last executing test programs: 3m9.487999877s ago: executing program 0 (id=142): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x40}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r1, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES16=r1], 0x24}}, 0x0) 3m9.395339889s ago: executing program 0 (id=144): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000000c0)={0x9, 0x18, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000140)="e082068cf592d008e775b05b81e5d981", 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000000)=0x2, 0x4) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0x20000014}) 3m9.314641426s ago: executing program 0 (id=150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x60003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffeff7ff15, 0x20000003, 0x4, 0x5, 0x3793f883]}}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m9.248639323s ago: executing program 0 (id=152): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000500)={0x1, @pix_mp={0xfffffffd, 0x10001, 0x50323234, 0x3, 0x0, [{0x404, 0x4}, {0xdc5, 0x30}, {0x4, 0x5}, {0x8, 0x10000}, {0x1000, 0xcb}, {0x5, 0x8}, {0xfffffffd, 0x5}, {0x8003, 0xe63a}], 0x7, 0x8, 0x2, 0x2, 0x1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c39cc, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x82042, 0x19d) syz_create_resource$binfmt(&(0x7f0000000200)='./file1\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x8000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') readv(r3, &(0x7f0000000080)=[{&(0x7f0000000280)=""/99, 0x63}, {0x0}], 0x2) symlink(&(0x7f00000012c0)='.\x00', &(0x7f0000001300)='./bus\x00') fanotify_mark(r3, 0x1, 0x10001043, r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x2) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080)) poll(&(0x7f00000001c0)=[{r0, 0x821}, {r0, 0x3000}], 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) syz_init_net_socket$ax25(0x3, 0x5, 0xcd00) accept4$phonet_pipe(r1, &(0x7f0000000180), &(0x7f0000000340)=0x10, 0x80000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x3554000) fadvise64(r6, 0xfffffffffffffffd, 0x3, 0x4) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 3m8.344889765s ago: executing program 0 (id=159): mkdir(0x0, 0x0) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) (async) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) (async) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@broadcast, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) (async, rerun: 64) process_madvise(r1, 0x0, 0x0, 0x15, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) (async) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@deltfilter={0x34, 0x2d, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1}, {0x2, 0xa}, {0xd, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0xf8, 0x2}}, @TCA_RATE={0x6, 0x5, {0x8, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000080) r7 = socket(0x840000000002, 0x3, 0x9) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1b8, 0x206, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0xffffffff, 0x0, 'tunl0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x1}, 0x1ea, 0xc0, 0x120, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket3={{0x28}, 0x1}, @common=@icmp={{0x28}, {0x12, "e07c", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x2, 0x3, 0x1, 0x2, 0x7], 0x2, 0x5}, {0x0, [0x3, 0x6f455bfb4ce26171, 0x6, 0x6, 0x2, 0x21debfafc4f76fce], 0x3}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xe2002454fb7b9fcc, 0xff, 'team0\x00', 'gre0\x00', {}, {0xff}, 0x8, 0x2, 0x5}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0xf9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) (async, rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) (rerun: 64) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r7, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r8, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x8000) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0xffff, 0x8}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) (async, rerun: 32) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m8.205277837s ago: executing program 0 (id=162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r1}, 0x10) shmdt(0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) 3m8.128974567s ago: executing program 32 (id=162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r1}, 0x10) shmdt(0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) 2m49.498334967s ago: executing program 3 (id=437): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1}, @l2cap_cid_le_signaling={{0x20}, @l2cap_ecred_reconf_req={{0x19, 0x7}, {0x8, 0x7ff, [0x8, 0x7, 0xc, 0x0, 0x0, 0x3]}}}}, 0x2) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000028c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000100)={0x30, r0, 0x1, 0x70ad2d, 0x35dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000) mount(&(0x7f0000000180)=@rnullb, &(0x7f00000012c0)='./file0\x00', &(0x7f0000000140)='gfs2\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)='./cgroup\x00') mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='gfs2meta\x00', 0x200013, 0x0) 2m49.394258634s ago: executing program 3 (id=438): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) (async) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) (async) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000040)) (async) socket(0x40000000015, 0x5, 0x0) (async) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x7) (async) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x800, 0x101002) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000000c0)=""/127) (async) mq_open(&(0x7f0000000140)='/dev/input/event#\x00', 0x1, 0x14, &(0x7f0000000180)={0x3, 0x7, 0x7, 0x7}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1fffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000001c0)=0x1) 2m49.384377235s ago: executing program 3 (id=441): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mknod(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000)='jffs2\x00', 0x400080, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000), 0x10) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000640)="98", 0x1}, {&(0x7f0000000200)="99c7a8a22c536f9192b6fe8854a950d1ef5bdb566f8588a79ca8ed86858045ef4a76617a9907bf4968898af69d8573b9f0718ad456097693aaa994869f9f8fc443c7b8b102e70f149005870445faf15e86430b2130b67bb4cab75335f54d22e1515ed26f295d24ebc8db04c6cf02a15ba003f18b4ea2189f34e1fecceea34eb8c31884b2222839e82960a49a1d14a3edfc285a392b5058e2ca8aec9ec13546", 0x9f}], 0x2) r2 = accept4$unix(r0, 0x0, 0x0, 0x180000) recvmmsg(r2, &(0x7f0000001680), 0x0, 0x2, 0x0) sendto$inet(r2, &(0x7f00000000c0)='R', 0x1, 0x4004000, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) ioctl$CDROMREADAUDIO(r4, 0x5392, &(0x7f0000000080)={@msf={0x5, 0x4, 0x6}, 0x1, 0x0, 0x0}) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 2m49.268888821s ago: executing program 3 (id=443): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010000000000fcffffff0e00000008000200"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000880) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x19}) socket$nl_route(0x10, 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) mount(&(0x7f00000004c0)=@sr0, &(0x7f0000000500)='./file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x6e0}]}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5c00000011006b906fdfe1ef704ad931c605876c1d0000007ea60864160af365040012000a002e00000000009ee5179da5a02b9e9171452bc520ae8cc4044ed34445bc24eaba56a705251e6182949afc422e41ebfc50b887934fcbd3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x200000c0) 2m49.02319082s ago: executing program 3 (id=448): pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) getsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000040), &(0x7f0000000340)=0x4) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000640)='io_uring_complete\x00', r3}, 0x18) (async) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000040)) (async) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0500000000090000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000a000000020000008af7ffff0600000009000000f7090000030000000100000000000000040000000f0000000800000000020000ff01000009000000ff0100004f09000001000000cbd9e573090000000000000009000000f7ffffff0004000005000000ffffff7f0f000000bf00000000010000000000000000010001800000d400000000010000bb69b9080f2e00000003000000080000000800000006000000b100000007000000070000000000000000010000040000"]) 2m48.564758216s ago: executing program 3 (id=451): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = getpid() (async) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r3, 0x0) (async) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01}}}], 0x20}, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f00000018c0), 0x4) (async) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) 2m48.482802431s ago: executing program 33 (id=451): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = getpid() (async) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r3, 0x0) (async) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01}}}], 0x20}, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f00000018c0), 0x4) (async) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) 2m24.254971385s ago: executing program 1 (id=845): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x3, 0x408280) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f00000000c0)) 2m22.669186954s ago: executing program 1 (id=873): r0 = socket$tipc(0x1e, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xfffffc00, 0x5, 0xfd, 0x6}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async, rerun: 64) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000001040), &(0x7f0000001080)=0x4) 2m22.603798604s ago: executing program 1 (id=875): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x0, 