 0x0, 0x2c4c3b9bc255d434}, 0x4008080) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x2020) (async) read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x2020) r8 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x40800) read$usbmon(r8, 0x0, 0x0) (async) read$usbmon(r8, 0x0, 0x0) read$FUSE(r7, 0x0, 0xfffffffffffffe84) (async) read$FUSE(r7, 0x0, 0xfffffffffffffe84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="a9040500000000001c0012800b00010069703667726500000c00028008000400010001000800040000000000"], 0x44}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000014c0)={0xf}) read$FUSE(r7, &(0x7f0000002680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000046c0)={0x18, 0x0, r12, {0xed}}, 0x18) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0x541b, &(0x7f0000000000)) 2.65677433s ago: executing program 3 (id=6815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x8, 0x0, r1, 0x0, 0x0, 0x5, 0x0, 0x10}]) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160aef070000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000170a010800000000000000000200000809000200735d7a300a0000000900010073797a3000"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 2.596637093s ago: executing program 2 (id=6816): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002080)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x5, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xe}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24041080) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) (async) mount$overlay(0x0, &(0x7f0000000a40)='./cgroup\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r6, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44c", 0x7b}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 2.488252335s ago: executing program 3 (id=6819): socket$netlink(0x10, 0x3, 0x8000000004) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000002480)) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x242000, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r2, 0x0, &(0x7f0000005000/0x2000)=nil, 0x2000, 0x5}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DVB_DEMUX_DMX_GET_STC(r3, 0xc0106f32, &(0x7f0000000380)={0x45dd}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000100)='}', 0xffffffd5}], 0x1, 0x0) writev(r0, &(0x7f0000002580)=[{&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="7dc0dcd869458fb5b7866972eafdc3e934e4366bcf66be2ad052dd9541a227db1aa0b7a3b7e18f7a0916dc5e", 0x2c}, {&(0x7f00000024c0)="5838948404175dcac4c6163326a8214c06d88f78f4ae787e2f8b789e57a95aacdc4bfb23517dc8eb474ad28cc80cdbcee423cbb98c0e686eb063908329717d03b13221383bb4dd8bddb39c7e05db7f90862c9c48b8b978d6b59cef4949ce723a56f1037d2c1ea6b7bfcdb324cdeb5e3ab35f44b9285dabc5e3616cc3cdd7af70c105e4db1f695e69676b4dadea60f89fce7fdfa70165f00f53b44ea52166c2023042dfa408", 0xa5}], 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000240)={&(0x7f0000000380)=[{0x4, 0x4829, 0x0, 0x0}], 0x1}) listen(r6, 0xfffffffd) r8 = accept4(r6, 0x0, 0x0, 0x0) setreuid(0xee01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) setresuid(0x0, 0xee01, 0x0) recvmmsg(r8, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x4, 0x0, 0x9, 0x8, 0x0, 0x4, 0x2, 0x20}, 0xe) socket$alg(0x26, 0x5, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="019b1d35eb76c40f13002f"], 0x34}}, 0x0) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000000)=0x16, 0x4) 2.37906635s ago: executing program 2 (id=6820): socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x4, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0xd, 0x8563, 0x5}, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d4}, 0x24044040) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$PTP_SYS_OFFSET_PRECISE(r7, 0x80104d12, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x4000000) 1.510008246s ago: executing program 2 (id=6828): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) r0 = syz_open_procfs(0x0, &(0x7f0000019200)='mounts\x00') pread64(r0, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000140)='./file0\x00') sendmsg(r0, &(0x7f0000019180)={0x0, 0x0, &(0x7f00000190c0)=[{&(0x7f0000019040)="6ad0ba613b440fc11e4799f1494c4d4baa26826c43acd0a8e995a92f6097e824e5c7a02c4a03684613bbee554817a51dc7d216ca827283e65c0f373f2c02289e6eba", 0x42}], 0x1, &(0x7f0000019100)=[{0x48, 0x0, 0xeb, "cec2d57fb5d7064a107c459e291e8b88da1539dc9a5c02235ab0d84e0c53003f09fd0da892211c292a5d9713d67a85e88ab18e15ac1228"}], 0x48}, 0x40) r1 = open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x800000, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f00000003c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000001c0), 0x4}) getsockopt$sock_int(r2, 0x1, 0xa, 0x0, &(0x7f0000000080)) write$P9_RLCREATE(r1, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x2, 0x4, 0x3}, 0x3}}, 0x18) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) 1.417603474s ago: executing program 6 (id=6830): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) dup3(r2, r1, 0x80000) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000010000054001280080001006774700048000280080007000000000a080004000000000014000800fe8000000000000000000000000000aa0800030005000000050005"], 0x84}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x44000, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000180)={0x2, 0x0, [{0x80000008, 0xffffffff, 0x6, 0x1087, 0x0, 0x9, 0xf0000}, {0x2, 0xf5bc, 0x5, 0xf8, 0x200, 0x9, 0x6}]}) 1.417151241s ago: executing program 2 (id=6831): syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r0, &(0x7f0000002680)=[{0x0}, {0x0}, {&(0x7f0000002600)}], 0x3) syz_80211_inject_frame(&(0x7f0000002740), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) r3 = dup(r2) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3a7f, 0x8, 0x0, 0x10f}, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x4000000, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x6e24, @remote}, 0x206, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRESOCT=r4, @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x50) 1.307217207s ago: executing program 6 (id=6832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) clock_settime(0x8d71ca88fffffffd, &(0x7f0000000000)) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xef}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r8, 0x29, 0xcf, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) 1.126887634s ago: executing program 0 (id=6836): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r1, 0x105, 0xffffffff, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) (fail_nth: 3) 1.12630831s ago: executing program 0 (id=6837): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8004}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8004}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) 922.586456ms ago: executing program 6 (id=6838): socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'i'}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x4, 0x0, @void}, 0x10) r4 = socket$kcm(0x11, 0x2, 0x300) mlockall(0x7) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05002abd7000fddbdf2501000000400008803c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e227f000001000000000000000008000100", @ANYRES16=r8], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r9 = socket(0x10, 0x803, 0x0) r10 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, 0x0) write$tun(r10, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast2}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xffffff36) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0x25dfdbf8, {0x0, 0x0, 0x0, r11, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}}, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f00000004c0)={r13, 0x3, 0x6}, 0x10) sendto$packet(r6, &(0x7f0000000180)="05d936277c6f5422007f9f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c7168c7eb53b", 0x28, 0x156cbab11f792d66, &(0x7f0000000040)={0x11, 0x86dd, r11, 0x1, 0x4, 0x6, @local}, 0x14) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x28, &(0x7f0000000040), 0x4) 921.905124ms ago: executing program 6 (id=6839): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000004000/0x1000)=nil}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x10}}, 0x50) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = eventfd2(0x1, 0x1) read$eventfd(r4, &(0x7f0000000000), 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r6 = socket$can_raw(0x1d, 0x3, 0x1) setreuid(0xee01, 0xee01) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f00000006c0)={&(0x7f0000000140), 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x2b8, r8, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xc975, 0x5a}}}}, [@NL80211_ATTR_NAN_FUNC={0x290, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x260, 0xe, 0x0, 0x1, [{0x26, 0x0, "e3741b6aa5a7bbff5af7efc6ece4e9e614300496156a1ea55f283e384516ea0f8ac8"}, {0x30, 0x0, "34c83c2a4054001d24e3322e6d223812ba2cd1e25e1118180db559763b4a98fbe0e74c922adb24ea84df7e29"}, {0xc4, 0x0, "ab2803c4f1ef74964f0ee034a0d99a84186827b9890e1e8bb8b6c37b54e18f1bacbee759101f79524ee172f90c517ab09140bcfa56c6b4b59e39dc31eb0ea42457afed297aba64e358f51d8b227af1e0ecae1f41811b935e4b649abb3428de32507048a6cc8bd6934a2fd123860dca1c169f4cb4f5f90b784b8f4d18b148a81078eaa36d1972bde400c6c5530b1a069b7aab2b4c3520e041d2eb1e2dc91ac5d32f1ff656a3219f8617988a8ae271b6fe70aa49adb049dcc830b9ac0918f99a5f"}, {0x8a, 0x0, "41a3ba0be7783652c329a794349ba1f55535ead9c2d2ccc41a95b07f1136ce90e22f698b55eb77e230bfe50a9a863cd3ee65f3266101dddec20e24efd99b1ae7702c035a9aaf1a97e5a5251d6c89fee690f3685d731f74bd6e3d9474027ff9343bf0c83520be2f001efb0c9112f37484d243bbf173c9bd983fde9f0b506a882e65d12ad391d7"}, {0xb2, 0x0, "73d502555789431707cbf96f11e53c00ef5f73e54b1208a74ed11728b756977fc1a3833a5c2f518b84f324d062d615fcfeed8ed226cc774fa59d0ac63d1a7bd5b8cb5015f472399ef36dcf760bf16c66bd486551e39ae7737d99854080d1ddd71bebb03bbe211f37251323b05afcbf371a9fb59e45f6d27b3f2e98dd85a5a6246624210dfe1b8ff53b1b5a49447abe7a05ee39341d22a3f78c656c8ca2e56ec0c54965a91b3bd49ee31139e33c3c"}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xfb}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x3}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ea946f09eaa2"}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x40804}, 0x40) setns(r9, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x24040810) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x29, 0x0, 0x0) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r12, 0xc00c55ca, &(0x7f0000000100)={0x5, 0x7ff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 802.235765ms ago: executing program 6 (id=6840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000009d617530e6c83e5ae4a641c612000c0000ea0b000000040000d9020000"], 0x0, 0x28}, 0x20) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)={0x14, r1, 0x101, 0x70bd29, 0x24dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x88800}, 0x40c8080) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0xa2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x6, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000340)={0x3, r3, 0xfffffffa, 0xffffffff, 0xb, 0x1fd, 0x1}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="ce3c61821c000b250a005f42000000000000", @ANYRES32], 0x1c}}, 0x4) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) (async) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r6, &(0x7f0000000100)='./file1\x00', r6, &(0x7f0000000240)='./file0\x00', 0x0) (async) unlink(&(0x7f00000002c0)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0x2}, 0x18) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES8=r4, @ANYBLOB="7b000040000280e90001"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x42) socket$igmp6(0xa, 0x3, 0x2) 801.956082ms ago: executing program 0 (id=6841): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000680)={0x0, 0xfffffffffffffffc, 0x6, 0x40, @buffer={0x0, 0x1000, &(0x7f0000000a00)=""/4096}, &(0x7f0000000080)="add18bb6803d", 0x0, 0xce9, 0x10, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x40000000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f00009b3000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b84d000000b90000c0fe0f3cae0a41d941d9000f32ba00e500000f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x59}], 0x1, 0x8, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000400000002c0012800c0001006d6163766c616e001c000280080009000100000009000100010000000800030000000000140035006d6163766c616e3000"], 0x60}}, 0x8000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 717.496078ms ago: executing program 6 (id=6842): socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010450c1251000000000001090224"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0xc00000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x6, 0x4}, 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000012000000000000000000000e69009ba10bee198ae3b99189312a567cf778665f1173e50f722c404fc058c0cd3f3039f56e70c94511f4e186fedd0277bebe82462b2a3ae70498ae269eaf06c8e0acab7bf2b49eea666aa3ff79e89b91ac32814d29ce7ed13e12db584f97a018e1aac3ccf909a9cefe33f9ebec0f07fbabcb77a09cb01ed8486d126f502228ce213cac251c792bc189facf7ab5f51df253ba4d0923a79f9e06210ddc36deffc942b351abd69fb182eeea188a53b2a23d58852089c8c9cdf0b992aa99743f9fbf424cc8100307c9a81a803604638f1ddcf9bc3b20586a39971fa7d368a26dd66e1def48", @ANYRES32, @ANYRESHEX=r4, @ANYRES32, @ANYRESDEC, @ANYRES64=0x0], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) close(r8) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r9, 0xc0045103, &(0x7f0000000040)) 709.136188ms ago: executing program 0 (id=6843): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x2}}, 0x14}}, 0xc004) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r1, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x2}}, 0x14}}, 0xc004) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r1, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) (async) 708.018981ms ago: executing program 0 (id=6844): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f00000003c0)) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x2329000, 0x800}, 0x20) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000580)={0x0, 0x3, 0x461}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3fb, 0x300, 0x70bd25, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') chroot(&(0x7f0000000180)='./file0\x00') r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r4 = getuid() mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2080, &(0x7f0000000200)={[{@size={'size', 0x3d, [0x65, 0x6d, 0x32, 0x39, 0x65, 0x67, 0x35]}}, {@huge_advise}, {@mode={'mode', 0x3d, 0x80000000}}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x31, 0x65, 0x59, 0x65, 0x6b, 0x37, 0x38]}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@subj_role={'subj_role', 0x3d, 'syz\x00'}}, {@euid_gt={'euid>', r4}}, {@measure}]}) fanotify_mark(r3, 0x8, 0x1008, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$P9_RREMOVE(r5, &(0x7f0000000400)={0x7, 0x7b, 0x1}, 0x7) getresuid(&(0x7f0000000500), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000740)=0xe8) getgroups(0x3, &(0x7f0000000780)=[0xee01, 0x0, 0xee01]) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {}, [{0x2, 0x4, r4}, {0x2, 0x4, r4}, {0x2, 0x1, r4}, {0x2, 0x1, r4}, {0x2, 0x7, r4}, {0x2, 0x2, r4}, {0x2, 0x6, r4}, {0x2, 0x4, r6}, {0x2, 0x3, r7}], {0x4, 0x3}, [{0x8, 0x2, r8}], {0x10, 0x2}, {0x20, 0x5}}, 0x74, 0x1) 707.123991ms ago: executing program 0 (id=6845): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000480)="c705c8440e059e7f99f7f040bb10e43fa3c7d81e02c0122e25de448b8545d594880c6709cbf6c56213213b5bc5cafc327b3862c05c5df87be35434a1893ac243c44cb89c0804cf6e526a037172db4c81e58ac14c8f6f525443780081c088cc32fb20d5ebe7c35276838dbd49e4f7dd48ffff14407f776d4c8121e291dd7bd7", &(0x7f0000000500)=@udp6}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000c1f53406442aefd1096cb40010000172bb8c39aa832ae252359d4f04000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="4b02060000000200140012800c0001006d6163766c616e000300028008000500", @ANYRES32=r4, @ANYBLOB="08000afd", @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a30000000000001c0012800b0001006d616373656300000c000280060002404e21000008000500", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="98000000680000042dbd7000fcdbdf25020001002b00000024000c80080002001d0400000800030001000100060001000500000006000100ff0100001c009a160c8008000300300e000008000300ff0300000800020205000000140006000000000000000000000000000000000006000300010000000400040008000500", @ANYRES32=r6, @ANYBLOB="0c0002000000000004000000040004000600030000000000"], 0x98}}, 0x24008040) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00'}, 0x1c) openat$vcs(0xffffffffffffff9c, 0x0, 0x181302, 0x0) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad00013100102030109022400010000"], 