0x5}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='lp', 0x2) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x390, 0xffffffff, 0x1e8, 0x118, 0x0, 0xfeffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x6, 0x1, [0x10, 0x0, 0x1, 0x4, 0x2, 0x4, 0x58ba, 0xffff, 0x6f, 0x0, 0x7, 0x1, 0x5, 0x2, 0x6b, 0x8], 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x24}, [0x0, 0xff, 0xff, 0xffffff00], [0x42710ab262b9efc4, 0xff, 0xff, 0xff], 'vcan0\x00', 'pim6reg1\x00', {}, {}, 0x2b, 0x1, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x6}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x3898, 0x1000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) (async) connect$inet6(r0, &(0x7f0000000040)={0x2, 0x4e23, 0x0, @private2, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x80009, @remote, 0x7}, 0x1c) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r4, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x372c6fbf, 0xa2b9, 0x6, 0x9, 0xe4, 0x9, 0x2, 0x3, 0xbbf, 0x0, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x8a, 0xfffffff8, 0x558e0d31, 0x4, 0xfffeffff, 0x91, 0x5, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x0, 0x4a7, 0x81, 0x6, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0x8, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x8, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x104, 0x0, 0x7, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0xb, 0x2, 0x401, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x7, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffffb, 0x200004, 0x1000, 0x4, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e63f783, 0x80000001, 0xb, 0x1, 0x491, 0x8d3, 0x6, 0x108, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x10001, 0x3e55, 0x4, 0xd3, 0x7, 0x3435, 0x5, 0x7, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x3b9, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x2, 0x7, 0x4, 0x9, 0x82, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x6, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0xfffffffe, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x806, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0xfffffffe, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c) (async) io_uring_enter(r5, 0x27e2, 0x0, 0x0, 0x0, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2m22.601139384s ago: executing program 1 (id=877): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async, rerun: 32) r0 = getpgid(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r3, &(0x7f0000008200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2029) write$FUSE_INIT(r3, &(0x7f0000001dc0)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) (async) syz_fuse_handle_req(r3, &(0x7f0000004200)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0x3, 0x7, 0x1, 0x4000, 0x4, r5, r6, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000006200)="0e24ac7705237246fc1db898fda0c7f95d375ea7f4bc7a07517a51095880f2219d9e4329f6c4e734f2bb34564a1c2e298d7eb8844d8af7b30e1a71750a2511e44b368fc6e9ae65e40e64e4b5fd3d0f87009b5727519df1ddbcbb38ef00871f00ed2543b7f2990a44482bf3d7478c3c2799dd8120fc3258cfeccf648fe15128c54d1d4272bfd44950915afd3aa0abb5b04d4dbec287df0816c3e43c2503cac6e95041aa205c5958f51a9c4c8214ae2108401b08ae7ff8440988c93424422f06c628077d767432521fefa0f8d0f387e685e4af54bdd7f931c3eace52ca7a6ba2d0fd701e5d77393e6268f52e68d97087f87edd2ae49180028bf08ab7e02c3ef12aec2f286d1bf40fd3a5f337b0f0b63d701c60bae36a5e1644bc90f34165049ac5c4fc8a0ada90e345df1420a58c92cfcc6973d3fa532b8b4088592e0f2c36f7e756139b272fc99104a93c5cf2599c683b60910af98a55b17bf646ddddb13e73d0bfdcfb3e3d261d84f83270832708f6e5b3fd2bb98e135b914e21681b409d717afa8f65dc9d3ab6a78b9b026b6aa1f1ee5872426b4bd4fd652072f86dfb96ef79649396a0f19239b0ce6ba9a8ff49f8f4820579a3169fe54b6f060a69236d57a1a13f033054fb22dbfb3f72861acc7ed51ebed60a8a03c3e16030e7a114d0690c268713d8206b34a005fb89d5123103d36ab57594fc731e8a6353ab3be3af22faa6f85b54ba78b90aba38e17dad90c31a20cc5f39c8ff50097bb310535efd6ecbc49dfc2d547bee78d5c5ebfe0d4bd3c093413e12cfefbfdb5f38c437ce831b209f3337979f6e0c46d8bf272a3ac6076c7940f905536167d2285d2a7d0e75f1765f0c080f1dfd9bae98afdfda7e7837d1081d83effab72e6eff493cc9031a299383f726227d75474e4c8378b2376fc7fef8b213b26794edc4c2fc110d917b863d25e7382b19b1b90cc90428f6aa0b1df015bcbbe83de36ff56c065ba92f1f49e61ac6bc6b3c20e42e7763dd52f66095f07e235f0062accb0eab60ce54d84391cbf2613096ded353543b5d6a884cc981b759e4499ab72881f88542208c9fd81b541514d6d2ed54683926b0d6bfe904b76215aea6db4cff8242d3ee5524acb456ec219e42d46c1b1e3fa9748404db4583537b195ad326853ed9472790656ab01bd031b19fb64b0e5227d18ea09ea7557c9afdc918c918a1fafdd18f9f54682bf0f49ba2ae14f963340dc6600e1b344ce50ed61af0726e3441583f8cf045df193dfbce93285d7fddfc0d831fefc85cd3e7920757f27a4e09b5cfa77b93a5e82f571d1293d9437cf89997011eee6ba9f9b7e6ce2fe1c381cb2db053a6e2d9351edbddcc10faf80f5b686727dd8982b12604fde3467f4a7e98b13250df7e1eef67da8f7fe3fffd3a185457aaaecb38f5ca31ea3e35cc7c6adc3873c734cb661e3c43e64bf0843b2cf1d950642eeb20d698cc9e598eb7ec71d3a0d83f311afa2d40a659a219defad76fdb7e8146756ff02a8a74abf8a8ccd72ffd7f70911698d54552aada8ef27b3f5b2644d4d0fda2976d838686a7469b296a98b67b7cc9834dc94f2292581dd242d1abb42db30d4de42c4611c0fbdc77134a6cb0c0d7b36d18a217aaabd34744ed5cac171e2a8bfe90b2dad03d0ca5f74d3eb95c454757be4c77f386c63fee91e95a508d8fcea5cd6bef9bd05e0b992da4e4cbc2f52c9cfde09b6f17f3d73fffc01d7ac55f328061516cf0e4fa50fff5b03dca67b163a68d9ddbb988f50a68fdbfc6e6feb6c892b58eb766d3429396669228dd1653bcbb5cb47c0857d27660e62d23e90178ef2b75713c2c58a207d8c21e9ce64556bfd71b40207ee76416f9f40c5601173b1d84105ac331247c021941a6a27e86de4f9a4db382f67dd6dc8e86a02a8438ddda1a636256fcac8e2328aaa3c054ab86f55c9d7bb2c2999a5c7933f092a3bf66523cb388052c65d138346ad1c5137fa383d7b9023b1868af02cf48923289162544db8fb29cf592c306a76ec92b35f33fae90f5aeac830b82dcc3f0069f668aebe6e5fe13c811f150de080632e357221d2f220ef95ce436730d1f9390d9f192220347d04ac5a94631e349ad330276b9524f775f7a8f68be7823ad7ed3ac4b4d87a12c0261846ec1dfe785b60675968e79496d7ae4e5d478661bd7125f2cc0de35422764556b63d687b339e2b25ad43ca85bc861944d19f9689dffe71d87030d23e0428942441d622de361778cbe8952f7b93c74783552b0087bff535afaf92935aa889018e46d34b2a258f863d89e4b6da841389fa63d489d135e559b7d11b8d97215323548501c275248eb07916ae3f0814c6af32f5ece7eb0330bdaac4394c518f3c8e48cafc36057cfa7788fb2f9a73bddb1d40546cf21b681e6c9ef6f0ac43c512762323209b2c878ed5a9f55e207b56a33c863eaa34a6eb14ad8de9885d52a7c073a406ea4324f8433ddfd89b269d6716072627054197928370ae01a94e3dd4d07125560a5cb1d1bfbbd8c099194de5f787a550a3400ce796e115702255d1f17d96a7fb63384ff497cf72beeb50bd24008ffc58256aec6b2faff2c20336e29bc1acd853214496893af25e8efb571c96edf64fbcd136c95e1213e73bc3f1a896fca2bde0894449ee2927c38114de5f1063d0c203c3fab1389861c4cda173a991eb275ccffe04f75d67df181c26777b18e5552b42fb4332046554109a9a6007592a62d2553dbd098f1daae593322e45f66a64bdb09869feede70d1fcc88fd4c19f4008d1b1d5f34a6025a71d9bf6ff20daccda25cbcc662cfc687ffe5ebc344468f338f4c9bbdc7ed9820feb5e3b09ace47f4253a81da7029816656613aef7456524fc68f4345bc0e7f26240d4594374d2fcb39560e2828e0e219b2417f5787add73418b465b1308d5ac5169791f55802d11354eb62940a492d955e8bd11b952a28acea90cb43af774e6fc75e57383e68937aa3643aa37f7e7665c703576579dcccf63d2bdadfbf14be796d4023689880453b0ff576fb01bb141be3c17478f0d555ca96ff7c3f3e4f53be1f088827203fab2008ec6687e4f5df305f58fe647b93ad09a70165c989498d313ca5ba05f3ce90adc80d55b56d0ec4cd5a78268cc6def7e8bb810bc29f8e742487048363815fa3fe645194ee8529ffba2b8d6756915530f142b42f31eae1703faeae14f3d81ae5c2297c3476b0f89b32f53802453fc74c80bf217097577a910a51860bbead4f73a29423816eadca7b1e2d24a9895949b352fe59f13abfa7b69c0f0061eaae2ada6d72b2f90c9c553ad8be9ee4e4ad2876851a3f3e979c4d770d7df9a27e72ab215ec3efd252d622e7ec6160ac951d1ee9b8c0adc0fc853f2a4f36602c955b61646246e07bd7b745f5d3e99f95f55a1616ed36633db6efa97a96dacf12219cf1555222cc6a589a6def5680124f7ac2f1ec83832a30fd011ff02dbf4ab01afb5989fcc678383f179b5d647cf0a762acf0714e9e4151afa39626884e6f56859d3aafc9fc7f7bbcfb27e038e238783cf56c86f0be52568c4bed0917d651f4d26f76ba6c343e075146504590da391e1c4d028dc81767294df5de9370d62756584baa3bfa31578b6f754e77b0d6ea7357d8915ff0bda182b604b014e7061765bfab2053fa863fb671fad3b6312d6e59ba0e70b0ea2476399e925f8fa2e51c9bbfac19aeb11db3dd6ea8d916c4d4eae7de17259e6155591be9b704d3e24cda131eded5e9dd6758dc90a5c7a43332957d26ac91bc65120b1c6b7b94fdf83b397bd8990747f01d3ed912abeab74bb5ae3ff2ee0009cfe8cdb6b4e75a7de3566c8ff7bdddb06b7775cf3116b029e7c85fb7189147e753d614caa490594ff2e22b7144153c635ac7b20a49c2d8575af2f546b968bea9fc4ee5ff417a6fa86ca09c8fed14ea4b721b2d5870d4b670761c70516daa07809ac3817246844f01eadda045c57d1c864cbaabedf90cb42d374392e77b3d1a1afdf962feb55a4e04a77c8fb452429007e0046a406a5f2325f0c7f75a19deed1b456ac5de6486eebbc126ff97c5ee8531a975676b61a0d79f56ff75cbcd20337119422815537a57766648777f1b5f75d358dc63764083406e2d95afd87d00099581940367ed029065df0d9008301fb92e019feac9bb406032167eb053ab07309385771aacc2c52a5d526d14721fd530e63cb7c53f27518c679ccd0f3d2db8aa52ef95c6ac3f5dac0b9b5c3a96a794690f3d49aa0e5a4a95b36609cf61d471cc2c0cd55e8cd96be47558b055280313b15907eba5761180f5229a59341faa1e11eb5b6a48ec9320efb1d9f00936d9a5d91f2bf837fe72edf6ec025c1c4e87171cc02c7342fa5d4f825157d70d8f66f6fa0542de2255373d8743612e7d4e16b8ceebf4e92c40926f21929cab343b981120236b8b0b900772a33bbe4eef06feff3c7b104cf63d92c7f9233982f9b713489fb8bf80f2feffd6c22007b63925209e158a837dc95b42d52ed764350b5f83ad54041bc15a7552c0b8c1933d674a16b0c0934277d9895c1ad01327231a7fffc4b5e1a1495489559bebff324d54f2894563a23b85d3bef62c356eb476e01e0c039287ca38626751f701ef4e20d951433940ce1138660589ff389dee9f85a7faebb9cc494bbe7138b413303af6e05806032d8131d5a25a5d7c0ed87906d92bdd87ce7d62c13989f3435ad77a29b721d8219d2cf530c2ec9edc3de9ce2dcd5053c38a6797de8d8cbd3596ed545d2dc6f825a0e65428dd73df96d5f3e40dbe5a62f0f440f712419d1558ef97bf1d0ca1d59fa1caf6ed0d422456848e196e94b4741b757935bc3aef3a46f53066dc7a74f42d539da2228fb8593ddb79ac977a8b67c0a6058efdbe23ba75fb2faf5b9f152e60b8a96ee19fbf0c417c89f882c53d389bf27a18b9e34b2a33aa27029cfed7a03335cf33d95ea803ad125237a9cc70520f18bc7e9f0c1432368a5304544f5d1e1599242bcd905f69f25cd0fcde391960fc57426e0bf22155ea315f0caee330bf3b7f4f4363f87146531175ad4f69002d46e95a48f714c9bbd9e39b95783406d477dabe03397d68e7af5ee623b4c05eb64120ca76af4f1d37348f93f39d8fa1d22fef874ce65b66f8a1aaff9db97520dab97eb8d1f99efef4d4c9704d181d687874ec4fbb400ed4ce050ac997c843e647bebeddc33eeb70201b3286ea25ad1bdb80dba1fc78a6883ecca84d17645be16bee32967bd487c6f5e0714ca819d5913436ac9aeeab4e5092ec1897dad39737365e8414246a81a731bf7d3ad8d789b42c651702b70ee786032356e3b9fc4402104ffbe55026c84e8ec5dd2a1860cefd0e7789ac2a47fa5ee9610dee980fa3c2fa7219b4e57642f31012b3e00e64285fda219ffffa37955e3c25fd5872172ed2f5651d208897ed4e1d224243b2f241f24580e924e02cb60af5e14898028596400a770f94e67590df5fe99e9d170d061397f71f4202eca4c91c7fc27e2379358a8d9bfc28c2fb67842b0bd1e5e68e017b34084aa08e7453fc6b03bd42772643eae036f25f10e4da022818dc84f35eea2c07e4dbb41e861b8a4c6df4f0b4b785f0df55f863707a0563cdd5b9fcaa352b54071cd486cf4948575ddbe4654a566438922887a3bd304853a98283c7a4d7757cc6e8298b0121aca5fdb64d86996d8c0ddfa1ee4ccef1ee21dcf853bdb02471383f73ddae17dfef217c6a3f79b182fc36bdb47d1899e87bb4c4e490ad4a2724d223b31b889685355f349ca8bc62d39150ebccaba863bd72bf91d65cffe560eecf162b2440f9d74fe0fb3f8479fd8f6293f16e4d67b3ec30e83180444cec51d2b455a3ab2b6286d4fac1acba8b7b5026671fef497d5e050e0aa34dcecf2d06a9e4b60cdb3f9cbb7cadd73c817f255f8e2eb22d6283a7934e0fd64eaf52caab2d1862baf505889e4db1a1870f0049b3ada06d38af52535da352bedbf1e88e34595820cedd4559cbe0fe0578c557a62f56060d75c5a6806e384d3c274c218d57beecbd8e7832f3cc050668b44c1b8ff8cdcd2b85b5ecb9eca1dcc1204d27bc3689578eab43dac5658a1cfe75456b221c15ed26720a49829f96d501fda6d7839724207d6a5f6bb3d8390e90dd7c6b80e15e6b20b7c74ff3282c770eb1c77583fc97bdb5f2df62a74b3385e2e8ba06fc3011133c51f71a0da215deb6c8599cdacc7c710b7b1a77afbe3b2a593f6eec5c8014dd366f5890a1a579e51d858cc8ef93aff098af9903b4e3633a3090a630e64be99f49d32d63d779f989d0198044717741d3bfab4242a05dae33f11ed6b1d850fb379f725fdb7b296d9d9b3024160d4fd735a77c8ab23f0816bfc2715a2561c3cee6e41cf79030c1500c09e75ebbd5a7aa8a0e4826542ad46a9350e969b357c142af13afdd8927cdce3d1f35493f6a7a14c5a20739d462d566fe3ab620f1ef323768bd871eb454dad947f2a871efa05d601cf9fb08d992caf6f4b0f652e13df7dfc658f50e0c9bfc3bf28114a51142f65e25435a32c8719fde2a3d5c4850e31ffa675fa44f9e54957d108e46a67a3b7d71b272ecb0385466e39238f6421b2fd6f33a258883a4501b63001ee9ecb9137162488051f7ff15e6f4be81ca31ffac70f48bcd3457fcb137a2f5108d908ba1d51b0fca7e14273b176af4b954837dc3d40b4341fd03063ee145dfc4456bb303bb0540db3aadb26240242f4a55cb9f6623b6e724e0f9d8b73d02c9fd9140873c0bb884e3cf4c844bad6f27388b56840b63d65ca760dbddf778e430e1f03c246e74e9b56a08a56617658f7fc42e3582f3181a720e51598d22062815ca3caebf36389a58278acc788035d8deb0b800180ef6537d92bfa18947cb18232bfd27e048fcd49d44c137f1d8a10294a6dd20251a00c379bb0936fcb5137c9f5a7a7404976c778912a37f1503deb27b85d3b1d886415a98348d3632c7eb4bf58fdfddd5b24407709474e4478c991a03ed8b456d9a71ec82f05791eb17425e0360493fb5ec343eba7e9c970f47f4cd85edda849cc524d42a11eaf29be950e621cd12e16e3a304516ce5c74a2b47a1baf1f3321b84318883bb023cb5f67dc3541a4d72ebb3316244f96cde4aebc1a77336a93d226c315ab02581123140e45373f40c8cfc7fb5d478607f9b38c2b95bcd55fb8a2047569ac7927b9e4208f75032abfe83442d2ca5db1ee8903888548b5fa9724520083052f8e652f1b0d39d031d2c61f63e5cfb98061b5b913dc6da26e690c85b07fa19b9bf83d124a5fcf96de21d9f00c9aaf2ec66580e4dd99c21c01b7557b7c6336cec525003157d3efdd16a52407b35225f65e44933d56c90dbeeffcfbe2b10bdd921a507592817043c88bab1882ac8863f8a73fed3310138ae56c9b5fb8aa22d5d6ab9e5ece2afb94c5054bdc8444b00a46d74716c21346f2dce31f180f3e01453d7a7aaf4200c4be278a2a88fbec4529a553189da822d1365c8ac70bd6c6cb3c3791e183eeba95e65f1f87c10b2f740bee2575807c486e3b7939f093d44693ac069089830afff26d7165712abb7ba5bf8aaa87a3d57c5670b3a45d707b87aa7689b18292d851cac59802b38bd7ab8e1c3b8a134db1a366aaa8f77a6e2c937f49961637d291970b4541e3405948ba2ef49b41f600e28861c54f06a2400f82ffb2b9a0d4c6da720f9fea31dbe3f42aa29bd126fcbfccb9d809c8bbd76d241fc2588963f10434b69e9415d20bea13c30a08b22f5f21bd945a11466d228848b7b68927725239142fc536f784b705d3bd318f5d5fce31ddd32eca57309b1f9e5cdb0164df0bc45d04db323ed272fef5e4e0554cbe0eef83999d6dd82b67a5de6986b7063851602f833a23946ffb004b9cb30f6af2108e2aee029aa3e4fd525597f4a8d0184750731821bf21aaf703753270d3f12d5ed5f7bdb47c891074a44c63bebe47c66aab7f24e422b5f549249f26cab0aac9484087871de53cdb6d575e0e7ea3c73de23460c5b1bbe1e838433de48ecc812c1e21861dc290f22733090b5d3f88910478bff51307e6d869b68a745255ca007b9f5dda63074845d4d8f03604ada7cb5f8c1bcad9f3a84bab71e6c109ef7bd8eb29ba18011430f28eee91aa83749594aa5c717c0d53e0ff68372284e356e55f9cf33716ade1e148beda327236f4005472600f99a1c2fbe10c5492d2e082d15fa962492b16029a222bce55a001b2726fad239160f3ed55e98343fa5266cd7f5e36158480430e2f802fbfa3aa6e7299ab0940eea91682c79fffb171a705a23b70173f0973ca0b0ea230b306418677be4e6bcca0e6cc7bdbf6a3a96090819d541f505402ce505b40bd7d012ffb6a62f2528c5d370b2d6d6cf4b49c6886d20a5cc94cbe5e7cdf012af5d27c0c89c190956d1aaf1911888b33f67341fe74a10cba3328b84e3c4b83bb8b25da32122ed8df7b831e77bf9528af4b0960a0abb420e931eead4dcf31849cafc6099e8a3053758200bdbb411346662442e8274bc9780fd69abb4ef9ddd292f791b846a5849610862453cdb9263ddc232492de5d24c2c52751223cb961bb9ba7c86988b2a5490c3540ada6ffb9ba287c3e15d228aa0a6491ceced135cb1533b31c0b8ca218ffe4e1a07f29b4557a05b447358350ebfdcff9793b2eb1d7e0ea082b1f4fde8207071a8beb8c1e5efc49e1153fb8fb21ebc46c4d5b404a743a54076e4987da1748a39c70c083960873ffa0b88d4cccae69cdf4630a78250db81141e216e2007b7aea7500ad3176ae8e22c5fce5f14f0aa581bbe520a6d6c5f504547b178e62236f54809dd43763107e49b0d44a7968dcdf73a8c3c395fecd8a557ab850bebf1a67e82714131e0380fd6684e8094783190ce491a03243d903b4488d574be3847b4219145f5aa05201b4bafcbe2c2c98fb4e968c15822e20c06e83b0fc24d8d30acc9e24b36cfd06ad1a073719bf3a92922111e76efac5a813faaca76acfb065ad4faf1efe403aee89bc149bfa4e907008fe5f81d4e795c7a646c2b48e79b7ba54ec42425978c4d084c3c1f66ccdf230515366b08cd506a210e92e75bf7adfbaada44b619feecc4427ca23e74b68abfe9796a6e9a1f540d6a438042f506c27bb4f4814c73541b38eb7d548010363cdf7b2b6faf1a41a10fb71bd206388f32777c6b8e3fd7f6cd76342a1fba80deba8100f878eb4e4a09287ce513bb6b1f445e3cbdf220ff5faceb36c3a7f1a1710e780b9772124e5728fed14bbe348f0f4831913ae69ff40c953cc6447babbcf55b08491357531dc9d86fbe5cd4fd0d6e03e5b71daca299a8d31c3596fb98d21acc09d03e3fe7cc1f13c3e8b49b9dd40b8397ae617b322951a4bd8fe8a1eff9f920b79ddad1639da4d4a18c12ca3b65430e41506198483d5a2a0bc058269e7575cd6dc8d1a0393748622369c107b8a5fe570a7795d98b75e23d4c05c39655c8b81a389b512461a20711487695b8d4ff2d81ab4fe8c884768cbb99640a9ec5b54d3cd13a90f318e0264038b7f91dd73205342400eb9d186ed30286ff7cb9e459341ee59638b253148cfa74bada6b959f185b5cf68a313ff757836aafbbdf1f4440ec0f44d99c3950a6e2fdc6b7d8c6120f921630b93ec31c216e93e6b3781d02ef2339dbea56125ffe79019b1689c25d35db7d3f3e5c613060400977a2f7e142b50591b2ae5738dfd208c0f4daeda71edd05beaf4fc0b128fd004bd2bf1cea1d6883b4287cab96354e8f34f9d3707763b731686cbe6c175890e4f4bdd7c2961d270d9ef63ac95aa0603d3612a8933660c303fd1a91b3eb700718cdf40a34795399a7812c89b44f7b223dbe8bb08e0c01c4bf740c95431445a6b6fae337df7778e834813b34e0e6d3f0e935fdd136e6ac50c8e11fffb518b06c734985f31884a411293a3a3757a6e5be3d2495916314dc072fc9c0dbefcb5100513df15c18e04b2ad744d660f9cb5f4c64eead30fdd52507bba003c625108e6cdfcd7a1b38e8fd4fef0d419f695904be3026aeb9bab1ad3566a0a46a2a2d092c75ae2cbad109a117b7db76b729aaab3a89bcef8a5e63008613414fa5ce56988bbe3e839ccb8e192c56115522620e0851fbd19790f3acf9669915ef0f1ca0a2ca8a5578747f2d6cbec07a7bc4128ae131b7685191d5cf05210cc4bca2dc6303747c72cc0e4165512cccd43c5a79800b84ca018190a70984d73056e2a8bbdea91fdfcda72d9f8705227c5c4fdef9e0b81948420cae7344ba872a85e2d47c1e40fefcaa8d246fac5c7abe90b2bf39ec601390dd0a8cacbe82fc1ba0cf13c3cd89220a42e82ce62ccdf63fcb1be53c91d36349c7d3aa30170dccd5262d9ee570581ae5c9f84cf5b32261d8f531f6df0636cea496c698f36aee3274f0f9dfb7d72c074530a2679d13e5cc1bfcd957be3eba04a12f8897507122fc74ad66a7f621012ea43878cfa9a2a3ed95581aebdf1ffd7a8985f65c63de9eab4286cb94e57e3076e4e2850faef69b1d9f75ff45227b9e1bcc256c0236dc63483cffb8d72543eb213b2e0a487217850ab3bf7213dabb360c35714dbab5604357ea7b23fc0ba27d0bd09dc09e7ac471088c58d28e3ef12c3054d8a017a5023f378ae81bbbf55228620e061ace44906cc82520bfac2e1d7f7e340f53215bcf6f6078d82266abaaf479e084e73f0600572a7d482a84633eefc6e196f27638e8f08c6a4c615ef98238895d2cffb221a800424e115b0e84b960424fe39a2f33a203eb42f7f5e70e8f73aa172a8adf1d977b176cae2750859c96692bdac1067b7a1b1496dbd7c8220f3f0b42938ba0779c9bfa414a0e6073556d651d526875a4cfa95e8e981f40fc6d8bdd4704a12f44612e8eb8842535edea3d609d929b3fc05c2b02bd44e02a732ba814caf9e03e0bd7f41a24b3b6e282d07d74de2ab968ac739e994c0265416a7347f44bb80d1948cf8c9a69409e850b13f379dd672eb34a732b0b1d7b67ef2ee1bcb686cc4d1f4512c1ffb105ad2e46d783e0ca5f97ef9e4ab2798ce1c29b0f3292fbf1001d9487adfc3b34b4329be6b72ebf7a62158e488bd7888060f1e562045ecf9388c492fe3e0a6ce9b92b5a3eb29c80cc69da72f7dc2f2ac730e5d82cc5b75cecdd0809db8f1cc17bf5b72ed46fa3038722b6369d9f9497b83cc2ea1d0ebea0ac1306a83249705ae0b1c0145af67388d2153dbcb8856971216ee8f3d0cc6f532f159e5e28c6308154bf8efe46333b30740e9d94993393a27eb263dc0d19f182913ffa3953a52847fe979b9e682d304944529131b02ed468c88b5aac0483ff22ad56f9630b4f6134f266ee446068edd079411571f7e77acf2035d483043b8ad85b6277dca9e590ca801dc1896acdfc88dcf3cf83fca85afefe6addd27131f8be0fd5a80a0723556639fff59d56453ec76d3ebad3f5cb04e7b758b13e3d64c2ff5c3b018f52ba9363e053ee2fd78e35b2a834a069953e759455047521ad6615ab87e6381f0363a4554b86dd14f5ab43eb6b3fff64d94af0949a9e5c63d8c8e883886e61bd36f5ca11dfe2c025290cd49f369f8a3f9023d5daa7410fba96927fd0b5d2c75e00", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4000000004, {0x5, 0x3, 0x6, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x1006, 0x8, 0x100000000000, 0xb, 0x81, 0x8, 0x2, 0x2008, 0x4000, 0xe44, r5, r6, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000140)={0x8, 0x8, {0xffffffffffffffff}, {0xee00}, 0x3ff, 0x3}) mount$overlay(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x181080, &(0x7f0000000240)={[], [{@uid_gt={'uid>', r5}}, {@obj_user={'obj_user', 0x3d, '--,%)+'}}, {@uid_lt={'uid<', r7}}]}) (async) setns(r2, 0x66020000) (async) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async, rerun: 32) umount2(&(0x7f0000000040)='.\x00', 0x2) (async, rerun: 32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xe00, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f20e06635000010000f22a0360f01c20f01cf65f30f096766c7442400a9e0c2fc6766c744240277722d4e6766c744240600000000670f0114240f78a717000fc72d0f01c5dae90f005d0d", 0x4b}], 0x1, 0x40, &(0x7f0000000140), 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2m22.523094327s ago: executing program 1 (id=878): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f00000000c0)) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) recvmsg(r1, &(0x7f0000000180)={&(0x7f0000000100)=@can, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000240)=""/101, 0x65}, {&(0x7f00000002c0)=""/167, 0xa7}, {&(0x7f00000003c0)=""/228, 0xe4}, {&(0x7f0000000540)=""/241, 0xf1}, {&(0x7f0000000740)=""/181, 0xb5}, {&(0x7f0000000800)=""/154, 0x9a}, {&(0x7f0000000a00)=""/194, 0xc2}, {&(0x7f0000000b00)=""/140, 0x8c}], 0x8, &(0x7f0000000c40)=""/4096, 0x1000}, 0x40010167) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) r2 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000100)={0x1, 0xffffffff}, 0x8) close(r2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x98, &(0x7f0000000940)=""/152}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)={@map=r7, r6, 0x7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) r8 = fcntl$dupfd(r5, 0x0, r6) write$FUSE_NOTIFY_STORE(r8, &(0x7f00000000c0)={0x28, 0x4, 0x0, {0x0, 0x6}}, 0xc388) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r10 = dup(r9) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x8080) write$RDMA_USER_CM_CMD_LISTEN(r10, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f0000000200)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) 2m22.264426411s ago: executing program 1 (id=887): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a, 0x0, "0000000000000000000000000000000000100000000000000000000400000000000000000000000000000000000000000000fffffffffffffffb0000000000000000000000007e047e7700"}, 0xd8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x0, 0x0, 0x6, 0x0, "9b28aa86986e9639dc1014f688d49d8b8d4a2872027f2aabd6145ec89eb7cdf06ff066fc0018eeb913ab34fd1ced7b1e3732de49646923a9ed1b47d8c3b60c913e201a1c6f00bab58ddafab687b3a8da"}, 0xd8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002800)=0x7) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0x200000597}}, 0x30) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) read$msr(r4, &(0x7f0000000100)=""/54, 0x36) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) close(r0) 2m22.132696468s ago: executing program 34 (id=887): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a, 0x0, "0000000000000000000000000000000000100000000000000000000400000000000000000000000000000000000000000000fffffffffffffffb0000000000000000000000007e047e7700"}, 0xd8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x0, 0x0, 0x6, 0x0, "9b28aa86986e9639dc1014f688d49d8b8d4a2872027f2aabd6145ec89eb7cdf06ff066fc0018eeb913ab34fd1ced7b1e3732de49646923a9ed1b47d8c3b60c913e201a1c6f00bab58ddafab687b3a8da"}, 0xd8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002800)=0x7) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0x200000597}}, 0x30) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) read$msr(r4, &(0x7f0000000100)=""/54, 0x36) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) close(r0) 55.821891542s ago: executing program 4 (id=2224): syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x10, 0x2, 0x1, "11010000001400000100b64c0000005c4b7c1500"}) syz_clone(0x15283000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000c5ed54fe851fe49b350858fb002f4204b70cebd8e4370400"/41, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120008000100", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r5) sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000003080)={0x0, 0x3e, &(0x7f0000000080)={&(0x7f0000000540)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0x178, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xf0, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e5eddc1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72d4d6d0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x463d3ca5}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49469b74}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa910}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc1d1}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56255252}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11afb28}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ced}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a4e0fb0}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ca876e4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x534543c3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2377}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5034afca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1265}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4118}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f08}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x36b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd6d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5caee8e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6765}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ba1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48001e53}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53455d43}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x191e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x58d6c8d91d59ad5e}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20004041}, 0x800) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00'}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448e0, &(0x7f0000000480)) r10 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@rand_addr=' \x01\x00', @local, 0xe, 0x1e}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r11, 0x1, 0x2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000080)={r11, 0x1, 0x5, 0x5}, 0x10) 55.673890468s ago: executing program 4 (id=2226): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) 55.6719302s ago: executing program 4 (id=2227): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="00000000fc1ccaf300000000b7080000ce0000007b8af8ff00000000bfa200000000", @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)={0x24, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000009000000180000000b000000000000002700000095"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) sendmmsg$inet(r1, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)="a9", 0x1}], 0x1}}], 0x1, 0x54) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="043106aaaaaaaa6bd3f6c4ffa6642953ade013"], 0x9) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) write$binfmt_script(r4, &(0x7f0000000a40)={'#! ', './bus/file0', [{}, {0x20, '/dev/kvm\x00'}, {0x20, 'skcipher\x00'}, {0x20, '^'}, {0x20, 'syzkaller\x00'}, {}], 0xa, "c4897447fd2226e10bfc49ed3b4a1fb3f483a40ed80dcd3970d8648e56abc582086480286aa44c2911b138a6a8f28e79e7ea0c2dd26c6b01f91e7a7fefcd611fe3572e80cebf4278e8faa5e6472827f1aee27babdbfb4ebfce14de93ec060cacfa4282d73f1ff50415303567f9980145137675bffeb8b0d3fdd927c97782898aded8097113351e4b"}, 0xba) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/devices\x00', 0x0, 0x0) 54.643949351s ago: executing program 4 (id=2237): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) utimensat(r1, 0x0, &(0x7f0000000100)={{0x0, 0x3fffffff}, {0x0, 0x3fffffff}}, 0x0) fsmount(r0, 0x1, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) setpgid(0x0, r2) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) (async) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) (async) utimensat(r1, 0x0, &(0x7f0000000100)={{0x0, 0x3fffffff}, {0x0, 0x3fffffff}}, 0x0) (async) fsmount(r0, 0x1, 0x0) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setpgid(r2, r2) (async) setpgid(0x0, r2) (async) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) (async) 54.572090232s ago: executing program 4 (id=2239): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000200)='net/raw6\x00') r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e24, 0x4, @local, 0x7}, 0x1c) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0xeb, @loopback, 0x2}, 0x1c) lseek(r1, 0xfffffffffffffffe, 0x1) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x4a003, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000003c0)={0xd8}) mmap(&(0x7f000029a000/0x1000)=nil, 0x1000, 0x100000c, 0x13, r4, 0xffffc000) getdents64(r4, &(0x7f0000000100)=""/113, 0x71) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x41, &(0x7f0000000e80)=@generic={0x0, 0x0, 0x39, "699a3d6a", "012135e0d0ddc07950186d2cbaea99a5a417dc241beb7ab8c0a785872fd0f9b132aacb26902f39855e0c4ac21b7d93db6c31f4998f64a3480a"}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x0, 0x0) 54.162280272s ago: executing program 4 (id=2245): syz_clone(0x84100, &(0x7f00000002c0)="4941fa281a523f72e2a6a045d7ab620051793d46d42b304648d6319e47cd5d4374a6d48e243ba51209233b2818b12737c52437623cb759700b05563731c378b05eb4c5ce23ec30bec81c65dd0b7d45b30d16a58b228aefec7bb3c34ded9dbcb2c48b7a6281b99c0410fed86465fcede4be1cba006ddaf081c64525760507dfb4be30f4a5293a822bf56295c20dda940700d7d5a026c75216799204b75f7e017f590945259907346a9e73ebce7dd5c99516968b96f13963ebd08490d448746b88bf7bbd949827117d31c2ff6babae1dd211b4fa4b", 0xd4, &(0x7f0000000080), &(0x7f0000000140), &(0x7f00000001c0)="40de5ae548c3f66b47c2a3fddcb1740d19acd9d6af0244d7753370fffb3453e6cecf64c7e49f726ebd3a1c9c2a339fef8adc1a52b1a78b536136dab639fa215c7e86a9") r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f0000000400)='O4W', 0x3, 0x0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) r1 = syz_io_uring_setup(0x3bbd, &(0x7f0000001b00)={0x0, 0x4a2c, 0x10000, 0x2, 0x218}, &(0x7f0000001b80), &(0x7f0000001bc0)) syz_io_uring_setup(0xef8, &(0x7f0000000440)={0x0, 0x3dcb, 0x80, 0x3, 0x35c, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f00000003c0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000001a80)=@IORING_OP_RECVMSG={0xa, 0x6, 0x1, r0, 0x0, &(0x7f0000001a40)={&(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/89, 0x59}, {&(0x7f00000015c0)=""/207, 0xcf}, {&(0x7f00000016c0)=""/170, 0xaa}, {&(0x7f0000001780)=""/230, 0xe6}, {&(0x7f0000001880)=""/37, 0x25}], 0x6, &(0x7f0000001940)=""/194, 0xc2}, 0x0, 0x10142, 0x0, {0x1, r3}}) r5 = fcntl$dupfd(r0, 0x406, r4) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000001c00)={r0}) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000001ac0)) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1000021, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0x40045304, &(0x7f0000000540)={{}, 'port0\x00'}) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 54.109475205s ago: executing program 35 (id=2245): syz_clone(0x84100, &(0x7f00000002c0)="4941fa281a523f72e2a6a045d7ab620051793d46d42b304648d6319e47cd5d4374a6d48e243ba51209233b2818b12737c52437623cb759700b05563731c378b05eb4c5ce23ec30bec81c65dd0b7d45b30d16a58b228aefec7bb3c34ded9dbcb2c48b7a6281b99c0410fed86465fcede4be1cba006ddaf081c64525760507dfb4be30f4a5293a822bf56295c20dda940700d7d5a026c75216799204b75f7e017f590945259907346a9e73ebce7dd5c99516968b96f13963ebd08490d448746b88bf7bbd949827117d31c2ff6babae1dd211b4fa4b", 0xd4, &(0x7f0000000080), &(0x7f0000000140), &(0x7f00000001c0)="40de5ae548c3f66b47c2a3fddcb1740d19acd9d6af0244d7753370fffb3453e6cecf64c7e49f726ebd3a1c9c2a339fef8adc1a52b1a78b536136dab639fa215c7e86a9") r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f0000000400)='O4W', 0x3, 0x0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) r1 = syz_io_uring_setup(0x3bbd, &(0x7f0000001b00)={0x0, 0x4a2c, 0x10000, 0x2, 0x218}, &(0x7f0000001b80), &(0x7f0000001bc0)) syz_io_uring_setup(0xef8, &(0x7f0000000440)={0x0, 0x3dcb, 0x80, 0x3, 0x35c, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f00000003c0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000001a80)=@IORING_OP_RECVMSG={0xa, 0x6, 0x1, r0, 0x0, &(0x7f0000001a40)={&(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/89, 0x59}, {&(0x7f00000015c0)=""/207, 0xcf}, {&(0x7f00000016c0)=""/170, 0xaa}, {&(0x7f0000001780)=""/230, 0xe6}, {&(0x7f0000001880)=""/37, 0x25}], 0x6, &(0x7f0000001940)=""/194, 0xc2}, 0x0, 0x10142, 0x0, {0x1, r3}}) r5 = fcntl$dupfd(r0, 0x406, r4) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000001c00)={r0}) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000001ac0)) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1000021, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0x40045304, &(0x7f0000000540)={{}, 'port0\x00'}) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 46.523900674s ago: executing program 5 (id=2383): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'syz', 0x20, 0x7f}, 0x2e, 0xfffffffffffffffa) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xdc, &(0x7f00000001c0)={[{0x30, 0x4e00, "71ba3ae4a7f3e7ca85c8f1b3dcb2d2bfd13cdd70271fd3a38a3430a202fe8105cc6247c3d3c688f1ec685f4baf2ec18f"}, {0xa4, 0x4e00, "d5bb50ede9c338f76176bbc1ded8f1ac0267ec7d462027991bbed947d8010a53de48aaea8516de54dde1f1b09377385808ba1d34f6a15f2204b9511e4177acde2a1194b283852fece54cc7d8f037f1898f9237f15fa5e5091d9144ee057368eeadb88935a72e52e5c518d242a7b5174e40a6a93af3d24d803525f75efae0f97a6b0ae9d455ff686d068b12fdd93763131e16541971322a828836a2aa40d4f0f4764d7f28"}]}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000e80)=@generic={0x0, 0x0, 0x39, "699a3d6a", "012135e0d0ddc07950186d2cbaea99a5a417dc241beb7ab8c0a785872fd0f9b132aacb26902f39855e0c4ac21b7d93db6c31f4998f64a3480a"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 43.34032769s ago: executing program 5 (id=2434): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) msgrcv(0x0, 0x0, 0x0, 0x0, 0x4800) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[], 0x30}}, 0x0) 43.273032168s ago: executing program 5 (id=2436): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000007d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000007d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r2) (async) r3 = dup(r2) ioctl$KDMKTONE(r3, 0x4b30, 0xfdfdffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r5, &(0x7f0000000700)=@other={'unlock', ' ', 'none'}, 0xc) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r7, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES16=r6, @ANYRESHEX=r6], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r7, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES16=r6, @ANYRESHEX=r6], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) (async) r8 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x201, 0x0, 0x0, {0x8e5175f809ef008d, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x60, 0x8, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x13c, 0x18, 0xa, 0x101, 0x0, 0x0, {0xd, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x108, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'bridge0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x5c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x109}, @NFTA_SET_USERDATA={0x2c, 0xd, 0x1, 0x0, "dd7399a60f904afba8d78976e3e1f85bdb344b434d70fb5c322ce05601bfb58b76301e00670876fe"}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x6c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x11, 0x6, "d50adfee8016708b1c00a5574c"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWFLOWTABLE={0xec, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0xbc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'wg1\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x17c, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x3a, 0xc, "973c5b45611f7484aff688f8e2a74d1a22cd35a2ef5cdf41064ff07950bd44d89293d3b3340e613be62f729aacf7de387704748dee50"}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_USERDATA={0xa4, 0xc, "0ffa79aa844ceae073b0900e2285abfd36bb43548b7177b70fa2b42fc895abb41d08a98ad1326d4dbf7b8865dde5822a99f12b1d82ff34d569befdee61a67ada80f8c9a368a89a3662f9980947787a672fa92650163881a65265c6abca2d153da54db2bc41939beb717d8e0909617602e731fd85870a2b441b8f910ea6d2f8df35401fed79df65e29785ced7446459fcf6ca8b35c087fb9134d76b2496be8091"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x124, 0x6, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8864}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xdada}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xe7, 0x7, 0x1, 0x0, "9f081c4a015f5dcb3a3f1a6f56a91cbabbe054452447366d5b1f7456d895001cb896908e6e5fe8ed54325a106f037e88c15fff644942c9e4ae381e1ee1d8a1ca6ab56a3c5e1761593d477fc01f84fc090d7949647abf8c061b02edd49897f1f137253a17ce6364806f6cf839d1c3853ad013f1acea92e13ae2149787cc9585dc715a3e70dc796f4c18eea50c1e478a373bc05ea6c748150e0fe03f243d397b53326a7152b04b3b290849be8a8000c65d273bef9a28d74be1376e24b36e49fa40652242d53f266f247421cf969d2972079a2af67a1a15fb9df3facaa6d96411bcd80a03"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6a0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf}, {0x0, 0xffff}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf}, {0x0, 0xffff}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000100), 0x3) (async) setsockopt$inet_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000100), 0x3) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffd294c2002c3d5800950000000000ddff0000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, r12}, 0x94) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r13, r14, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r13, r14, 0x25, 0x0, @val=@iter={0x0}}, 0x20) 43.183580724s ago: executing program 5 (id=2437): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@gettfilter={0x74, 0x2e, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0xe}, {0xffe0, 0xffe0}, {0x8, 0xffff}}, [{0x8, 0xb, 0xffffff66}, {0x8, 0xb, 0x10925869}, {0x8, 0xb, 0x10001}, {0x8}, {0x8, 0xb, 0xaa}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x1c694227}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x6d}]}, 0x74}}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r5, 0xc01064c1, &(0x7f0000000080)={r6}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="040027bd7000fbdbdf250e00000008000500090000005c00028014000100fc01000000000000000000003affebadc215b104059359c010b00000000006000f0022bc00000800070005000000080004000b00000014000100ac14143c00000000000000000000001b06000b00020000000800050009000000000000000000000000000000000000004d765651b7045025affc4101aacd61dcd6856f6bddbd352277463c7091fc27503739bafcd992e6ba9d79598e69df95d1e9ed557d1e24d1ba70e8dc61223aae0b8fd5c36b91bbc23fc996e6071be6db2d12572db45d9ce43be7c815984c647e893b"], 0x80}, 0x1, 0x0, 0x0, 0x6c2ebfe2f3de2d96}, 0x4000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0x709, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x200600, 0x0) accept4(r1, &(0x7f0000000340)=@hci, &(0x7f00000003c0)=0x80, 0x80800) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xfffffe01}, 0x1c) 43.108901191s ago: executing program 5 (id=2438): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x80, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_TTL={0x5, 0x8, 0x6}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x5}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x1, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 43.104926268s ago: executing program 5 (id=2440): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x50, r0, 0x10000000) write$P9_RWALK(r0, &(0x7f0000000000)={0x30, 0x6f, 0x2, {0x3, [{0x40, 0x4, 0x6}, {0x40, 0x2}, {0x4, 0x1, 0x3}]}}, 0x30) r1 = open_tree(r0, &(0x7f0000000040)='\x00', 