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = syz_create_resource$binfmt(&(0x7f0000001400)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x6d41, 0xd5) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r10, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1000001, {0x8, 0x3d, 0x0, {0x4, 0x7fffffffffffffff, 0x0, 0x400, 0xd, 0xfffffffffffffffa, 0x9ec, 0x35741061, 0x10004, 0xa593e9c1ca988eda, 0x3, 0xee01, 0x0, 0x10, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r9, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='0d#1') 518.119729ms ago: executing program 2 (id=6846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0xbd, 0x65, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x4e22, 0x4e20, 0xa9, 0x0, @opaque="d297ee070cfe599c065a5eb9452b351cab09b50ff157be45362ec4af4d20a7fb122b2333efdc27c39c1332a234ab7da6eb1e9df7e9f5b768d4f7b3946c0c1dccb5efc72b2f23dd54862e63bed4cacc801fc097e2fbaf357f87912accded4e4fe1bea2ad5fe2ef4e218ec36c5ffe94c9fd87563e31471634bf991988cd69e81391c9ec8ea94db6fe5945c8da04d14a441f89c4ead66afc3ef57b3f044e17e38b18d"}}}, 0xcb) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x14, 0x30, 0xb, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x3, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getnetconf={0x2c, 0x52, 0xa00, 0x70bd25, 0x25dfdbfb, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @NETCONFA_FORWARDING={0x8, 0x2, 0x100}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x44840) 0s ago: executing program 2 (id=6847): r0 = socket$kcm(0x2, 0x3, 0x2) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500004171421000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000140c0009800800014000000081480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001140000001100010000000000000000000100000aea13882d"], 0xc0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) (async) r2 = socket$kcm(0x2, 0x3, 0x2) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x0, 0xf, 0x1, 0xa, 0x7f, 0xc, 0x3, 0x1a, 0x5, 0x6, 0x80, 0x6, 0x4, 0x5}, 0xe) (rerun: 32) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0xfffc, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740)}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x64010102}}}], 0x20}, 0x0) kernel console output (not intermixed with test programs): b device syz0 port 1 has no pnetid [ 640.838544][T29073] netlink: 'syz.8.6224': attribute type 2 has an invalid length. [ 640.859901][T29073] batman_adv: batadv0: Adding interface: macvtap1 [ 640.862653][T29073] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.875012][T29073] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 641.291230][T29095] netlink: 'syz.6.6229': attribute type 30 has an invalid length. [ 641.343283][T29098] netlink: 'syz.6.6229': attribute type 30 has an invalid length. [ 641.540405][T29102] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 641.594370][T29107] fuse: blksize only supported for fuseblk [ 641.937430][ T34] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 642.087695][ T34] usb 11-1: Using ep0 maxpacket: 8 [ 642.091359][ T34] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 642.095371][ T34] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 642.099675][ T34] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 642.103722][ T34] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 642.108767][ T34] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 642.112352][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.331764][ T34] usb 11-1: GET_CAPABILITIES returned 0 [ 642.334005][ T34] usbtmc 11-1:16.0: can't read capabilities [ 642.534198][ T34] usb 11-1: USB disconnect, device number 31 [ 642.551987][T29116] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 642.594479][T29116] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6235'. [ 642.594770][T29120] binder: 29115:29120 ioctl c00c620f 200000000240 returned -22 [ 642.598119][T29116] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6235'. [ 642.605366][T29120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6236'. [ 642.609757][T29120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6236'. [ 642.957480][ T34] usb 13-1: new high-speed USB device number 29 using dummy_hcd [ 643.091832][T29126] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 643.094444][T29126] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 643.105123][T29126] vhci_hcd vhci_hcd.0: Device attached [ 643.111666][ T34] usb 13-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 643.115445][ T34] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.122434][ T34] usb 13-1: Product: syz [ 643.123831][ T34] usb 13-1: Manufacturer: syz [ 643.125330][ T34] usb 13-1: SerialNumber: syz [ 643.308507][ T9] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 643.366623][ T34] rtl8150 13-1:1.0: couldn't reset the device [ 643.371006][ T34] rtl8150 13-1:1.0: probe with driver rtl8150 failed with error -5 [ 643.380896][ T34] usb 13-1: USB disconnect, device number 29 [ 643.400721][ T10] usb 11-1: new high-speed USB device number 32 using dummy_hcd [ 643.407475][ T9] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 643.677509][ T10] usb 11-1: Using ep0 maxpacket: 16 [ 643.685494][ T10] usb 11-1: config 0 has no interfaces? [ 643.693299][T29134] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 643.701257][ T10] usb 11-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 643.704271][ T10] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.706953][ T10] usb 11-1: Product: syz [ 643.708626][ T10] usb 11-1: Manufacturer: syz [ 643.710393][ T10] usb 11-1: SerialNumber: syz [ 643.727730][ T10] usb 11-1: config 0 descriptor?? [ 643.905574][T29141] wg2: Caught tx_queue_len zero misconfig [ 643.931352][T29127] usb 49-1: recv xbuf, 0 [ 643.933110][ T5785] vhci_hcd vhci_hcd.6: stop threads [ 643.934733][ T5785] vhci_hcd vhci_hcd.6: release socket [ 643.936447][ T5785] vhci_hcd vhci_hcd.6: disconnect device [ 643.969787][T21244] usb 11-1: USB disconnect, device number 32 [ 644.064874][ T9] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 644.966080][T29175] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6251'. [ 644.974984][T29175] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 644.982654][T29175] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 645.059687][T29178] netlink: 'syz.8.6252': attribute type 1 has an invalid length. [ 645.092404][T29178] 8021q: adding VLAN 0 to HW filter on device bond6 [ 645.196403][ T42] kauditd_printk_skb: 126 callbacks suppressed [ 645.196419][ T42] audit: type=1400 audit(2000001063.685:32188): avc: denied { map } for pid=29180 comm="syz.8.6253" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=161910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 645.201415][T29181] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6253'. [ 645.210018][ T42] audit: type=1400 audit(2000001063.685:32189): avc: denied { read write } for pid=29180 comm="syz.8.6253" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=161910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 645.210068][ T42] audit: type=1400 audit(2000001063.695:32190): avc: denied { read write } for pid=29180 comm="syz.8.6253" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 645.210106][ T42] audit: type=1400 audit(2000001063.695:32191): avc: denied { open } for pid=29180 comm="syz.8.6253" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 645.360319][T29181] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6253'. [ 645.501568][ T42] audit: type=1400 audit(2000001063.995:32192): avc: denied { create } for pid=29184 comm="syz.8.6255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 645.522004][ T42] audit: type=1400 audit(2000001063.995:32193): avc: denied { listen } for pid=29184 comm="syz.8.6255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 645.532597][ T42] audit: type=1400 audit(2000001063.995:32194): avc: denied { accept } for pid=29184 comm="syz.8.6255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 645.540507][ T42] audit: type=1400 audit(2000001064.015:32195): avc: denied { read write } for pid=29187 comm="syz.2.6254" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 645.550515][ T42] audit: type=1400 audit(2000001064.015:32196): avc: denied { open } for pid=29187 comm="syz.2.6254" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 645.560387][ T42] audit: type=1400 audit(2000001064.015:32197): avc: denied { mounton } for pid=29187 comm="syz.2.6254" path="/21/file0" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 645.594946][T29191] syzkaller0: entered promiscuous mode [ 645.682314][T29196] No such timeout policy "syz1" [ 646.172496][T29209] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6262'. [ 646.175672][T29209] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 646.304340][T29216] veth0_macvtap: Caught tx_queue_len zero misconfig [ 646.349761][T29218] Invalid ELF header type: 0 != 1 [ 646.544225][T29222] syzkaller0: entered promiscuous mode [ 646.546684][T29222] syzkaller0: entered allmulticast mode [ 646.647321][ T8939] usb 13-1: new high-speed USB device number 30 using dummy_hcd [ 646.807315][ T8939] usb 13-1: Using ep0 maxpacket: 32 [ 646.813639][ T8939] usb 13-1: config 0 has an invalid interface number: 119 but max is 0 [ 646.816244][ T8939] usb 13-1: config 0 has no interface number 0 [ 646.818660][ T8939] usb 13-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 646.821940][ T8939] usb 13-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 646.825566][ T8939] usb 13-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 646.828909][ T8939] usb 13-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 646.835040][ T8939] usb 13-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 646.838038][ T8939] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.840461][ T8939] usb 13-1: Product: syz [ 646.841863][ T8939] usb 13-1: Manufacturer: syz [ 646.843308][ T8939] usb 13-1: SerialNumber: syz [ 646.846445][ T8939] usb 13-1: config 0 descriptor?? [ 646.848641][T29220] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 646.853708][ T8939] input: bcm5974 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.119/input/input86 [ 646.872362][T29229] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6269'. [ 646.923056][ C0] bcm5974 13-1:0.119: trackpad urb failed: -1 [ 647.039129][T29234] netlink: 236 bytes leftover after parsing attributes in process `syz.6.6271'. [ 647.074331][ T6886] usb 13-1: USB disconnect, device number 30 [ 647.131140][ T5747] Bluetooth: hci5: sending frame failed (-49) [ 647.134825][ T64] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 647.659308][ T8939] usb 11-1: new high-speed USB device number 33 using dummy_hcd [ 647.726333][T29251] batadv_slave_1: Caught tx_queue_len zero misconfig [ 647.807201][T29253] bond7: option xmit_hash_policy: invalid value (6) [ 647.810876][T29253] bond7 (unregistering): Released all slaves [ 647.827466][ T8939] usb 11-1: Using ep0 maxpacket: 32 [ 647.830989][ T8939] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 647.834115][ T8939] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 647.836720][ T8939] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 647.839983][ T8939] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 647.843189][ T8939] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 647.846242][ T8939] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 647.852458][ T8939] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 647.855290][ T8939] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.859913][ T8939] usb 11-1: config 0 descriptor?? [ 647.899108][T29253] 9pnet_fd: p9_fd_create_tcp (29253): problem binding to privport [ 647.969684][T29259] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 648.084111][ T8939] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 648.094404][ T8939] usb 11-1: USB disconnect, device number 33 [ 648.100645][ T8939] usblp0: removed [ 648.133090][T29266] kvm: pic: single mode not supported [ 648.136639][T29266] kvm: pic: single mode not supported [ 648.140843][T29266] kvm: pic: level sensitive irq not supported [ 648.144126][T29266] kvm: pic: single mode not supported [ 648.148116][T29266] kvm: pic: level sensitive irq not supported [ 648.153980][T29266] kvm: pic: level sensitive irq not supported [ 648.158214][T29266] kvm: pic: single mode not supported [ 648.160783][T29266] kvm: pic: level sensitive irq not supported [ 648.528376][ T6886] usb 11-1: new high-speed USB device number 34 using dummy_hcd [ 648.607396][T29278] loop5: detected capacity change from 0 to 7 [ 648.617025][T29278] Dev loop5: unable to read RDB block 7 [ 648.622811][T29278] loop5: unable to read partition table [ 648.625390][T29278] loop5: partition table beyond EOD, truncated [ 648.629254][T29278] loop_reread_partitions: partition scan of loop5 (śłƒå”™‰ü¾CźjĢ–ć¢P=Ć½?ć}X‹ŗŠ œėÜ%õ«`Éęրł…ˆ{ķ©Ö˜Čµ4FLQkŻŠ) failed (rc=-5) [ 648.642559][ C3] blk_print_req_error: 113 callbacks suppressed [ 648.642571][ C3] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 648.647938][ C3] buffer_io_error: 11 callbacks suppressed [ 648.647946][ C3] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 648.653868][ C2] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 648.656866][ C2] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 648.677671][ T6886] usb 11-1: Using ep0 maxpacket: 32 [ 648.682931][ T6886] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 648.688159][ T6886] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 648.697078][ T6886] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 648.701686][ T6886] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 648.705537][ T6886] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 648.714576][ T6886] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 648.720012][ T6886] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 648.722990][ T6886] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.729687][ T6886] usb 11-1: config 0 descriptor?? [ 648.738056][T29285] 9p: Invalid gid '0x00000000ffffffff' [ 648.834653][T12271] Bluetooth: hci5: Frame reassembly failed (-84) [ 648.841470][T12271] Bluetooth: hci5: Frame reassembly failed (-84) [ 648.935813][ T6886] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 649.206544][T14338] usb 11-1: USB disconnect, device number 34 [ 649.214194][T29298] __nla_validate_parse: 1 callbacks suppressed [ 649.214205][T29298] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6290'. [ 649.214566][T14338] usblp0: removed [ 649.752876][T29307] netlink: 'syz.6.6292': attribute type 2 has an invalid length. [ 649.756059][T29307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6292'. [ 650.026289][T29316] netlink: 'syz.6.6295': attribute type 1 has an invalid length. [ 650.029203][T29316] netlink: 756 bytes leftover after parsing attributes in process `syz.6.6295'. [ 650.054807][T29316] syz.6.6295 (29316): attempted to duplicate a private mapping with mremap. This is not supported. [ 650.243402][ T42] kauditd_printk_skb: 182 callbacks suppressed [ 650.243417][ T42] audit: type=1400 audit(2000001068.735:32380): avc: denied { mounton } for pid=29325 comm="syz.6.6297" path="/190/file0" dev="tmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 650.255302][ T42] audit: type=1400 audit(2000001068.735:32381): avc: denied { mount } for pid=29325 comm="syz.6.6297" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 650.272637][ T42] audit: type=1400 audit(2000001068.765:32382): avc: denied { unmount } for pid=26395 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 650.307404][ T42] audit: type=1400 audit(2000001068.805:32383): avc: denied { read } for pid=29327 comm="syz.6.6298" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 650.325697][ T42] audit: type=1400 audit(2000001068.805:32384): avc: denied { open } for pid=29327 comm="syz.6.6298" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 650.334913][ T42] audit: type=1400 audit(2000001068.805:32385): avc: denied { ioctl } for pid=29327 comm="syz.6.6298" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 650.342755][ T42] audit: type=1400 audit(2000001068.815:32386): avc: denied { read } for pid=29327 comm="syz.6.6298" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 650.353429][ T42] audit: type=1400 audit(2000001068.815:32387): avc: denied { open } for pid=29327 comm="syz.6.6298" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 650.363066][ T42] audit: type=1400 audit(2000001068.815:32388): avc: denied { ioctl } for pid=29327 comm="syz.6.6298" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 650.373425][ T42] audit: type=1400 audit(2000001068.845:32389): avc: denied { create } for pid=29329 comm="syz.8.6299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 650.857769][ T5747] Bluetooth: hci5: command 0x1003 tx timeout [ 650.857904][ T64] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 651.219338][T29360] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6306'. [ 651.707614][T29370] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 651.821444][T29379] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6312'. [ 651.963877][T29379] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6312'. [ 651.984108][T29379] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 652.053324][T29393] trusted_key: encrypted_key: insufficient parameters specified [ 652.139176][T29400] usb 2-1: USB disconnect, device number 2 [ 652.142976][T29401] random: crng reseeded on system resumption [ 652.368816][ T9707] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 652.369448][T29416] netlink: 'syz.6.6322': attribute type 1 has an invalid length. [ 652.374856][T29416] netlink: 13234 bytes leftover after parsing attributes in process `syz.6.6322'. [ 653.480653][ T5747] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 653.486519][ T5747] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 653.493583][ T5747] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 653.507012][ T5747] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 653.510871][ T5747] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 654.103332][T29422] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.106237][T29422] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.109068][T29422] bridge_slave_0: entered allmulticast mode [ 654.111793][T29422] bridge_slave_0: entered promiscuous mode [ 654.115284][T29422] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.118166][T29422] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.120449][T29422] bridge_slave_1: entered allmulticast mode [ 654.123117][T29422] bridge_slave_1: entered promiscuous mode [ 654.148198][T29422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.154719][T29422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.222489][T29422] team0: Port device team_slave_0 added [ 654.226484][T29422] team0: Port device team_slave_1 added [ 654.258763][T29422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.261646][T29422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.273037][T29422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.277625][T29422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.280298][T29422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.289282][T29422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.397071][T29422] hsr_slave_0: entered promiscuous mode [ 654.400196][T29422] hsr_slave_1: entered promiscuous mode [ 654.402383][T29422] debugfs: 'hsr0' already exists in 'hsr' [ 654.404135][T29422] Cannot create hsr debugfs directory [ 654.439171][T13840] bond4: left allmulticast mode [ 654.440778][T13840] dvmrp8: left allmulticast mode [ 654.603241][T13840] bond5 (unregistering): (slave geneve3): Releasing active interface [ 654.666346][T13840] bond0 (unregistering): Released all slaves [ 654.678535][T13840] bond1 (unregistering): Released all slaves [ 654.691343][T13840] bond2 (unregistering): Released all slaves [ 654.712298][T13840] bond3 (unregistering): Released all slaves [ 654.724310][T13840] bond4 (unregistering): Released all slaves [ 654.749644][T13840] bond5 (unregistering): Released all slaves [ 654.765848][T13840] bond6 (unregistering): Released all slaves [ 654.999489][T13840] IPVS: stopping backup sync thread 22791 ... [ 655.268872][T29410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 655.297799][ T42] kauditd_printk_skb: 115 callbacks suppressed [ 655.297816][ T42] audit: type=1400 audit(2000001073.795:32505): avc: denied { read write } for pid=28387 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 655.321530][ T42] audit: type=1400 audit(2000001073.805:32506): avc: denied { open } for pid=28387 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 655.345090][ T42] audit: type=1400 audit(2000001073.805:32507): avc: denied { ioctl } for pid=28387 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 655.371018][ T42] audit: type=1400 audit(2000001073.865:32508): avc: denied { allowed } for pid=29441 comm="syz.6.6328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 655.377112][ T42] audit: type=1400 audit(2000001073.865:32509): avc: denied { prog_load } for pid=29441 comm="syz.6.6328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 655.383868][ T42] audit: type=1400 audit(2000001073.865:32510): avc: denied { recv } for pid=13840 comm="kworker/u32:5" saddr=127.0.0.1 src=56182 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 655.396932][ T42] audit: type=1400 audit(2000001073.875:32511): avc: denied { read } for pid=29442 comm="syz.2.6327" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 655.407472][ T42] audit: type=1400 audit(2000001073.875:32512): avc: denied { open } for pid=29442 comm="syz.2.6327" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 655.418211][ T42] audit: type=1400 audit(2000001073.875:32513): avc: denied { mac_admin } for pid=29441 comm="syz.6.6328" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 655.427018][ T42] audit: type=1400 audit(2000001073.875:32514): avc: denied { read } for pid=29445 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.443577][T29444] binder_alloc: binder_alloc_mmap_handler: 29442 200000ffe000-200001000000 already mapped failed -16 [ 655.551662][ T5447] 8021q: adding VLAN 0 to HW filter on device eth6 [ 655.593596][ T64] Bluetooth: hci5: command tx timeout [ 655.668757][T29457] xt_nat: multiple ranges no longer supported [ 655.917325][ T8939] usb 11-1: new high-speed USB device number 35 using dummy_hcd [ 655.968430][ T5447] 8021q: adding VLAN 0 to HW filter on device eth7 [ 655.996866][T29467] netlink: 'syz.2.6331': attribute type 1 has an invalid length. [ 655.998773][T29466] netlink: 'syz.2.6331': attribute type 1 has an invalid length. [ 656.064144][T29467] 8021q: adding VLAN 0 to HW filter on device bond1 [ 656.078295][ T8939] usb 11-1: Using ep0 maxpacket: 32 [ 656.088613][ T8939] usb 11-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 656.096669][ T8939] usb 11-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 656.121873][ T8939] usb 11-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 656.124771][ T8939] usb 11-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 656.127759][ T8939] usb 11-1: Product: syz [ 656.129116][ T8939] usb 11-1: Manufacturer: syz [ 656.133554][T29469] bond1: (slave veth3): Enslaving as an active interface with a down link [ 656.136381][ T8939] hub 11-1:4.0: bad descriptor, ignoring hub [ 656.141393][ T8939] hub 11-1:4.0: probe with driver hub failed with error -5 [ 656.158849][ T8939] usbhid 11-1:4.0: couldn't find an input interrupt endpoint [ 656.180086][T29466] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 656.183089][T29466] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 656.347827][T29457] fuse: Unknown parameter 'group_i' [ 656.412251][T13840] IPVS: stop unused estimator thread 0... [ 656.457891][ T5088] usb 11-1: USB disconnect, device number 35 [ 656.475097][ T5447] 8021q: adding VLAN 0 to HW filter on device eth8 [ 656.636042][T29422] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 656.644732][T29422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 656.651711][T29422] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 656.658125][T29422] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 656.662089][T29422] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 656.668241][T29422] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 656.674908][T29422] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 656.682378][T29422] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 656.764805][T29422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.782069][T29422] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.788464][ T9761] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.791553][ T9761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.800349][T12264] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.802722][T12264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.921971][ T5447] 8021q: adding VLAN 0 to HW filter on device eth9 [ 657.076955][T29496] loop5: detected capacity change from 0 to 7 [ 657.081442][T29496] Dev loop5: unable to read RDB block 7 [ 657.083650][T29496] loop5: AHDI p2 [ 657.084818][T29496] loop5: partition table partially beyond EOD, truncated [ 657.151202][T29422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.191231][T29422] veth0_vlan: entered promiscuous mode [ 657.200334][T29422] veth1_vlan: entered promiscuous mode [ 657.252967][T29422] veth0_macvtap: entered promiscuous mode [ 657.259570][T29422] veth1_macvtap: entered promiscuous mode [ 657.279877][T29422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.305276][T29422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.330136][ T9707] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.336501][ T9707] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.347392][ T9707] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.351894][ T9707] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.393684][T29523] syzkaller0: entered promiscuous mode [ 657.395910][T29523] syzkaller0: entered allmulticast mode [ 657.591336][T12271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.593758][T12271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.662584][ T9766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.668580][ T64] Bluetooth: hci5: command tx timeout [ 657.670343][ T9766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.092156][T29585] input: syz1 as /devices/virtual/input/input88 [ 658.382678][T29594] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 658.561375][T29600] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6349'. [ 658.857764][ T6886] usb 7-1: new low-speed USB device number 49 using dummy_hcd [ 659.020031][ T6886] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.023443][ T6886] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 659.026349][ T6886] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30062, setting to 8 [ 659.030385][ T6886] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 659.033828][ T6886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.042731][T29605] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 659.050093][ T6886] hub 7-1:1.0: bad descriptor, ignoring hub [ 659.056624][ T6886] hub 7-1:1.0: probe with driver hub failed with error -5 [ 659.063172][ T6886] cdc_wdm 7-1:1.0: skipping garbage [ 659.064813][ T6886] cdc_wdm 7-1:1.0: skipping garbage [ 659.070271][ T6886] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 659.072158][ T6886] cdc_wdm 7-1:1.0: Unknown control protocol [ 659.195074][T29626] 9pnet_virtio: no channels available for device syz [ 659.332313][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 659.334479][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 659.339355][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 659.341471][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 659.343427][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 659.345399][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 659.347831][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 659.349767][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 659.351854][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 659.353888][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 659.505026][T29605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.521890][T29605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.634592][T29630] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.647052][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 659.649139][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 659.651284][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 659.653340][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 659.655344][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 659.657306][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 659.660438][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 659.662469][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 659.664602][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 659.666674][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 659.738307][ T64] Bluetooth: hci5: command tx timeout [ 659.961704][T29636] syzkaller0: entered promiscuous mode [ 659.963509][T29636] syzkaller0: entered allmulticast mode [ 660.538517][ T42] kauditd_printk_skb: 375 callbacks suppressed [ 660.538529][ T42] audit: type=1400 audit(2000001079.035:32890): avc: denied { egress } for pid=28 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 660.550067][ T42] audit: type=1400 audit(2000001079.035:32891): avc: denied { sendto } for pid=28 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 660.725769][ T42] audit: type=1400 audit(2000001079.215:32892): avc: denied { read write } for pid=29642 comm="syz.6.6354" name="cdc-wdm0" dev="devtmpfs" ino=4585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 660.735365][ T42] audit: type=1400 audit(2000001079.215:32893): avc: denied { open } for pid=29642 comm="syz.6.6354" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 660.744259][ T42] audit: type=1400 audit(2000001079.215:32894): avc: denied { ioctl } for pid=29642 comm="syz.6.6354" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4585 ioctlcmd=0x5b0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 660.753264][ T42] audit: type=1400 audit(2000001079.235:32895): avc: denied { create } for pid=29642 comm="syz.6.6354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 660.759524][ T42] audit: type=1400 audit(2000001079.235:32896): avc: denied { setopt } for pid=29642 comm="syz.6.6354" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 660.765751][ T42] audit: type=1400 audit(2000001079.235:32897): avc: denied { write } for pid=29642 comm="syz.6.6354" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 660.771910][ T42] audit: type=1400 audit(2000001079.235:32898): avc: denied { allowed } for pid=29642 comm="syz.6.6354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 660.912157][ T42] audit: type=1400 audit(2000001079.405:32899): avc: denied { create } for pid=29647 comm="syz.0.6355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 660.919974][T29648] block nbd0: NBD_DISCONNECT [ 660.925870][T22879] block nbd0: Wrong magic (0x25609513) [ 660.934144][ T7376] block nbd0: Wrong magic (0x25609513) [ 660.945482][ T7376] block nbd0: Disconnected due to user request. [ 660.956932][T29650] 9pnet_virtio: no channels available for device syz [ 661.129989][T29659] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 661.131891][T29659] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 661.134494][T29659] vhci_hcd vhci_hcd.0: Device attached [ 661.178301][T29660] vhci_hcd: connection closed [ 661.182514][ T12] vhci_hcd vhci_hcd.0: stop threads [ 661.185663][ T12] vhci_hcd vhci_hcd.0: release socket [ 661.188105][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 661.631820][ T5857] usb 7-1: USB disconnect, device number 49 [ 661.631877][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 661.738499][T29668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=29668 comm=syz.0.6360 [ 661.756970][T29668] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6360'. [ 661.812850][T29671] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 4, id = 0 [ 661.833196][ T64] Bluetooth: hci5: command tx timeout [ 662.003071][T29674] overlay: Unknown parameter 'rocessed 0 [ 662.003071][T29674] processed 0 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 662.003071][T29674] ' [ 662.150683][T29678] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6364'. [ 662.431071][ T40] hid (null): global environment stack underflow [ 662.440783][ T40] hid-generic 616F:20C2607D:F72986D9.0020: global environment stack underflow [ 662.443898][ T40] hid-generic 616F:20C2607D:F72986D9.0020: item 0 1 1 11 parsing failed [ 662.447410][ T40] hid-generic 616F:20C2607D:F72986D9.0020: probe with driver hid-generic failed with error -22 [ 662.505376][T29691] netlink: 'syz.2.6366': attribute type 1 has an invalid length. [ 662.525730][T29691] bond2: entered promiscuous mode [ 662.528338][T29691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 662.532344][T29691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6366'. [ 662.536567][T29691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6366'. [ 662.559137][T29690] bond2: (slave bridge2): making interface the new active one [ 662.561531][T29690] bridge2: entered promiscuous mode [ 662.564895][T29690] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 663.035580][T29710] syz.2.6373: attempt to access beyond end of device [ 663.035580][T29710] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 663.040828][T29710] gfs2: error -5 reading superblock [ 663.548103][ T1191] Bluetooth: hci4: Frame reassembly failed (-84) [ 663.868850][T29736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6379'. [ 663.871695][T29736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6379'. [ 663.874777][T29736] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6379'. [ 663.957556][T29736] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.094745][T29736] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.203300][T29736] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.324180][T29736] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.444636][ T5785] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.455677][ T5785] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.470179][ T5821] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.483021][ T5821] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.120592][T29757] x_tables: duplicate underflow at hook 1 [ 665.124593][T29757] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6385'. [ 665.136348][T29757] gfs2: error -5 reading superblock [ 665.337573][T29759] tipc: Started in network mode [ 665.339233][T29759] tipc: Node identity 84e, cluster identity 4711 [ 665.341916][T29759] tipc: Node number set to 2126 [ 665.479014][T29764] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 665.481600][T29764] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 665.485259][T29764] usb usb9: usbfs: interface 0 claimed by hub while 'syz.0.6388' sets config #1280 [ 665.490709][T29764] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6388'. [ 665.577690][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 665.580418][ T5747] Bluetooth: hci4: command 0x1003 tx timeout [ 665.669179][ T42] kauditd_printk_skb: 164 callbacks suppressed [ 665.669260][ T42] audit: type=1400 audit(2000001084.165:33064): avc: denied { mounton } for pid=29765 comm="syz.6.6389" path="/216/file0" dev="tmpfs" ino=1146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 665.680631][ T42] audit: type=1400 audit(2000001084.165:33065): avc: denied { unlink } for pid=29765 comm="syz.6.6389" name="#d9" dev="tmpfs" ino=1151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 665.688371][ T42] audit: type=1400 audit(2000001084.165:33066): avc: denied { mount } for pid=29765 comm="syz.6.6389" name="/" dev="overlay" ino=1147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 665.705442][ T42] audit: type=1400 audit(2000001084.195:33067): avc: denied { unmount } for pid=26395 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 665.733806][ T42] audit: type=1400 audit(2000001084.225:33068): avc: denied { read write } for pid=29767 comm="syz.6.6390" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 665.744217][ T42] audit: type=1400 audit(2000001084.225:33069): avc: denied { open } for pid=29767 comm="syz.6.6390" path="/dev/raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 665.752440][ T42] audit: type=1400 audit(2000001084.225:33070): avc: denied { ioctl } for pid=29767 comm="syz.6.6390" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 666.100583][ T42] audit: type=1400 audit(2000001084.595:33071): avc: denied { read write } for pid=29770 comm="syz.2.6391" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 666.108644][ T42] audit: type=1400 audit(2000001084.595:33072): avc: denied { open } for pid=29770 comm="syz.2.6391" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 666.120435][ T42] audit: type=1400 audit(2000001084.605:33073): avc: denied { ioctl } for pid=29770 comm="syz.2.6391" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 666.636398][T29794] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 666.953089][T29799] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 667.244394][T29785] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 667.318526][ T56] usb 11-1: new high-speed USB device number 36 using dummy_hcd [ 667.414632][ T5747] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 667.423160][ T5747] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 667.429476][ T5747] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 667.435956][ T5747] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 667.439637][ T5747] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 667.457617][ T56] usb 11-1: device descriptor read/64, error -71 [ 667.707557][ T56] usb 11-1: new high-speed USB device number 37 using dummy_hcd [ 667.837888][ T56] usb 11-1: device descriptor read/64, error -71 [ 667.947750][ T56] usb usb11-port1: attempt power cycle [ 668.095188][T29808] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.098520][T29808] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.101581][T29808] bridge_slave_0: entered allmulticast mode [ 668.105294][T29808] bridge_slave_0: entered promiscuous mode [ 668.114417][T29808] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.119287][T29808] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.122416][T29808] bridge_slave_1: entered allmulticast mode [ 668.126327][T29808] bridge_slave_1: entered promiscuous mode [ 668.166593][T29808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.177150][T29808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.205897][T29808] team0: Port device team_slave_0 added [ 668.211284][T29808] team0: Port device team_slave_1 added [ 668.235116][T29808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.238842][T29808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.250459][T29808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.256558][T29808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.260507][T29808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.271737][T29808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.287342][ T56] usb 11-1: new high-speed USB device number 38 using dummy_hcd [ 668.309035][ T56] usb 11-1: device descriptor read/8, error -71 [ 668.316080][T29808] hsr_slave_0: entered promiscuous mode [ 668.319554][T29808] hsr_slave_1: entered promiscuous mode [ 668.322547][T29808] debugfs: 'hsr0' already exists in 'hsr' [ 668.324924][T29808] Cannot create hsr debugfs directory [ 668.524570][T29851] netlink: 'syz.2.6407': attribute type 4 has an invalid length. [ 668.547673][ T56] usb 11-1: new high-speed USB device number 39 using dummy_hcd [ 668.567863][ T56] usb 11-1: device descriptor read/8, error -71 [ 668.677757][ T56] usb usb11-port1: unable to enumerate USB device [ 669.032945][T29880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6412'. [ 669.038847][T29880] tmpfs: Unknown parameter 'fr_block„KM!īs' [ 669.106981][T29880] overlayfs: missing 'workdir' [ 669.420834][T29808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 669.428059][T29808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 669.431509][T29808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 669.435779][T29808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 669.439523][T29808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 669.448239][T29808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 669.451005][T29808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 669.455252][T29808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 669.458555][T29919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6421'. [ 669.498904][ T5747] Bluetooth: hci4: command tx timeout [ 669.659038][T29808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.704135][T29808] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.712605][T12262] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.715752][T12262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.725774][ T1191] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.727959][ T1191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.209870][T29808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.618910][T30010] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6434'. [ 670.696629][ T42] kauditd_printk_skb: 332 callbacks suppressed [ 670.696643][ T42] audit: type=1400 audit(2000001089.185:33406): avc: denied { write } for pid=30013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 670.736901][ T42] audit: type=1400 audit(2000001089.225:33407): avc: denied { write } for pid=30018 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 670.750140][ T42] audit: type=1400 audit(2000001089.235:33408): avc: denied { read write } for pid=26395 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 670.762744][ T42] audit: type=1400 audit(2000001089.235:33409): avc: denied { open } for pid=26395 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 670.775692][ T42] audit: type=1400 audit(2000001089.235:33410): avc: denied { ioctl } for pid=26395 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 670.787946][T29808] veth0_vlan: entered promiscuous mode [ 670.823220][ T42] audit: type=1400 audit(2000001089.315:33411): avc: denied { map } for pid=30021 comm="syz.6.6435" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 670.842200][ T42] audit: type=1400 audit(2000001089.335:33412): avc: denied { recv } for pid=5669 comm="syz-executor" saddr=127.0.0.1 src=56182 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 670.851089][T29808] veth1_vlan: entered promiscuous mode [ 670.856423][ T42] audit: type=1400 audit(2000001089.345:33413): avc: denied { read } for pid=29986 comm="syz.0.6430" name="qrtr-tun" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 670.871888][ T42] audit: type=1400 audit(2000001089.345:33414): avc: denied { open } for pid=29986 comm="syz.0.6430" path="/dev/qrtr-tun" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 670.886854][ T42] audit: type=1400 audit(2000001089.375:33415): avc: denied { connect } for pid=29986 comm="syz.0.6430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 671.125569][T29808] veth0_macvtap: entered promiscuous mode [ 671.196646][T29808] veth1_macvtap: entered promiscuous mode [ 671.263847][T29808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.283508][T29808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.346386][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.355793][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.361683][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.364592][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.530749][ T9761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.533929][ T9761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.551468][T12262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.559865][T12262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.573189][ T40] usb 11-1: new high-speed USB device number 40 using dummy_hcd [ 671.581842][ T5747] Bluetooth: hci4: command tx timeout [ 671.728397][ T40] usb 11-1: Using ep0 maxpacket: 8 [ 671.736714][ T40] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 671.742936][ T40] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 671.747756][ T40] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 671.751205][ T40] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 671.756134][ T40] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 671.761506][ T40] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 671.766478][ T40] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.972622][T30092] 9p: Bad value for 'rfdno' [ 671.980724][ T40] usb 11-1: GET_CAPABILITIES returned 0 [ 671.985283][ T40] usbtmc 11-1:16.0: can't read capabilities [ 672.063523][T30096] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 672.067789][T30096] cgroup2: Unknown parameter 'p' [ 672.184955][T30054] veth0_to_team: Caught tx_queue_len zero misconfig [ 672.196703][T30109] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 672.197152][ T29] usb 11-1: USB disconnect, device number 40 [ 672.206375][T30109] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 672.207526][T14194] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 672.387385][T14194] usb 5-1: Using ep0 maxpacket: 8 [ 672.400024][T14194] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 672.404401][T14194] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 672.407804][T14194] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 672.410867][T14194] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 672.413963][T14194] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 672.418035][T14194] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 672.420986][T14194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.425817][T30116] nbd: socks must be embedded in a SOCK_ITEM attr [ 672.474186][T30123] Sensor A: ================= START STATUS ================= [ 672.476919][T30123] Sensor A: Test Pattern: 75% Colorbar [ 672.480521][T30123] Sensor A: Show Information: All [ 672.482735][T30123] Sensor A: Vertical Flip: false [ 672.484819][T30123] Sensor A: Horizontal Flip: true [ 672.486922][T30123] Sensor A: Brightness: 0 [ 672.489379][T30123] Sensor A: Contrast: 128 [ 672.491355][T30123] Sensor A: Hue: 0 [ 672.492969][T30123] Sensor A: Saturation: 255 [ 672.494345][T30123] Sensor A: Pixel Rate: 160000000 [ 672.495800][T30123] Sensor A: Horizontal Blanking: 800 [ 672.497862][T30123] Sensor A: Vertical Blanking: 4 [ 672.499625][T30123] Sensor A: ================== END STATUS ================== [ 672.541449][T30123] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 672.565387][T12271] Bluetooth: hci0: Frame reassembly failed (-84) [ 672.621798][T30130] netlink: 'syz.2.6453': attribute type 8 has an invalid length. [ 672.652434][T14194] usb 5-1: usb_control_msg returned -32 [ 672.654231][T14194] usbtmc 5-1:16.0: can't read capabilities [ 672.689409][T30134] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6453'. [ 672.694477][T30130] tmpfs: Bad value for 'mpol' [ 672.741267][T30136] program syz.6.6454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 672.799010][T30139] IPVS: length: 18 != 5000 [ 672.810690][T30139] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 672.814911][T30139] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 672.905159][T30142] bridge_slave_0: left allmulticast mode [ 672.907048][T30142] bridge_slave_0: left promiscuous mode [ 672.910019][T30142] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.915876][T30142] bridge_slave_1: left allmulticast mode [ 672.917864][T30142] bridge_slave_1: left promiscuous mode [ 672.919717][T30142] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.943815][T30142] bond0: (slave bond_slave_0): Releasing backup interface [ 672.962127][T30145] netdevsim netdevsim6: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 672.964704][T30142] bond0: (slave bond_slave_1): Releasing backup interface [ 672.990929][T30142] team0: Port device team_slave_0 removed [ 673.006747][T30142] team0: Port device team_slave_1 removed [ 673.014664][T30142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.021595][T30142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.027181][T30142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.030363][T30142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.033849][T30142] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 673.046207][T30148] sock: sock_timestamping_bind_phc: sock not bind to device [ 673.050729][T30143] team0: Mode changed to "activebackup" [ 673.058813][T30148] gfs2: not a GFS2 filesystem [ 673.378120][T27661] usb 11-1: new high-speed USB device number 41 using dummy_hcd [ 673.499932][T30151] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 673.537434][T27661] usb 11-1: Using ep0 maxpacket: 32 [ 673.540955][T27661] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 673.547856][T27661] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 673.551408][T27661] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 673.554827][T27661] usb 11-1: Product: syz [ 673.556712][T27661] usb 11-1: Manufacturer: syz [ 673.559695][T27661] usb 11-1: SerialNumber: syz [ 673.566581][T27661] usb 11-1: config 0 descriptor?? [ 673.570011][T30150] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 673.667618][ T64] Bluetooth: hci4: command tx timeout [ 673.780681][T30150] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 673.787744][ T5857] usb 11-1: USB disconnect, device number 41 [ 674.617454][ T64] Bluetooth: hci0: command 0x1003 tx timeout [ 674.628190][ T5747] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 674.834035][T30170] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6465'. [ 674.947816][T14338] usb 11-1: new high-speed USB device number 42 using dummy_hcd [ 