0x8101) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xbc, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd024}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe892}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3be1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x840) write$P9_RLOPEN(r1, &(0x7f0000000200)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x1}, 0x101}}, 0x18) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000240)=0xfffffffffffffff9) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000280)=0xfffffffffffffffb) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x61cd93e23d6da53b}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x44080) write$P9_RLOCK(r1, &(0x7f0000000440)={0x8, 0x35, 0x1, 0x3}, 0x8) r4 = syz_open_procfs$userns(0x0, &(0x7f0000000480)) setns(r4, 0x40000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = open$dir(&(0x7f00000004c0)='./file0\x00', 0x2c0, 0x40) mount_setattr(r5, &(0x7f0000000500)='./file0\x00', 0x1100, &(0x7f0000000540)={0x100001, 0x8, 0x40000, {r1}}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8001}, {0xa, 0x4e24, 0x1, @local, 0x40}, 0xffffffffffffffff, {[0x7, 0x5, 0x77, 0x8, 0x3, 0x6, 0x6, 0x3]}}, 0x5c) move_mount(r0, &(0x7f0000000600)='./file0\x00', r1, &(0x7f0000000640)='./file0\x00', 0x200) socket(0x27, 0x3, 0xfffffffd) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000680)={0x2, [0x4, 0x1]}, &(0x7f00000006c0)=0x8) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000780)={0x2, &(0x7f0000000740)=[{0xd3e0, 0x1, 0x9, 0x8}, {0xa, 0x9, 0x82, 0x31c}]}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000800)={0x2020}, 0x2020) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000002840)={0x6, 0x101, 0x4, 0x7, 0x8, 0xfffffeff, "d68d21af9be368ad9fa871dda79227ed", 0x2, 0xf, 0xe, 0x8, 0x8, 0x6, 0x3}) 27.902851362s ago: executing program 36 (id=2440): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x50, r0, 0x10000000) write$P9_RWALK(r0, &(0x7f0000000000)={0x30, 0x6f, 0x2, {0x3, [{0x40, 0x4, 0x6}, {0x40, 0x2}, {0x4, 0x1, 0x3}]}}, 0x30) r1 = open_tree(r0, &(0x7f0000000040)='\x00', 0x8101) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xbc, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd024}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe892}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3be1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x840) write$P9_RLOPEN(r1, &(0x7f0000000200)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x1}, 0x101}}, 0x18) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000240)=0xfffffffffffffff9) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000280)=0xfffffffffffffffb) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x61cd93e23d6da53b}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x44080) write$P9_RLOCK(r1, &(0x7f0000000440)={0x8, 0x35, 0x1, 0x3}, 0x8) r4 = syz_open_procfs$userns(0x0, &(0x7f0000000480)) setns(r4, 0x40000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = open$dir(&(0x7f00000004c0)='./file0\x00', 0x2c0, 0x40) mount_setattr(r5, &(0x7f0000000500)='./file0\x00', 0x1100, &(0x7f0000000540)={0x100001, 0x8, 0x40000, {r1}}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8001}, {0xa, 0x4e24, 0x1, @local, 0x40}, 0xffffffffffffffff, {[0x7, 0x5, 0x77, 0x8, 0x3, 0x6, 0x6, 0x3]}}, 0x5c) move_mount(r0, &(0x7f0000000600)='./file0\x00', r1, &(0x7f0000000640)='./file0\x00', 0x200) socket(0x27, 0x3, 0xfffffffd) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000680)={0x2, [0x4, 0x1]}, &(0x7f00000006c0)=0x8) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000780)={0x2, &(0x7f0000000740)=[{0xd3e0, 0x1, 0x9, 0x8}, {0xa, 0x9, 0x82, 0x31c}]}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000800)={0x2020}, 0x2020) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000002840)={0x6, 0x101, 0x4, 0x7, 0x8, 0xfffffeff, "d68d21af9be368ad9fa871dda79227ed", 0x2, 0xf, 0xe, 0x8, 0x8, 0x6, 0x3}) 25.131978972s ago: executing program 7 (id=2610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x24, 0x2d, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x103000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864d0, &(0x7f00000003c0)={0x29, 0x0, 0x0, 0xb0b0b0b0}) write(r2, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000cee0202001a000000", 0x33a) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) 25.043745487s ago: executing program 7 (id=2611): ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000400)={{}, "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"}) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 24.943702973s ago: executing program 7 (id=2612): r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x1, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x44, &(0x7f0000000080)={[{0xd, 0x4e00, "91b35b68a5efdffac77893f5ab"}, {0x29, 0x4e00, "26daad59244ae182563718da7284e3a832bc02cb9de91488408669540da039d3061d4ecbc09b0a28dc"}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket(0x10, 0x4, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xa}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, &(0x7f0000000140)) 23.252886024s ago: executing program 7 (id=2630): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 1', 0x1b) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x40) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ppoll(&(0x7f0000000140)=[{r2, 0x8024}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1\x00', 0x20400, 0x180) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) fdatasync(r3) socket$inet_sctp(0x2, 0x1, 0x84) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20180, 0x0, 0x8a, &(0x7f0000000000), 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0xbc, 0x30, 0x48b, 0x1, 0x0, {}, [{0xa8, 0x1, [@m_ctinfo={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x80000001, 0x0, 0x9, 0x5}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7fffffff}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @multicast2, 0xff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x0) 23.109479363s ago: executing program 7 (id=2634): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000002000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x8, 0x0, 0x2, 0x10003ffd, 0x7, 0x400, 0x7}}) 22.771267669s ago: executing program 7 (id=2644): r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000001c0)={0x3, 0x1f, 0x28, 0x1, "a09f7710bb060bdc0d40cfcd10bf99f7216bcfaa0000000023000000046b00"}) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 22.726360215s ago: executing program 37 (id=2644): r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000001c0)={0x3, 0x1f, 0x28, 0x1, "a09f7710bb060bdc0d40cfcd10bf99f7216bcfaa0000000023000000046b00"}) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 9.420264318s ago: executing program 6 (id=2841): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x4c, r2, 0x815, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0xf}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000) 9.353517588s ago: executing program 6 (id=2842): r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) r1 = socket(0x21, 0x2, 0x10000000000002) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[], 0x30}}, 0xc000) r3 = socket$netlink(0x10, 0x3, 0x10) (async) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 8.903371331s ago: executing program 6 (id=2846): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x242280, 0x0) (async) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x242280, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x5, 0x8000}]}) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) ppoll(&(0x7f0000000100)=[{r0, 0x3010}, {r0, 0x4}, {r0, 0x200}, {r0, 0xc0ca}, {r0, 0x69}, {r0, 0x161}, {r0}, {r0, 0x400}, {r1, 0x620}], 0x9, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0)={[0x7]}, 0x8) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x549804, 0x0) ioctl$CEC_ADAP_G_CAPS(r2, 0xc04c6100, &(0x7f0000000240)) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) (async) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x80) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r3, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x101, 0x65}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x8010) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c010}, 0x8004) (async) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c010}, 0x8004) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x194, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xcd, 0x6, "d387a32e4c930f33417b8cbe781daaed922a83ea68df81eb39fa4548a913435271b3befb01181017428a9983e63e6a7c0f239a55a39eada4b0cc174938bec0e564012fd91e4682955e07856050838b78d17dee74d8a7fb67f679662acf09a677eb356c5ebc3fd02313c6d5ce0a13e9425a54f575976e559d3aa32a21cafe9366fb0ed6190093fdd3593d2ca5e7ede852c7f2ab8dbf78e74bb2fa232b15a8b0df31d0f5537460f60282450b2496b95b89566c7265432a0ec4b4532564a62cb08619f810a0c093b848cb"}, @NFTA_TABLE_USERDATA={0xa8, 0x6, "c2b423807a3008dae8e3bae0a2fa5cfc94c01cf2f4421f20afa7fbe7640a344f50e13d761874415ed62d6ddf6805779fb890aca0e0e46c7af3761ab7663282a5a99f9fe0c9df0ee5e2f3c316839ab2290859de4ad7ec623960b6eb9adcf9d86a3c96d5d2117b6ffb6b268819ce54a87f19ad9a1e80371b30d408bc055a77fbd5e159d0c5394b22efde31ecaffc93e8692f9c4efb7d11b33f7db5213ef962c64f037f6eb4"}, @NFTA_TABLE_FLAGS={0x8}]}, 0x194}, 0x1, 0x0, 0x0, 0x4080}, 0x20004000) (async) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x194, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xcd, 0x6, "d387a32e4c930f33417b8cbe781daaed922a83ea68df81eb39fa4548a913435271b3befb01181017428a9983e63e6a7c0f239a55a39eada4b0cc174938bec0e564012fd91e4682955e07856050838b78d17dee74d8a7fb67f679662acf09a677eb356c5ebc3fd02313c6d5ce0a13e9425a54f575976e559d3aa32a21cafe9366fb0ed6190093fdd3593d2ca5e7ede852c7f2ab8dbf78e74bb2fa232b15a8b0df31d0f5537460f60282450b2496b95b89566c7265432a0ec4b4532564a62cb08619f810a0c093b848cb"}, @NFTA_TABLE_USERDATA={0xa8, 