674.968025][T30175] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 674.973528][T30175] SELinux: failed to load policy [ 674.992290][ T29] usb 5-1: USB disconnect, device number 31 [ 675.061528][T30183] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6466'. [ 675.096226][T30185] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 675.101482][T14338] usb 11-1: Using ep0 maxpacket: 32 [ 675.108175][T14338] usb 11-1: config 0 has an invalid interface number: 119 but max is 0 [ 675.115402][T14338] usb 11-1: config 0 has no interface number 0 [ 675.120700][T14338] usb 11-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 675.124513][T14338] usb 11-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 675.131022][T14338] usb 11-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 675.134425][T14338] usb 11-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 675.147163][T14338] usb 11-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 675.151646][T14338] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.154854][T14338] usb 11-1: Product: syz [ 675.156576][T14338] usb 11-1: Manufacturer: syz [ 675.158818][T14338] usb 11-1: SerialNumber: syz [ 675.162817][T14338] usb 11-1: config 0 descriptor?? [ 675.165713][T30163] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 675.175667][T14338] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.119/input/input89 [ 675.373291][T30163] netlink: 168 bytes leftover after parsing attributes in process `syz.6.6463'. [ 675.497968][T30205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6475'. [ 675.504515][T30205] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 675.507083][T14338] usb 11-1: USB disconnect, device number 42 [ 675.532737][T30205] romfs: unable to set blocksize [ 675.532737][T30205] [ 675.733377][ T42] kauditd_printk_skb: 335 callbacks suppressed [ 675.733389][ T42] audit: type=1400 audit(2000001094.225:33751): avc: denied { read write } for pid=30213 comm="syz.4.6477" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 675.738890][T30214] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 675.742080][ T5747] Bluetooth: hci4: command tx timeout [ 675.745683][ T42] audit: type=1400 audit(2000001094.225:33752): avc: denied { open } for pid=30213 comm="syz.4.6477" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 675.745710][ T42] audit: type=1400 audit(2000001094.225:33753): avc: denied { read write } for pid=30213 comm="syz.4.6477" name="frontend0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 675.745733][ T42] audit: type=1400 audit(2000001094.225:33754): avc: denied { open } for pid=30213 comm="syz.4.6477" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 675.745755][ T42] audit: type=1400 audit(2000001094.225:33755): avc: denied { ioctl } for pid=30213 comm="syz.4.6477" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=952 ioctlcmd=0x6f52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 675.769584][ T42] audit: type=1400 audit(2000001094.265:33756): avc: denied { recv } for pid=5747 comm="kworker/u34:5" saddr=127.0.0.1 src=56182 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 675.804981][ T42] audit: type=1400 audit(2000001094.295:33757): avc: denied { create } for pid=30218 comm="syz.4.6478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 675.815160][ T42] audit: type=1400 audit(2000001094.295:33758): avc: denied { read } for pid=30218 comm="syz.4.6478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 675.856709][ T42] audit: type=1400 audit(2000001094.345:33759): avc: denied { create } for pid=30220 comm="syz.4.6479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 675.864055][T30223] sctp: [Deprecated]: syz.0.6480 (pid 30223) Use of int in maxseg socket option. [ 675.864055][T30223] Use struct sctp_assoc_value instead [ 675.868333][ T42] audit: type=1400 audit(2000001094.355:33760): avc: denied { write } for pid=30220 comm="syz.4.6479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 675.889998][T30222] netlink: 'syz.4.6479': attribute type 8 has an invalid length. [ 676.069291][T30236] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6484'. [ 676.126750][T30242] loop4: detected capacity change from 0 to 2640 [ 676.133350][T30242] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.136391][T30080] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.141822][T30242] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.144723][T30080] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.147626][T30242] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.150442][T30080] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.153242][T30242] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.156198][T30080] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.159908][T30242] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.163330][T30080] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.166113][T30242] ldm_validate_partition_table(): Disk read failed. [ 676.169645][T30242] Dev loop4: unable to read RDB block 0 [ 676.171858][T30242] loop4: unable to read partition table [ 676.174290][T30242] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 676.217774][ T5145] ldm_validate_partition_table(): Disk read failed. [ 676.220802][ T5145] Dev loop4: unable to read RDB block 0 [ 676.223648][ T5145] loop4: unable to read partition table [ 676.283379][ T5145] ldm_validate_partition_table(): Disk read failed. [ 676.285789][ T5145] Dev loop4: unable to read RDB block 0 [ 676.289437][ T5145] loop4: unable to read partition table [ 676.318429][ T7788] usb 11-1: new high-speed USB device number 43 using dummy_hcd [ 676.336111][T30242] input: syz1 as /devices/virtual/input/input90 [ 676.490831][ T7788] usb 11-1: config 0 has an invalid interface number: 120 but max is 0 [ 676.497967][ T7788] usb 11-1: config 0 has no interface number 0 [ 676.499813][ T7788] usb 11-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 676.507189][ T7788] usb 11-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 676.516195][T30268] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 676.518121][ T7788] usb 11-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 676.526179][ T7788] usb 11-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 676.533680][ T7788] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.542027][ T7788] usb 11-1: config 0 descriptor?? [ 676.556865][ T7788] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.120/input/input91 [ 676.612313][T30275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.777571][T14194] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 676.868731][T30283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6500'. [ 676.872851][T30283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6500'. [ 676.881454][T30283] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6500'. [ 676.885432][T30287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6500'. [ 676.907489][T30289] netlink: 252 bytes leftover after parsing attributes in process `syz.0.6501'. [ 676.961436][T14194] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.966552][T30295] batadv_slave_1: entered promiscuous mode [ 676.967071][T14194] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.971417][T30294] batadv_slave_1: left promiscuous mode [ 676.977427][T14194] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 676.982750][T14194] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 676.986438][T14194] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.999183][T14194] usb 7-1: config 0 descriptor?? [ 677.175587][T30299] infiniband syz1: set down [ 677.184814][T30299] infiniband syz1: added ipvlan1 [ 677.201864][T30299] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 677.207878][T30299] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 677.214569][T30299] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 677.245145][T30299] RDS/IB: syz1: added [ 677.248292][T30299] smc: adding ib device syz1 with port count 1 [ 677.250926][T30299] smc: ib device syz1 port 1 has no pnetid [ 677.274636][ T5857] usb 11-1: USB disconnect, device number 43 [ 677.436201][T14194] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 678.816454][T30350] hpfs: Bad magic ... probably not HPFS [ 679.034358][ T29] IPVS: starting estimator thread 0... [ 679.138050][T30358] IPVS: using max 45 ests per chain, 108000 per kthread [ 679.177837][T30363] ip6tnl0: Caught tx_queue_len zero misconfig [ 679.399244][ T29] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 679.400430][ T5857] usb 7-1: USB disconnect, device number 50 [ 679.539182][ T29] usb 5-1: device descriptor read/64, error -71 [ 679.788271][ T29] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 679.824511][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.836145][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.846404][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.852199][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.917307][ T29] usb 5-1: device descriptor read/64, error -71 [ 680.029224][ T29] usb usb5-port1: attempt power cycle [ 680.367347][ T29] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 680.380899][T30425] __nla_validate_parse: 5 callbacks suppressed [ 680.380910][T30425] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6539'. [ 680.388114][ T29] usb 5-1: device descriptor read/8, error -71 [ 680.567572][T30431] syzkaller0: entered promiscuous mode [ 680.569955][T30431] syzkaller0: entered allmulticast mode [ 680.627442][ T29] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 680.647754][ T29] usb 5-1: device descriptor read/8, error -71 [ 680.748594][ T42] kauditd_printk_skb: 243 callbacks suppressed [ 680.748610][ T42] audit: type=1400 audit(2000001099.245:34004): avc: denied { write } for pid=30438 comm="syz.6.6542" path="socket:[171019]" dev="sockfs" ino=171019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 680.752467][T30440] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6542'. [ 680.759570][ T29] usb usb5-port1: unable to enumerate USB device [ 680.779392][ T42] audit: type=1400 audit(2000001099.245:34005): avc: denied { write } for pid=30438 comm="syz.6.6542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 680.825663][T30439] kvm: user requested TSC rate below hardware speed [ 680.894794][ T42] audit: type=1400 audit(2000001099.385:34006): avc: denied { create } for pid=30442 comm="syz.4.6543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 680.899136][T30443] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 680.902999][ T42] audit: type=1400 audit(2000001099.385:34007): avc: denied { setopt } for pid=30442 comm="syz.4.6543" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 680.914876][ T42] audit: type=1400 audit(2000001099.395:34008): avc: denied { create } for pid=30442 comm="syz.4.6543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 680.922902][ T42] audit: type=1400 audit(2000001099.395:34009): avc: denied { ioctl } for pid=30442 comm="syz.4.6543" path="socket:[169396]" dev="sockfs" ino=169396 ioctlcmd=0x8995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 680.943866][ T42] audit: type=1400 audit(2000001099.405:34010): avc: denied { read } for pid=30442 comm="syz.4.6543" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 681.012634][ T42] audit: type=1400 audit(2000001099.505:34011): avc: denied { mac_admin } for pid=30446 comm="syz.4.6545" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 681.031308][ T42] audit: type=1400 audit(2000001099.505:34012): avc: denied { create } for pid=30446 comm="syz.4.6545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 681.039626][ T42] audit: type=1400 audit(2000001099.515:34013): avc: denied { bind } for pid=30446 comm="syz.4.6545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 681.062551][T30452] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6546'. [ 681.265492][T30461] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6550'. [ 681.559053][T30471] netlink: 172 bytes leftover after parsing attributes in process `syz.6.6554'. [ 681.625346][T30475] netlink: 6 bytes leftover after parsing attributes in process `syz.6.6556'. [ 681.632359][T30475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 681.711164][T30473] batadv_slave_0: entered promiscuous mode [ 681.713426][T30473] batadv_slave_0: entered allmulticast mode [ 681.952321][T30493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6561'. [ 681.956038][T30493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6561'. [ 681.999565][T30496] netlink: 'syz.4.6563': attribute type 5 has an invalid length. [ 682.058410][T30501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=30501 comm=syz.0.6564 [ 682.063847][T30502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=30502 comm=syz.0.6564 [ 682.074780][ T5747] Bluetooth: hci1: Malformed Event: 0x13 [ 682.339279][ T8939] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 682.437764][T30526] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 682.503246][ T8939] usb 7-1: unable to get BOS descriptor or descriptor too short [ 682.509507][ T8939] usb 7-1: not running at top speed; connect to a high speed hub [ 682.520533][ T8939] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 682.526487][ T8939] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 682.532861][ T8939] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 682.543883][ T8939] usb 7-1: config 14 has no interface number 0 [ 682.549193][ T8939] usb 7-1: config 14 has no interface number 1 [ 682.554455][ T8939] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 682.563875][ T8939] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 682.569663][ T8939] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 682.574241][ T8939] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 682.579086][ T8939] usb 7-1: config 14 interface 57 has no altsetting 0 [ 682.581801][ T8939] usb 7-1: config 14 interface 228 has no altsetting 0 [ 682.586943][ T8939] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 682.591286][ T8939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.594646][ T8939] usb 7-1: Product: syz [ 682.596352][ T8939] usb 7-1: Manufacturer: syz [ 682.598968][ T8939] usb 7-1: SerialNumber: syz [ 682.717433][T14194] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 682.869317][T14194] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 682.874018][T14194] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 682.879148][T14194] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 682.885939][T14194] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 682.889772][T14194] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.893040][T14194] usb 9-1: Product: syz [ 682.894756][T14194] usb 9-1: Manufacturer: syz [ 682.896689][T14194] usb 9-1: SerialNumber: syz [ 682.901248][T14194] usb 9-1: config 0 descriptor?? [ 682.904193][T30526] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 682.969488][T14194] rc_core: IR keymap rc-streamzap not found [ 682.973388][T14194] Registered IR keymap rc-empty [ 682.976294][T14194] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 682.982421][T14194] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input92 [ 683.016458][ T8939] legousbtower 7-1:14.57: interrupt endpoints not found [ 683.221476][T30540] netlink: 228 bytes leftover after parsing attributes in process `syz.6.6576'. [ 683.422873][ T8939] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 683.441515][ T8939] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 683.642929][T30554] ALSA: seq fatal error: cannot create timer (-19) [ 684.724100][T27661] usb 9-1: USB disconnect, device number 17 [ 684.866199][T30604] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 685.063878][T30624] SELinux: truncated policydb string identifier [ 685.066781][T30624] SELinux: failed to load policy [ 685.089047][T27661] usb 7-1: USB disconnect, device number 51 [ 685.115305][T27661] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 685.742247][T30657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30657 comm=syz.2.6595 [ 685.827551][T12264] Bluetooth: hci0: Frame reassembly failed (-84) [ 685.837851][T30659] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 685.844249][ T42] kauditd_printk_skb: 243 callbacks suppressed [ 685.844265][ T42] audit: type=1400 audit(2000001104.335:34257): avc: denied { create } for pid=30658 comm="syz.6.6596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 685.856003][ T42] audit: type=1400 audit(2000001104.335:34258): avc: denied { bind } for pid=30658 comm="syz.6.6596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 687.765096][T30604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 687.816415][ T42] audit: type=1400 audit(2000001106.305:34259): avc: denied { recv } for pid=5669 comm="syz-executor" saddr=127.0.0.1 src=56182 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 687.850584][ T42] audit: type=1400 audit(2000001106.335:34260): avc: denied { read write } for pid=30664 comm="syz.2.6597" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 687.869136][ T42] audit: type=1400 audit(2000001106.335:34261): avc: denied { open } for pid=30664 comm="syz.2.6597" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 687.880562][ T42] audit: type=1400 audit(2000001106.335:34262): avc: denied { ioctl } for pid=30664 comm="syz.2.6597" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 687.891607][ T42] audit: type=1400 audit(2000001106.335:34263): avc: denied { create } for pid=30664 comm="syz.2.6597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 687.899902][ T42] audit: type=1400 audit(2000001106.335:34264): avc: denied { bind } for pid=30664 comm="syz.2.6597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 687.907847][ T42] audit: type=1400 audit(2000001106.335:34265): avc: denied { setopt } for pid=30664 comm="syz.2.6597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 687.908290][ T5747] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 687.915921][ T42] audit: type=1400 audit(2000001106.335:34266): avc: denied { accept } for pid=30664 comm="syz.2.6597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 687.916746][ T64] Bluetooth: hci0: command 0x1003 tx timeout [ 688.053630][T30673] xt_l2tp: unknown flags: 51 [ 688.055780][T30673] xt_l2tp: unknown flags: 51 [ 688.061426][T30673] xt_l2tp: unknown flags: 51 [ 688.064584][T30673] xt_l2tp: unknown flags: 51 [ 688.069750][T30673] xt_l2tp: unknown flags: 51 [ 688.073603][T30673] xt_l2tp: unknown flags: 51 [ 688.076667][T30673] xt_l2tp: unknown flags: 51 [ 688.080283][T30673] xt_l2tp: unknown flags: 51 [ 688.084511][T30673] xt_l2tp: unknown flags: 51 [ 688.092041][T30673] xt_l2tp: unknown flags: 51 [ 688.117648][T14194] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 688.136261][T30683] netlink: set zone limit has 4 unknown bytes [ 688.274178][T14194] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 688.278681][T30688] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 688.280625][T30688] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 688.282674][T14194] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 688.288412][T14194] usb 9-1: Product: syz [ 688.290435][T30688] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 688.291915][T14194] usb 9-1: Manufacturer: syz [ 688.294615][T14194] usb 9-1: SerialNumber: syz [ 688.308050][T14194] usb 9-1: config 0 descriptor?? [ 688.312574][T30688] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 688.314552][T30688] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 688.326905][T30688] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 688.335498][T30688] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 688.339726][T30688] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 688.348171][T30688] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 688.546368][T30695] netlink: 'syz.0.6605': attribute type 8 has an invalid length. [ 688.551580][T27661] usb 9-1: USB disconnect, device number 18 [ 688.556682][T30695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6605'. [ 688.587038][T30695] bond0: entered promiscuous mode [ 688.590856][T30695] bond_slave_0: entered promiscuous mode [ 688.593046][T30695] bond_slave_1: entered promiscuous mode [ 688.605803][T30695] bond0: left promiscuous mode [ 688.608610][T30695] bond_slave_0: left promiscuous mode [ 688.611553][T30695] bond_slave_1: left promiscuous mode [ 688.819863][T30716] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 688.891908][T30721] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6611'. [ 689.399210][T30756] netlink: 'syz.0.6624': attribute type 1 has an invalid length. [ 689.441907][T30756] bond1: entered promiscuous mode [ 689.446693][T30756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 689.478466][T30756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 689.480769][T30756] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 689.483786][T30756] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 689.489718][T30756] bond1: (slave vti0): making interface the new active one [ 689.491979][T30756] vti0: entered promiscuous mode [ 689.494824][T30756] bond1: (slave vti0): Enslaving as an active interface with an up link [ 689.611481][T30756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6624'. [ 689.616859][T30756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6624'. [ 689.890281][ T5821] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.990119][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 690.016605][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 690.025631][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 690.036744][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 690.045682][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 690.273436][ T5821] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.317633][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 690.378018][ T64] Bluetooth: hci5: command 0x0c1a tx timeout [ 690.449484][T30780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6631'. [ 690.451550][ T5821] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.631338][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.700122][ T5821] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.817771][T30796] netlink: 'syz.0.6634': attribute type 1 has an invalid length. [ 690.844535][T30796] bond2: entered promiscuous mode [ 690.846986][T30796] 8021q: adding VLAN 0 to HW filter on device bond2 [ 690.859852][ T42] kauditd_printk_skb: 142 callbacks suppressed [ 690.859869][ T42] audit: type=1400 audit(2000001109.355:34409): avc: denied { create } for pid=30795 comm="syz.0.6634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 690.878352][T30796] xt_hashlimit: size too large, truncated to 1048576 [ 690.881224][ T42] audit: type=1400 audit(2000001109.375:34410): avc: denied { setopt } for pid=30795 comm="syz.0.6634" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 690.911491][ T42] audit: type=1400 audit(2000001109.405:34411): avc: denied { read } for pid=5447 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 690.951712][ T42] audit: type=1400 audit(2000001109.425:34412): avc: denied { search } for pid=5447 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.967157][T30799] ¾x9’: renamed from bridge_slave_0 (while UP) [ 690.986922][ T42] audit: type=1400 audit(2000001109.425:34413): avc: denied { search } for pid=5447 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.013239][ T42] audit: type=1400 audit(2000001109.425:34414): avc: denied { search } for pid=5447 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.032878][ T9766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.033453][ T42] audit: type=1400 audit(2000001109.425:34415): avc: denied { read } for pid=5447 comm="dhcpcd" name="n111" dev="tmpfs" ino=28330 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 691.037201][ T9766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.038668][T30801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.038715][T30802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.058230][T30802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.073840][ T5821] bridge_slave_1: left allmulticast mode [ 691.075871][ T5821] bridge_slave_1: left promiscuous mode [ 691.083075][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.086475][ T42] audit: type=1400 audit(2000001109.425:34416): avc: denied { open } for pid=5447 comm="dhcpcd" path="/run/udev/data/n111" dev="tmpfs" ino=28330 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 691.095849][ T5821] bridge_slave_0: left allmulticast mode [ 691.098101][ T42] audit: type=1400 audit(2000001109.425:34417): avc: denied { getattr } for pid=5447 comm="dhcpcd" path="/run/udev/data/n111" dev="tmpfs" ino=28330 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 691.098147][ T42] audit: type=1400 audit(2000001109.445:34418): avc: denied { recv } for pid=5669 comm="syz-executor" saddr=127.0.0.1 src=56182 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 691.114751][ T5821] bridge_slave_0: left promiscuous mode [ 691.116832][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.268274][ T5821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.275220][ T5821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.281393][ T5821] bond0 (unregistering): Released all slaves [ 691.290995][ T5447] 8021q: adding VLAN 0 to HW filter on device eth10 [ 691.460548][ T5447] 8021q: adding VLAN 0 to HW filter on device eth11 [ 691.694622][T30767] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.700852][T30767] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.703353][T30767] bridge_slave_0: entered allmulticast mode [ 691.706057][T30767] bridge_slave_0: entered promiscuous mode [ 691.710111][T30767] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.712370][T30767] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.714705][T30767] bridge_slave_1: entered allmulticast mode [ 691.719045][T30767] bridge_slave_1: entered promiscuous mode [ 691.723065][ T5447] 8021q: adding VLAN 0 to HW filter on device eth12 [ 691.770731][T30833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6638'. [ 691.780714][T30767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.785370][T30767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.853652][T30834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6637'. [ 691.855435][T30840] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6640'. [ 691.861020][T30834] Unknown options in mask b7f2 [ 691.926794][T30767] team0: Port device team_slave_0 added [ 691.940992][T30767] team0: Port device team_slave_1 added [ 692.007645][ T5821] hsr_slave_0: left promiscuous mode [ 692.012071][ T5821] hsr_slave_1: left promiscuous mode [ 692.016701][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.034295][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.050355][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.059387][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.080221][ T5821] veth1_macvtap: left promiscuous mode [ 692.081049][T30858] Bluetooth: MGMT ver 1.23 [ 692.084463][ T5821] veth0_macvtap: left promiscuous mode [ 692.086287][ T5821] veth1_vlan: left promiscuous mode [ 692.089804][ T5821] veth0_vlan: left promiscuous mode [ 692.148817][ T64] Bluetooth: hci0: command tx timeout [ 692.150652][T30864] fuse: blksize only supported for fuseblk [ 692.298015][ T7788] usb 11-1: new high-speed USB device number 44 using dummy_hcd [ 692.320405][ T5821] team0 (unregistering): Port device team_slave_1 removed [ 692.353063][ T5821] team0 (unregistering): Port device team_slave_0 removed [ 692.376680][T30880] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 692.381356][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 692.432321][T30884] vxfs: WRONG superblock magic 00000000 at 1 [ 692.434475][T30884] vxfs: WRONG superblock magic 00000000 at 8 [ 692.436364][T30884] vxfs: can't find superblock. [ 692.449361][ T7788] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 692.459398][ T7788] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.463953][ T7788] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.467760][ T64] Bluetooth: hci5: command 0x0c1a tx timeout [ 692.470021][ T7788] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 692.487975][ T7788] usb 11-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 692.494773][ T7788] usb 11-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 692.508272][ T7788] usb 11-1: Manufacturer: syz [ 692.512870][ T7788] usb 11-1: config 0 descriptor?? [ 692.513543][T30767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.524773][T30767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.539321][T30767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.546624][T30767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.549158][T30767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.557624][T30767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.563048][ T5447] 8021q: adding VLAN 0 to HW filter on device eth13 [ 692.663507][T30767] hsr_slave_0: entered promiscuous mode [ 692.666337][T30767] hsr_slave_1: entered promiscuous mode [ 692.669216][T30767] debugfs: 'hsr0' already exists in 'hsr' [ 692.671018][T30767] Cannot create hsr debugfs directory [ 692.753658][ T7788] usbhid 11-1:0.0: can't add hid device: -71 [ 692.755663][T30890] program syz.0.6652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 692.764211][ T7788] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 692.788900][ T7788] usb 11-1: USB disconnect, device number 44 [ 692.907025][T30901] sd 0:0:0:0: PR command failed: 1026 [ 692.909482][T30901] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 692.911848][T30901] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 693.065453][T30922] qnx4: unable to read the superblock [ 694.044613][T30959] xt_hashlimit: size too large, truncated to 1048576 [ 694.045645][ T64] Bluetooth: hci5: unexpected event for opcode 0x2042 [ 694.190736][T30962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7461 sclass=netlink_route_socket pid=30962 comm=syz.2.6668 [ 694.210863][T30767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 694.217474][ T64] Bluetooth: hci0: command tx timeout [ 694.241548][T30767] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 694.244934][T30767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 694.263657][T30767] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 694.266665][T30767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 694.291839][T30767] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 694.296050][T30964] befs: (loop2): No write support. Marking filesystem read-only [ 694.305222][T30767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 694.311184][T30964] befs: (loop2): unable to read superblock [ 694.327783][T30767] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 694.391857][T30973] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6669'. [ 694.457850][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 694.545625][T30767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.612565][T30767] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.634114][T12267] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.636489][T12267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.656996][T12267] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.659441][T12267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.099738][T30995] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6670'. [ 695.102557][T30995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6670'. [ 695.105401][T30995] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6670'. [ 695.281338][T30767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.319839][T30767] veth0_vlan: entered promiscuous mode [ 695.326053][T30767] veth1_vlan: entered promiscuous mode [ 695.356782][T30767] veth0_macvtap: entered promiscuous mode [ 695.362190][T30767] veth1_macvtap: entered promiscuous mode [ 695.408440][T30767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.414822][T30767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.425010][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.429569][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.548495][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.555116][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.830814][ T8916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.835864][ T8916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.864582][ T8921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.867735][ T8921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.877068][ T42] kauditd_printk_skb: 343 callbacks suppressed [ 695.877083][ T42] audit: type=1400 audit(2000001114.365:34762): avc: denied { write } for pid=31034 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.913315][ T42] audit: type=1400 audit(2000001114.365:34763): avc: denied { mounton } for pid=30767 comm="syz-executor" path="/syzkaller.mIzeUN/syz-tmp" dev="sda1" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 695.940715][ T42] audit: type=1400 audit(2000001114.375:34764): avc: denied { mount } for pid=30767 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 695.962140][ T42] audit: type=1400 audit(2000001114.375:34765): avc: denied { mounton } for pid=30767 comm="syz-executor" path="/syzkaller.mIzeUN/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 695.980436][ T42] audit: type=1400 audit(2000001114.375:34766): avc: denied { mount } for pid=30767 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 695.988416][T31037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.990895][T31037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.995416][ T6886] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 696.011363][ T42] audit: type=1400 audit(2000001114.375:34767): avc: denied { mounton } for pid=30767 comm="syz-executor" path="/syzkaller.mIzeUN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 696.033002][ T42] audit: type=1400 audit(2000001114.375:34768): avc: denied { mounton } for pid=30767 comm="syz-executor" path="/syzkaller.mIzeUN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=174460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 696.050334][ T42] audit: type=1400 audit(2000001114.385:34769): avc: denied { unmount } for pid=30767 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 696.062374][ T42] audit: type=1400 audit(2000001114.385:34770): avc: denied { mounton } for pid=30767 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 696.073350][ T42] audit: type=1400 audit(2000001114.385:34771): avc: denied { mount } for pid=30767 comm="syz-executor" name="/" dev="gadgetfs" ino=9560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 696.137554][ T6886] usb 5-1: device descriptor read/64, error -71 [ 696.141223][T14338] libceph: connect (1)[c::]:6789 error -101 [ 696.154532][T14338] libceph: mon0 (1)[c::]:6789 connect error [ 696.204836][T31045] ceph: No mds server is up or the cluster is laggy [ 696.302156][ T64] Bluetooth: hci0: command tx timeout [ 696.388211][ T6886] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 696.518600][ T6886] usb 5-1: device descriptor read/64, error -71 [ 696.629171][ T6886] usb usb5-port1: attempt power cycle [ 696.753074][T31072] kvm: kvm [31071]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000001d) = 0x1af [ 696.758696][T31072] batadv_slave_1: entered promiscuous mode [ 696.788517][T31071] batadv_slave_1: left promiscuous mode [ 696.874467][T31078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6685'. [ 696.877253][T31078] netlink: 'syz.2.6685': attribute type 1 has an invalid length. [ 696.879706][T31078] nbd: error processing sock list [ 696.895828][T31076] syzkaller0: entered promiscuous mode [ 696.898203][T31076] syzkaller0: entered allmulticast mode [ 696.997342][ T6886] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 697.018970][ T6886] usb 5-1: device descriptor read/8, error -71 [ 697.277726][ T6886] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 697.299762][ T6886] usb 5-1: device descriptor read/8, error -71 [ 697.407702][ T6886] usb usb5-port1: unable to enumerate USB device [ 697.908040][T31108] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6692'. [ 697.964229][T31112] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6694'. [ 698.011427][T31115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6696'. [ 698.015106][T31115] block nbd4: Unsupported socket: should be TCP or UNIX. [ 698.389038][ T64] Bluetooth: hci0: command tx timeout [ 698.987050][T31131] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.6700'. [ 699.079263][T31131] netlink: 'syz.0.6700': attribute type 2 has an invalid length. [ 699.574796][T31150] fuse: Unknown parameter '0x0000000000000003' [ 699.934224][T31162] netlink: 'syz.6.6705': attribute type 2 has an invalid length. [ 699.944866][T31162] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6705'. [ 699.999022][T31163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6705'. [ 700.764996][T31178] SELinux: policydb string length 0 does not match expected length 8 [ 700.768518][T31178] SELinux: failed to load policy [ 700.772670][T31178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.780384][T31178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.931334][T14338] Process accounting resumed [ 701.654536][ T42] kauditd_printk_skb: 183 callbacks suppressed [ 701.654552][ T42] audit: type=1400 audit(2000001120.145:34955): avc: denied { write } for pid=31180 comm="syz.2.6710" name="001" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 701.691841][T31181] usb usb4: usbfs: process 31181 (syz.2.6710) did not claim interface 0 before use [ 701.702994][T31181] netlink: 'syz.2.6710': attribute type 1 has an invalid length. [ 701.718266][ T42] audit: type=1400 audit(2000001120.205:34956): avc: denied { read } for pid=31184 comm="syz.3.6712" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 701.728556][T31181] 8021q: adding VLAN 0 to HW filter on device bond3 [ 701.735129][T31181] netlink: 'syz.2.6710': attribute type 1 has an invalid length. [ 701.736426][T31187] usb usb4: usbfs: process 31187 (syz.2.6710) did not claim interface 0 before use [ 701.739837][ T42] audit: type=1400 audit(2000001120.205:34957): avc: denied { open } for pid=31184 comm="syz.3.6712" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 701.749384][ T42] audit: type=1400 audit(2000001120.215:34958): avc: denied { allowed } for pid=31182 comm="syz.6.6711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 701.755777][ T42] audit: type=1400 audit(2000001120.215:34959): avc: denied { create } for pid=31182 comm="syz.6.6711" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 701.763177][ T42] audit: type=1400 audit(2000001120.225:34960): avc: denied { ioctl } for pid=31184 comm="syz.3.6712" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 701.770801][ T42] audit: type=1400 audit(2000001120.225:34961): avc: denied { set_context_mgr } for pid=31184 comm="syz.3.6712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 701.776911][ T42] audit: type=1400 audit(2000001120.225:34962): avc: denied { map_create } for pid=31184 comm="syz.3.6712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 701.782849][ T42] audit: type=1400 audit(2000001120.225:34963): avc: denied { prog_load } for pid=31184 comm="syz.3.6712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 701.789318][ T42] audit: type=1400 audit(2000001120.225:34964): avc: denied { execmem } for pid=31184 comm="syz.3.6712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 701.933416][T31205] Cannot find del_set index 2 as target [ 701.936218][T31205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6716'. [ 701.998987][T31214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6719'. [ 702.018367][T31214] geneve3: entered promiscuous mode [ 702.022776][T31214] geneve3: entered allmulticast mode [ 702.027720][T17585] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 702.032496][T17585] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 702.036468][T17585] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 702.041096][T17585] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 702.100810][T31223] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6723'. [ 702.103059][T31227] 9pnet_virtio: no channels available for device syz [ 702.106307][T31227] 9pnet_virtio: no channels available for device syz [ 702.109131][T31227] 9pnet_virtio: no channels available for device syz [ 702.111673][T31227] 9pnet_virtio: no channels available for device syz [ 702.114099][T31227] 9pnet_virtio: no channels available for device syz [ 702.116446][T31227] 9pnet_virtio: no channels available for device syz [ 702.119354][T31227] 9pnet_virtio: no channels available for device syz [ 702.121935][T31227] 9pnet_virtio: no channels available for device syz [ 702.124996][T31227] 9pnet_virtio: no channels available for device syz [ 702.130024][T31227] 9pnet_virtio: no channels available for device syz [ 702.132746][T31227] 9pnet_virtio: no channels available for device syz [ 702.135040][T31227] 9pnet_virtio: no channels available for device syz [ 702.137543][T31227] 9pnet_virtio: no channels available for device syz [ 702.140969][T31227] 9pnet_virtio: no channels available for device syz [ 702.144399][T31227] 9pnet_virtio: no channels available for device syz [ 702.146752][T31227] 9pnet_virtio: no channels available for device syz [ 702.149759][T31227] 9pnet_virtio: no channels available for device syz [ 702.151997][T31227] 9pnet_virtio: no channels available for device syz [ 702.154343][T31227] 9pnet_virtio: no channels available for device syz [ 702.156909][T31227] 9pnet_virtio: no channels available for device syz [ 702.159606][T31227] 9pnet_virtio: no channels available for device syz [ 702.173112][T31220] 8021q: adding VLAN 0 to HW filter on device eth0 [ 702.181733][T31220] 8021q: adding VLAN 0 to HW filter on device eth1 [ 702.185135][T31220] 8021q: adding VLAN 0 to HW filter on device eth2 [ 702.188663][T31220] 8021q: adding VLAN 0 to HW filter on device eth3 [ 702.192187][T31220] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 702.199752][ T6886] syz1: Port: 1 Link ACTIVE [ 702.256310][T31216] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 702.287963][T31216] syzkaller0: entered promiscuous mode [ 702.289996][T31216] syzkaller0: entered allmulticast mode [ 702.488436][ T56] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 702.650520][ T56] usb 5-1: no configurations [ 702.652594][ T56] usb 5-1: can't read configurations, error -22 [ 702.771852][T31239] tmpfs: Unknown parameter 'nr_ėnodes' [ 702.781932][ T56] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 702.939289][ T56] usb 5-1: no configurations [ 702.941321][ T56] usb 5-1: can't read configurations, error -22 [ 702.944365][ T56] usb usb5-port1: attempt power cycle [ 703.304894][ T56] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 703.338663][ T56] usb 5-1: no configurations [ 703.340679][ T56] usb 5-1: can't read configurations, error -22 [ 703.467588][ T56] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 703.490758][ T56] usb 5-1: no configurations [ 703.492782][ T56] usb 5-1: can't read configurations, error -22 [ 703.497840][ T56] usb usb5-port1: unable to enumerate USB device [ 703.567514][T31264] Cannot find set identified by id 1 to match [ 703.567514][T31263] Cannot find set identified by id 1 to match [ 703.612104][T31264] macsec1: entered promiscuous mode [ 703.616523][T31264] macsec1: entered allmulticast mode [ 704.061070][T31277] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 704.075705][T31277] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 704.193898][T31282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6739'. [ 704.606339][T31292] overlayfs: failed to resolve './file1': -2 [ 705.202917][T31316] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6743'. [ 705.281165][T31321] smc: net device wlan0 erased user defined pnetid SYZ0 [ 705.591735][T31335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6748'. [ 705.617528][T31335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6748'. [ 706.098901][ T56] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 706.142996][T31383] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 706.148597][T31383] UDF-fs: Scanning with blocksize 2048 failed [ 706.154984][T31383] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 706.158266][T31383] UDF-fs: Scanning with blocksize 4096 failed [ 706.232143][T31385] IPVS: set_ctl: invalid protocol: 960 0.32.0.0:8448 [ 706.258548][ T56] usb 7-1: Using ep0 maxpacket: 32 [ 706.262921][ T56] usb 7-1: unable to get BOS descriptor or descriptor too short [ 706.270373][ T56] usb 7-1: string descriptor 0 read error: -22 [ 706.272728][ T56] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 706.276946][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.305449][ T56] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 706.316258][ T56] dw2102: su3000_power_ctrl: 1, initialized 0 [ 706.319240][ T56] dvb-usb: bulk message failed: -22 (2/0) [ 706.327996][ T56] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 706.335866][ T56] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 706.344014][ T56] usb 7-1: media controller created [ 706.346039][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 706.357922][ T56] dw2102: i2c transfer failed. [ 706.359579][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 706.362298][ T56] dw2102: i2c transfer failed. [ 706.364378][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 706.370982][ T56] dw2102: i2c transfer failed. [ 706.382166][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 706.390262][ T56] dw2102: i2c transfer failed. [ 706.391856][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 706.396810][ T56] dw2102: i2c transfer failed. [ 706.399117][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 706.401597][ T56] dw2102: i2c transfer failed. [ 706.403624][ T56] dvb-usb: MAC address: 02:02:02:02:02:02 [ 706.424350][ T56] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 706.457502][ T56] dvb-usb: bulk message failed: -22 (3/0) [ 706.463557][ T56] dw2102: command 0x0e transfer failed. [ 706.465681][ T56] dvb-usb: bulk message failed: -22 (3/0) [ 706.469882][ T56] dw2102: command 0x0e transfer failed. [ 706.770665][ T42] kauditd_printk_skb: 297 callbacks suppressed [ 706.770684][ T42] audit: type=1400 audit(2000001125.265:35262): avc: denied { ioctl } for pid=31395 comm="syz.0.6765" path="socket:[177517]" dev="sockfs" ino=177517 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 706.791403][ T56] dvb-usb: bulk message failed: -22 (3/0) [ 706.797934][ T56] dw2102: command 0x0e transfer failed. [ 706.801749][ T56] dvb-usb: bulk message failed: -22 (3/0) [ 706.804278][ T56] dw2102: command 0x0e transfer failed. [ 706.806735][ T56] dvb-usb: bulk message failed: -22 (1/0) [ 706.810424][ T56] dw2102: command 0x51 transfer failed. [ 706.812924][T31373] dvb-usb: bulk message failed: -22 (5/0) [ 706.815868][T31373] dw2102: i2c transfer failed. [ 706.836110][ T42] audit: type=1400 audit(2000001125.325:35263): avc: denied { execmem } for pid=31410 comm="syz.6.6769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 706.889409][ T42] audit: type=1400 audit(2000001125.385:35264): avc: denied { ioctl } for pid=31411 comm="syz.3.6770" path="socket:[177535]" dev="sockfs" ino=177535 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 706.915187][ T56] DVB: Unable to find symbol ds3000_attach() [ 706.920117][ T56] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 707.018822][ T56] rc_core: IR keymap rc-su3000 not found [ 707.023283][ T56] Registered IR keymap rc-empty [ 707.028609][ T56] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 707.050551][ T56] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input94 [ 707.058018][ T56] dvb-usb: schedule remote query interval to 150 msecs. [ 707.059177][ T42] audit: type=1400 audit(2000001125.555:35265): avc: denied { read } for pid=5130 comm="acpid" name="event3" dev="devtmpfs" ino=4749 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 707.060869][ T56] dw2102: su3000_power_ctrl: 0, initialized 1 [ 707.060885][ T56] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 707.072700][ T56] usb 7-1: USB disconnect, device number 52 [ 707.095433][ T42] audit: type=1400 audit(2000001125.555:35266): avc: denied { open } for pid=5130 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=4749 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 707.113856][ T42] audit: type=1400 audit(2000001125.555:35267): avc: denied { ioctl } for pid=5130 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=4749 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 707.132413][ T56] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 707.144317][ T42] audit: type=1400 audit(2000001125.635:35268): avc: denied { create } for pid=31410 comm="syz.6.6769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 707.145480][T31417] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6769'. [ 707.164720][ T42] audit: type=1400 audit(2000001125.635:35269): avc: denied { setopt } for pid=31410 comm="syz.6.6769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 707.173029][ T42] audit: type=1400 audit(2000001125.635:35270): avc: denied { read } for pid=31410 comm="syz.6.6769" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 707.180088][T31417] bond0 (unregistering): Released all slaves [ 707.184418][ T42] audit: type=1400 audit(2000001125.635:35271): avc: denied { open } for pid=31410 comm="syz.6.6769" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 707.492260][T31428] binder: BINDER_SET_CONTEXT_MGR already set [ 707.494770][T31428] binder: 31426:31428 ioctl 4018620d 200000004a80 returned -16 [ 707.555459][T31429] vxfs: WRONG superblock magic 00000000 at 1 [ 707.558409][T31429] vxfs: WRONG superblock magic 00000000 at 8 [ 707.560858][T31429] vxfs: can't find superblock. [ 707.899385][T31436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6776'. [ 709.371249][T31399] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 709.448162][T31447] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6781'. [ 709.548590][T31450] serio: Serial port ptm0 [ 709.800469][T31459] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 709.803938][T31459] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 709.806634][T31459] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 709.810745][T31459] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 709.960453][T31463] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.962764][T31463] bridge0: port 1(1¾x9’) entered disabled state [ 710.016154][T14338] IPVS: starting estimator thread 0... [ 710.030819][T31467] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6785'. [ 710.125074][T31463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 710.125987][T31465] IPVS: using max 44 ests per chain, 105600 per kthread [ 710.163695][T31463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 710.251548][T31472] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 710.352674][T31483] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6789'. [ 710.470813][ T8939] syz1: Port: 1 Link DOWN [ 710.473548][ T5821] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.481234][ T5821] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.484318][ T5821] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.487169][ T5821] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.612500][T31494] IPVS: Error connecting to the multicast addr [ 710.634787][T31495] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.080390][T31514] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6798'. [ 711.492449][ T7788] hid_parser_main: 4086 callbacks suppressed [ 711.492469][ T7788] hid-generic E049:0000:0000.0022: unknown main item tag 0x0 [ 711.499585][ T7788] hid-generic E049:0000:0000.0022: unknown main item tag 0x0 [ 711.499938][T31532] trusted_key: encrypted_key: insufficient parameters specified [ 711.503158][ T7788] hid-generic E049:0000:0000.0022: hidraw0: HID v0.0e Device [syz0] on syz0 [ 711.621419][T31537] fido_id[31537]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 711.783325][ T42] kauditd_printk_skb: 176 callbacks suppressed [ 711.783342][ T42] audit: type=1400 audit(2000001130.275:35448): avc: denied { create } for pid=31546 comm="syz.2.6809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 711.795898][ T42] audit: type=1400 audit(2000001130.275:35449): avc: denied { setopt } for pid=31546 comm="syz.2.6809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 711.850684][ T42] audit: type=1400 audit(2000001130.345:35450): avc: denied { ioctl } for pid=31548 comm="syz.3.6806" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=177734 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 711.855558][T31547] netlink: 'syz.2.6809': attribute type 11 has an invalid length. [ 711.862014][ T42] audit: type=1400 audit(2000001130.345:35451): avc: denied { ioctl } for pid=31546 comm="syz.2.6809" path="socket:[176875]" dev="sockfs" ino=176875 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 711.876496][ T42] audit: type=1400 audit(2000001130.345:35452): avc: denied { write } for pid=31546 comm="syz.2.6809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 711.885440][ T42] audit: type=1400 audit(2000001130.365:35453): avc: denied { create } for pid=31546 comm="syz.2.6809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 711.908218][ T42] audit: type=1400 audit(2000001130.385:35454): avc: denied { read } for pid=31546 comm="syz.2.6809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 711.933718][T31553] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6810'. [ 711.982271][T31547] virt_wifi0: entered promiscuous mode [ 711.990388][T31547] virt_wifi0: entered allmulticast mode [ 712.042736][ T12] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 712.055845][ T12] bond1: (slave veth3): making interface the new active one [ 712.068687][ T12] bond1: active interface up! [ 712.104815][ T42] audit: type=1400 audit(2000001130.595:35455): avc: denied { create } for pid=31556 comm="syz.3.6811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 712.115297][ T42] audit: type=1400 audit(2000001130.595:35456): avc: denied { write } for pid=31556 comm="syz.3.6811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 712.125991][ T42] audit: type=1400 audit(2000001130.595:35457): avc: denied { read } for pid=31556 comm="syz.3.6811" dev="nsfs" ino=4026532861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 712.301175][T31565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6812'. [ 712.351615][T31534] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 712.354398][T31534] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 712.356826][T31534] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 712.359093][T31534] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 712.429098][T31534] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 712.589435][T31585] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 712.590739][T31587] netlink: 11 bytes leftover after parsing attributes in process `syz.6.6817'. [ 712.598181][T31585] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 712.610295][T31585] overlayfs: overlapping lowerdir path [ 712.674355][T31594] team0: Device xfrm0 is of different type [ 712.762489][T31594] 0x0000fffffffd-0x00010000fffd : "" [ 712.766570][T31594] mtd: partition "" is out of reach -- disabled [ 712.809819][T31594] ftl_cs: FTL header not found. [ 712.898803][T31617] binder: 31593:31617 ioctl 4018620d 0 returned -22 [ 713.254829][T31625] batadv_slave_1: entered promiscuous mode [ 713.257635][T31624] batadv_slave_1: left promiscuous mode [ 713.305904][T31627] binder: 31626:31627 ioctl c0306201 200000000040 returned -22 [ 713.314620][T31627] binder: 31626:31627 ioctl c0306201 200000000640 returned -22 [ 713.659860][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 713.722614][T31643] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6830'. [ 713.726311][T31643] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6830'. [ 713.936033][T31651] 9pnet_virtio: no channels available for device ./file0 [ 714.032190][T31658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.038704][T31660] netlink: 'syz.0.6837': attribute type 30 has an invalid length. [ 714.095326][T31661] netlink: 'syz.0.6837': attribute type 30 has an invalid length. [ 714.333179][T31676] netlink: 'syz.0.6841': attribute type 1 has an invalid length. [ 714.335683][T31676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6841'. [ 714.377560][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 714.379577][ T64] Bluetooth: hci5: command 0x0c1a tx timeout [ 714.587338][T14338] usb 11-1: new high-speed USB device number 45 using dummy_hcd [ 714.727389][ T34] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 714.747879][T14338] usb 11-1: Using ep0 maxpacket: 16 [ 714.751560][T14338] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.754924][T14338] usb 11-1: config 0 has no interfaces? [ 714.757822][T14338] usb 11-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 714.762065][T14338] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.771096][T14338] usb 11-1: config 0 descriptor?? [ 714.879269][ T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.883529][ T34] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 714.889485][ T34] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 714.892542][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.894958][ T34] usb 5-1: Product: syz [ 714.896246][ T34] usb 5-1: Manufacturer: syz [ 714.897974][ T34] usb 5-1: SerialNumber: syz [ 714.901736][ T34] usb 5-1: config 0 descriptor?? [ 715.184993][T31678] [ 715.185826][T31678] ============================================ [ 715.187697][T31678] WARNING: possible recursive locking detected [ 715.189698][T31678] syzkaller #0 Tainted: G L [ 715.192236][T31678] -------------------------------------------- [ 715.194669][T31678] syz.6.6842/31678 is trying to acquire lock: [ 715.196946][T31678] ffffffff8f7eee50 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 715.200789][T31678] [ 715.200789][T31678] but task is already holding lock: [ 715.203574][T31678] ffffffff8f7eee50 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 715.207573][T31678] [ 715.207573][T31678] other info that might help us debug this: [ 715.210721][T31678] Possible unsafe locking scenario: [ 715.210721][T31678] [ 715.213664][T31678] CPU0 [ 715.215058][T31678] ---- [ 715.216469][T31678] lock(qp_broker_list.mutex); [ 715.218495][T31678] lock(qp_broker_list.mutex); [ 715.220581][T31678] [ 715.220581][T31678] *** DEADLOCK *** [ 715.220581][T31678] [ 715.223894][T31678] May be due to missing lock nesting notation [ 715.223894][T31678] [ 715.227292][T31678] 1 lock held by syz.6.6842/31678: [ 715.229446][T31678] #0: ffffffff8f7eee50 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 715.233852][T31678] [ 715.233852][T31678] stack backtrace: [ 715.236202][T31678] CPU: 1 UID: 0 PID: 31678 Comm: syz.6.6842 Tainted: G L syzkaller #0 PREEMPT(full) [ 715.236234][T31678] Tainted: [L]=SOFTLOCKUP [ 715.236242][T31678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 715.236254][T31678] Call Trace: [ 715.236262][T31678] [ 715.236271][T31678] dump_stack_lvl+0x100/0x190 [ 715.236299][T31678] print_deadlock_bug.cold+0xbd/0xca [ 715.236327][T31678] __lock_acquire+0x1256/0x1a40 [ 715.236353][T31678] lock_acquire+0x1b9/0x370 [ 715.236375][T31678] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 715.236404][T31678] ? __pfx___might_resched+0x10/0x10 [ 715.236424][T31678] ? kasan_save_stack+0x3f/0x50 [ 715.236446][T31678] __mutex_lock+0x1a4/0x1bd0 [ 715.236481][T31678] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 715.236508][T31678] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 715.236534][T31678] ? vmci_host_close+0x115/0x1a0 [ 715.236563][T31678] ? __fput+0x3ff/0xb50 [ 715.236585][T31678] ? task_work_run+0x150/0x240 [ 715.236606][T31678] ? exit_to_user_mode_loop+0x1d8/0x6f0 [ 715.236633][T31678] ? do_syscall_64+0x666/0x870 [ 715.236655][T31678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.236676][T31678] ? __pfx___mutex_lock+0x10/0x10 [ 715.236705][T31678] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 715.236734][T31678] vmci_qp_broker_detach+0x14c/0x11e0 [ 715.236765][T31678] ? kasan_quarantine_put+0x104/0x240 [ 715.236787][T31678] ? lockdep_hardirqs_on+0x78/0x100 [ 715.236812][T31678] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 715.236841][T31678] ? ctx_free_ctx+0x470/0xda0 [ 715.236860][T31678] ? ctx_free_ctx+0x4bd/0xda0 [ 715.236879][T31678] ? kfree+0x22b/0x6c0 [ 715.236909][T31678] ctx_free_ctx+0x517/0xda0 [ 715.236930][T31678] ? __pfx___schedule+0x10/0x10 [ 715.236952][T31678] ? __pfx_ctx_free_ctx+0x10/0x10 [ 715.236972][T31678] ? preempt_schedule_thunk+0x16/0x40 [ 715.236997][T31678] ? preempt_schedule_common+0x42/0xc0 [ 715.237020][T31678] ? preempt_schedule_thunk+0x16/0x40 [ 715.237046][T31678] vmci_ctx_enqueue_datagram+0x4be/0x5f0 [ 715.237068][T31678] vmci_datagram_dispatch+0x3db/0xc60 [ 715.237105][T31678] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 715.237127][T31678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.237144][T31678] ? find_held_lock+0x2b/0x80 [ 715.237161][T31678] ? vmci_qp_broker_detach+0xef9/0x11e0 [ 715.237188][T31678] qp_notify_peer+0x1a6/0x230 [ 715.237226][T31678] ? __pfx_qp_notify_peer+0x10/0x10 [ 715.237255][T31678] ? __pfx_vmci_ctx_qp_exists+0x10/0x10 [ 715.237278][T31678] vmci_qp_broker_detach+0xa20/0x11e0 [ 715.237308][T31678] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 715.237336][T31678] ? ctx_free_ctx+0x470/0xda0 [ 715.237352][T31678] ? ctx_free_ctx+0x4bd/0xda0 [ 715.237368][T31678] ? kfree+0x22b/0x6c0 [ 715.237395][T31678] ctx_free_ctx+0x517/0xda0 [ 715.237416][T31678] ? __pfx_ctx_free_ctx+0x10/0x10 [ 715.237432][T31678] ? __pfx_autoremove_wake_function+0x10/0x10 [ 715.237455][T31678] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 715.237479][T31678] vmci_ctx_destroy+0x150/0x1c0 [ 715.237496][T31678] vmci_host_close+0x115/0x1a0 [ 715.237517][T31678] ? __pfx_vmci_host_close+0x10/0x10 [ 715.237539][T31678] __fput+0x3ff/0xb50 [ 715.237568][T31678] task_work_run+0x150/0x240 [ 715.237590][T31678] ? __pfx_task_work_run+0x10/0x10 [ 715.237613][T31678] exit_to_user_mode_loop+0x1d8/0x6f0 [ 715.237636][T31678] ? rcu_is_watching+0x12/0xc0 [ 715.237662][T31678] do_syscall_64+0x666/0x870 [ 715.237685][T31678] ? clear_bhb_loop+0x40/0x90 [ 715.237706][T31678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.237725][T31678] RIP: 0033:0x7f72af59ce59 [ 715.237741][T31678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.237760][T31678] RSP: 002b:00007f72b0377028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 715.237780][T31678] RAX: 0000000000000000 RBX: 00007f72af815fa0 RCX: 00007f72af59ce59 [ 715.237793][T31678] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000008 [ 715.237805][T31678] RBP: 00007f72af632e6f R08: 0000000000000000 R09: 0000000000000000 [ 715.237816][T31678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 715.237827][T31678] R13: 00007f72af816038 R14: 00007f72af815fa0 R15: 00007fffa170ced8 [ 715.237847][T31678] [ 716.458058][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 717.447172][ T34] usb 5-1: USB disconnect, device number 44 [ 717.451496][ T42] kauditd_printk_skb: 241 callbacks suppressed [ 717.451553][ T42] audit: type=1400 audit(2000001135.945:35699): avc: denied { unmount } for pid=29422 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 718.537979][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 721.483260][T31568] bond1 (unregistering): (slave erspan1): Releasing active interface [ 721.486609][T31568] erspan1 (unregistering): left promiscuous mode [ 721.513258][T31568] gretap0 (unregistering): left promiscuous mode [ 721.521284][T31568] bond6 (unregistering): (slave gretap2): Releasing active interface [ 721.534264][T31568] bond4 (unregistering): (slave geneve2): Releasing active interface [ 721.557804][T31568] bond0 (unregistering): left promiscuous mode [ 721.559779][T31568] bond_slave_0: left promiscuous mode [ 721.561548][T31568] bond_slave_1: left promiscuous mode [ 721.569414][T31568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.574987][T31568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.579314][T31568] bond0 (unregistering): Released all slaves [ 721.583138][T31568] bond1 (unregistering): Released all slaves [ 721.590031][T31568] bond2 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 721.595072][T31568] bond2 (unregistering): Released all slaves [ 721.599607][T31568] bond3 (unregistering): Released all slaves [ 721.603555][T31568] bond4 (unregistering): Released all slaves [ 721.608630][T31568] bond5 (unregistering): Released all slaves [ 721.612814][T31568] bond6 (unregistering): Released all slaves [ 721.701618][T31568] tipc: Left network mode [ 722.020809][T31568] hsr_slave_0: left promiscuous mode [ 722.023434][T31568] hsr_slave_1: left promiscuous mode [ 722.025493][T31568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.029072][T31568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.533099][T31568] IPVS: stop unused estimator thread 0... [ 724.743216][ T42] audit: type=1400 audit(2000001143.235:35700): avc: denied { recv } for pid=0 comm="swapper/1" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 724.763846][ T42] audit: type=1400 audit(2000001143.255:35701): avc: denied { search } for pid=31706 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.773188][ T42] audit: type=1400 audit(2000001143.255:35702): avc: denied { search } for pid=31706 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.783115][ T42] audit: type=1400 audit(2000001143.255:35703): avc: denied { search } for pid=31706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.792674][ T42] audit: type=1400 audit(2000001143.255:35704): avc: denied { search } for pid=31706 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.802348][ T42] audit: type=1400 audit(2000001143.255:35705): avc: denied { read } for pid=31707 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.811448][ T42] audit: type=1400 audit(2000001143.255:35706): avc: denied { read open } for pid=31707 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.821867][ T42] audit: type=1400 audit(2000001143.255:35707): avc: denied { getattr } for pid=31707 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.832726][ T42] audit: type=1400 audit(2000001143.265:35708): avc: denied { write } for pid=31706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.841585][ T42] audit: type=1400 audit(2000001143.265:35709): avc: denied { add_name } for pid=31706 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1