0x6, "c2b423807a3008dae8e3bae0a2fa5cfc94c01cf2f4421f20afa7fbe7640a344f50e13d761874415ed62d6ddf6805779fb890aca0e0e46c7af3761ab7663282a5a99f9fe0c9df0ee5e2f3c316839ab2290859de4ad7ec623960b6eb9adcf9d86a3c96d5d2117b6ffb6b268819ce54a87f19ad9a1e80371b30d408bc055a77fbd5e159d0c5394b22efde31ecaffc93e8692f9c4efb7d11b33f7db5213ef962c64f037f6eb4"}, @NFTA_TABLE_FLAGS={0x8}]}, 0x194}, 0x1, 0x0, 0x0, 0x4080}, 0x20004000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000007c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3, @remote, 0x1}, {0xa, 0x4e21, 0xe912, @empty, 0x8}, 0xffffffffffffffff, 0xfffffff9}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000007c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3, @remote, 0x1}, {0xa, 0x4e21, 0xe912, @empty, 0x8}, 0xffffffffffffffff, 0xfffffff9}}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000880)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000008c0)={0x288, r3, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, ':'}, @NL80211_ATTR_FRAME_MATCH={0x1c, 0x5b, "bb4c3c519b246059c0ce2cd8679af1d27174952ba55ea227"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x8c, 0x5b, "2a41aec1795993a71c5c34ed7b2181a6d0c420f31aa109579c9057b8029767347cce5d85881d58497f646a6bf064cda7807a94b287b7dafffdec39c2fdca513db43703c17b6fcc83f98d2893a601eedad3d2e06443176f90563709cbc031ece3967fbe3b75e8557416acec1bcf89958523cf1d3dc131354bb29d477ec9ba3a84b35d5aca07011240"}, @NL80211_ATTR_FRAME_MATCH={0xd8, 0x5b, "ba31a23a2fa555909f202390b6cf50dfe3a279a873c7f45fe6fe93328c3d1e1ec626dd8718b9244dd8399f93cda388115563dfdb40bb5fee28fb1a43695bc137912d7872d0a8a99c2245e7b9e38d9786ef27c8038411da70786922db64ecfc3f48c103220de44fa6097075d9b62c553726015b36e8ca50adaca717f1bae8ca4ee124d87b23eb3791ced406f38aa1cce427f9458954cc93fa8576d29006727069c9e9da266efd6551fd672f61572e8174ff7fd189d372fd5ea33c385ea2255cdac42aa8f1ced9938ceb3c7e65b4b0ac7556965aed"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd}, @NL80211_ATTR_FRAME_MATCH={0x7c, 0x5b, "d88f00af347863f4ddd8cbcc1c7def526c6b393f43e88a2f5268bcc21c00d3b6ddc97e7be45ede7185b8912c2b7def6c28a4763742265cd707b0fd7290fe6085453dd6e6df34e42aa1c44f18c9c5c72dd4704774977f07b731b8d4664dc7883d85868fce4277d226303202099771092952cada742278598d"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfc00}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfff}, @NL80211_ATTR_FRAME_MATCH={0x48, 0x5b, "a1faea43f537b2d90737d0712142629255c56dcb668e5ac19c3dfd880ebf7ce36eb4d2656d266a644326108547c304b144d4948e8ddc43c40b8e29439bf59ad5cdecee3a"}]}, 0x288}}, 0x800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r6 = dup(r1) dup(r6) (async) r7 = dup(r6) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, 0x1410, 0x300, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x20004000) r8 = fcntl$dupfd(r2, 0x605, 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d80), r6) sendmsg$IPVS_CMD_ZERO(r8, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x78, r9, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$FUSE(r5, &(0x7f0000000ec0)={0x2020, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f0000002f00)=0x0) getgroups(0x2, &(0x7f0000002f40)=[0xffffffffffffffff, 0x0]) write$FUSE_ATTR(r7, &(0x7f0000002f80)={0x78, 0xffffffffffffffda, r10, {0x4, 0x2, 0x0, {0x6, 0x7ff, 0xfff, 0x1, 0x14, 0xab4, 0x6, 0x7, 0x88d0, 0x6000, 0xeb8, r11, r12, 0x2, 0x8d}}}, 0x78) pwritev2(r1, &(0x7f0000003380)=[{&(0x7f0000003000)="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", 0xff}, {&(0x7f0000003100)}, {&(0x7f0000003140)="a5b36ee3d4e1c1d54793efc068d49e72fc4d2bbc4397dde0a82c95b5f62372d04d510092252c0c295faaa3de7d0ecc291eb600122823665fa684f631e75c2bcc9bb7458401c86f0061ed961645d73243b64e0f45935db51583a9adece1c60bc85233426025e42e54254285b6e684071de71f2341fe08e43c72ae2cfa8badd15cfcad3afe6a05dc8b21b6882dd023c0f72e25074848390a8ac6b2f7baeae33766244e463a400859838d8dabe22df32d811e5b45c973a49c2efb9b8236ba2c17112d28771cb1bc28d1021f3944d4c206b6b1ea5de6cef8f35a4328e97769ce8cd0c91d84e3c62c0d6c796abda6e79fbdbf0744e9f548", 0xf5}, {&(0x7f0000003240)="9e99dce15982155739c332807f4f88165826b65bc1cd219dcb0a238034547da425f75d5de679ca92c62d85972cd7c900e68a935a0f1fe745b00f75917060ac1953d4ec104208ffc3d111a2be8dce9ecd896a1337443571e06fa0a3096a3d92f1576091", 0x63}, {&(0x7f00000032c0)="27cd91d141ecd29454aee8e90e7d95faa203127b4068b9b2b88ffd45cf3e18218fb5c55bd31dfa673f75b9ca137b58c6fc38223d6d232f099ed8530dd7df36e5017fbc3c7ddad1f1e6ab28a7b8de5578cbdb669a9c2a6d5a337ab3245e35c3ea2a9d5debc5acaac19a28d0a37b0ae4ecdd9f38c8e0d23814c9a95c4eac20ed85ca60c7f7e0d19fe2202e67aee8d576272fd466f87869b5cd76f95fa9f5a0be07d1", 0xa1}], 0x5, 0xfffffffc, 0x3, 0x12) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000003400)='pimreg1\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000003400)='pimreg1\x00', 0x10) write$P9_RLINK(r2, &(0x7f0000003440)={0x7, 0x47, 0x1}, 0x7) umount2(&(0x7f0000003480)='./file0\x00', 0x1) (async) umount2(&(0x7f0000003480)='./file0\x00', 0x1) 8.902330111s ago: executing program 6 (id=2847): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x11a) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec2b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000040)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x400) syz_emit_ethernet(0x13, &(0x7f0000000600)={@local, @broadcast, @void, {@generic={0x5, "c08e23dbea"}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b02ffffffffff0008116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b000000190001001a848efa961fb2d82d"], 0x1c}}, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x10, 0x4, 0x0, 0x5, 0x11, 0x18, "8cd628b0ec690556b52201179cfe72e9b337a978a8ac42aaed80b981d7b9a009bfc0d2e8a7fc09406123ae7c29c42708207b09c98bc346b7a56b897d64f9d8a6", "3f419417364b404605dd4b7f37682ddac91e638cf5eff3df5994f7a66c8bff6034234ab28ae2e2f806d528457dc8cea57a77299bd0ae5bf85e86370900aab9a0", "619f11d112237ca03acc63fe486ee668f0ba88093ae102ba9ff488c70400d40e", [0x2, 0xe3b3]}) 8.803325999s ago: executing program 6 (id=2849): mount$9p_virtio(&(0x7f0000000000), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d76697274696f2c63616368653d667363616368652c63616368657461673dd88b13a466332fb8e5784320b4e09d9f64e4922c00"]) 8.723200379s ago: executing program 6 (id=2851): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880)={0x0, 0x9}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000001c0)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r2, 0x8948, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000019100)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x9, 'syz1\x00', @null, 0x3, 0x8, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$dsp(r3, &(0x7f0000000100)="e19f1f75b60e942834c66d73ae1b38fc18c09de4a45e106d64b7cdef483025290173f3be879eb7d4ae6b627213bb312d2f0bf11bf2fe4be0a00a3a5baff28a4ed2e218e099a40a549ccb17999a652005a113df4ae537701ff016a8b8d05918f811aeb7de2698b79132abb26e571d04668f6b9ea2c6d771a64ecd9b22938e363517f7306389bcb9fa3d8a8b066b662f3a243c69b414208a29d556ee0959ea8051d3db607e4135c72b747c9f62795403c346331300001000", 0xffffffab) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r3, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000008c0)={0xc, {0x2, 0x0, 0x5150, 0x3a}}) r6 = syz_open_procfs(0x0, &(0x7f00000190c0)='syscall\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) read$FUSE(r4, &(0x7f0000002bc0)={0x2020}, 0x2020) modify_ldt$read(0x1100, 0x0, 0xfffffffffffffe5e) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r1, 0xfff, {0x0, 0x0, 0x0, 0x6, 0x39a6, 0x0, 0x18, 0x20, 0x8, "d104806b5172414d6bba0e69ab5007daea57c0a4e4ea4ef0a032dc01cf450e6af2069726a897a8636e257c56d416a3dc322c53d2501ef5ebe41cb42a7b378a92", "1d20fc4a9aa4dec95adf1fade03d17d4c225829181ea93922ed852d899bb45e70b85a3c705a6452ed175ed0228a9b7163aef5150f2434a79589a136ecced8e28", "17738e63f64bf974bf2013c462d64ecd07fc0c8c8312eb11462b5b920567e8b1", [0x0, 0x1]}}) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) 1.923330747s ago: executing program 2 (id=2914): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000080)="3835bef30206ddeaab5f03c260f55d496edc27dc925127af", 0x0, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x65, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x12, 0xffffffffffffffff, 0x1168a000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYRES64=r3, @ANYRESOCT=0x0], 0x18}}, 0xc810) 1.922949449s ago: executing program 2 (id=2915): socket(0x40000000015, 0x4, 0x0) (async) r0 = socket(0x40000000015, 0x4, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x1c0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)=0x1) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pread64(r4, &(0x7f00000001c0)=""/79, 0x4f, 0x3) (async) pread64(r4, &(0x7f00000001c0)=""/79, 0x4f, 0x3) listen(r2, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) listen(0xffffffffffffffff, 0x7) (async) listen(0xffffffffffffffff, 0x7) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r5, &(0x7f0000000540)=[{{&(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4044810) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) (async) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000140)={0xa, {0x0, 0x5, 0x2, 0x80b60cd1}}) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}, 0x1c) (async) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) (async) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000180)=[{&(0x7f0000000480)="580000001500bfd427323b472547a45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffff1900e7ee000000deff0000000200000000", 0x58}], 0x1) 1.303015573s ago: executing program 8 (id=2917): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @private1}], 0x4c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @private1}], 0x4c) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000000)="109d487eebad35f2ebf12958c2c34d432892d5bdc28222dd87cf141eedcd72dee420a6c09f72d377049807c556202a9def7c7b35baaf079afd82f3262e1b0f7d710e15a0322a7f54a24b7aaf1ee2a891d13538dbac8aaef852e70d6eb1f9269cf8a0fa9d5b297124df15529f3bbdfeb60ec9e0051ee87800cfda374f1465f506f59375bde29cbe8aa6da5f949249f57d44c460abe554a76f3287625eb8e7ae4a9ff03332258b501cbbaccb45f8043cda78adaf2cee4182b2b831140f45bc93f35b1059c10b1e8d73884706bd4a892be4387c1f817ac34ac566423c90222fdb7b3b04b16828a7eb8fe7ddb0dbbdecf1df00a6d3e8fa111d7614", 0xf9, 0x91, &(0x7f0000000100)={0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) 1.232455295s ago: executing program 8 (id=2918): r0 = socket(0x29, 0x6, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x14) (async) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000240)=@get={0x1, &(0x7f0000000180)=""/138, 0x5}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000280)={{r0}, 0x2, 0x5, 0xfffffffffffffff9}) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x8840, 0x0) (async) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000400)={'macsec0\x00', {0x2, 0x4e23, @private=0xa010100}}) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000440)={0x0, 0x1}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000004c0)={r7, 0x101, 0x30, 0xfffffffffffffffc, 0xffffffff80000001}, &(0x7f0000000500)=0x18) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r6, 0x8044610a, &(0x7f0000000540)) (async) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f00000005c0)={0x3, 0x4, {0xffffffffffffffff}, {}, 0x1}) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000600)=r9) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000640)={'wg0\x00'}) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000680)={r8, 0x7}, &(0x7f00000006c0)=0x8) (async) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, &(0x7f0000001180)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001140)={&(0x7f0000000740)={0x9e8, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_MEASUREMENTS={0xd0, 0x111, 0x0, 0x1, {0xcc, 0x5, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x343b}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}, @NL80211_ATTR_TIMEOUT={0x8}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x800}, @NL80211_ATTR_PEER_MEASUREMENTS={0x8c4, 0x111, 0x0, 0x1, {0x8c0, 0x5, 0x0, 0x1, [{0x210, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x1f4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x34ea}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x2ec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xd0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x43}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x184, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xea4e51e7648f15d9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xbc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x3c0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x6c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xae}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x11c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffc0}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x90, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x95}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xc}]}, 0x9e8}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000011c0)={r10, 0x2, 0x1}, 0x8) (async) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000001200)={'pim6reg\x00'}) (async) r11 = accept$netrom(r0, 0x0, &(0x7f0000001240)) getsockopt$netrom_NETROM_T4(r11, 0x103, 0x6, &(0x7f0000001280), &(0x7f00000012c0)=0x4) (async) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000001300)=0x4) r12 = fsopen(&(0x7f0000001340)='omfs\x00', 0x1) ioctl$FS_IOC_GETFSMAP(r12, 0xc0c0583b, &(0x7f0000001380)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x10001, 0xc6, 0x100000, 0x8001, 0x4, 0x7fffffffffffffff}, {0x7, 0x10000, 0x101, 0x4, 0x5204, 0x7}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r13, 0x11c, 0x4, &(0x7f00000015c0)=""/29, &(0x7f0000001600)=0x1d) (async) writev(0xffffffffffffffff, &(0x7f00000018c0)=[{&(0x7f0000001680)="d9827a13fd8c4da1e5760e7915a18a466e223966393eec551507cf0a22ebb20098ed2d5dc9927dc4b85429242ab4d59e5b5c8487468aba1162fe254704531100a5d9b0ab47a6c544161d6d11d86b665d941f61986ca977140b6b5836a57ee304b460a4dde728029dc0e9768c5a231a7e3890f34ed22c8b6698accd081316e2399d986fb25d208b631d78abe0ca0eddba01476c2012401e2952d49195ebff91f5ae1c803dc94f4275", 0xa8}, {&(0x7f0000001740)="89c53b501456005ccefb39db4003c84b81d37b3fa0e491858d243a4f9469d9c227ded2413b68ea81edab0f87c14b5d19e291b5f4c350c1e0606e5de0d99d39c9a68dc3b349e01cd8b8e8331248af6b956cf02c3fdeb1beaaa48a8d1b0418", 0x5e}, {&(0x7f00000017c0)="9322e8406650019acb9a69f092402aefa2ee0a02dd63a7d74b7bb7b51c2e80a57aff29d42375f1d84c", 0x29}, {&(0x7f0000001800)="8d55c38b02ccb20e63f820c9d25551c6f0fb1d55595cb6ce235fd21768de1ef9d1888796284f995e9747591f17945867181d5982095de694d1b956b98b405ae827e88779c0cadd8ddf181825380d6e705271b331be59ed87c926120b8bea005735e2f0aff66daba24ce13ed068560de61800249732f769cf25befa62e9745d7f00", 0x81}], 0x4) 1.231961151s ago: executing program 8 (id=2919): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000440)={0x0, 0x1}, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0xed}, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000380)={0xc, {0xf, "f1a37ff2e79d039d654908f5397115"}}, 0x15) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) preadv(r6, &(0x7f0000000680)=[{0x0, 0x3d3ac601}, {&(0x7f00000016c0)=""/4084, 0xff4}], 0x2, 0x9, 0x6) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="f30f090f00dbb831048ec8b800008ec8d33366b98f0a000066b89ab9000066ba000000000f3066b9d40a000066b80000000066ba000000000f30640f07260f01c3da62ce", 0x44}], 0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x2c, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg/2:0:0:0\x00', 0x100, 0x0) ioctl$SG_SET_TIMEOUT(r8, 0x2201, &(0x7f0000000180)=0x7b0) r9 = syz_socket_connect_nvme_tcp() r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_int(r10, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) sendto$inet_nvme_of_msg(r9, &(0x7f00000002c0)={@data_h2c_hdigest={{0x6, 0xa, 0x18, 0x1c, 0x9}, 0x7, 0x2, 0xfffffffd, 0x8, "f0941b40"}, @val=&(0x7f00000001c0)="3ceee632608236315a6c7b49bd92f70323f1c489cdfa4fb93030a471a1d9ecbe77bc5d73306b91c7e11b27a3f218037c2328e7e6c6882056f4c65df381ecf46c82501a498625d2caeaaef7c264d95444f870517605da28718b6d689d90bae993b2955e49a2fd381f7dda1c1867c51d46612c7ff9533ef7a2e2613b82eacce77dcc59c38a17c428fe94619d3ab3fa2ea20d2011217f2a4787a43e3419014474e285dd7d78d931a55e0d2351b1d43c2b1c29caa719c76ca5bde2afdb49b9b3bcd6b8"}, 0x88, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0xf, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0xf, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x90) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.013389107s ago: executing program 2 (id=2920): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xa, 0x8580) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f00000001c0)={0x0, @frame_sync, 0x0, 0x0, {0x0}}) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) landlock_create_ruleset(&(0x7f0000000080)={0xb440, 0x0, 0x2}, 0x18, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000022400018014000180080001007f00000108000200ac14141c0c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c0002800500010000000000080007400000000024000e"], 0x88}}, 0x0) connect$can_bcm(r5, &(0x7f0000000140)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x182, 0x9, {0x77359400}, {}, {0x2, 0x0, 0x1}, 0x1, @can={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "c251541693f8cfd1"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x2e, 0x1, 0x3, "fff600f40f000000000000b967351bca40ba3e27ff7eefad00000000ffffffff", 0x47524247}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x4, 0x0, 0x10000, 0x3e12, 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) msync(&(0x7f000032e000/0x2000)=nil, 0x2000, 0x6) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$KVM_GET_MSRS_sys(r11, 0x4018aee2, &(0x7f0000000500)={0x59}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r10, 0x70d, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f0000000000)={0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 920.311092ms ago: executing program 8 (id=2921): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x10000}, 0xc) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@ipv6_deladdr={0x0, 0x15, 0x20, 0x70bd2d, 0x25dfdbfd, {0xa, 0x78, 0x12, 0xfd, r3}, [@IFA_LOCAL={0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48044}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 833.149185ms ago: executing program 8 (id=2922): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) syz_open_dev$video(&(0x7f0000000180), 0x3, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x1040c08, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) connect$802154_dgram(r0, &(0x7f00000000c0)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) (async) syz_open_dev$video(&(0x7f0000000180), 0x3, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x1040c08, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) (async) connect$802154_dgram(r0, &(0x7f00000000c0)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) (async) 832.622713ms ago: executing program 8 (id=2923): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='wlan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8dcacfa1c6c2afd6, 0xc9100120, 0x0, 0xfffffffffffffd25) 542.870879ms ago: executing program 9 (id=2924): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 372.882023ms ago: executing program 9 (id=2925): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r1 = dup(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x20, 0x1, 0xfffc, 0x1fff, 0x0, 0x0, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) quotactl_fd$Q_SYNC(r3, 0xffffffff80000100, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) close(r4) 301.713672ms ago: executing program 9 (id=2926): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x4, 0x0) madvise(&(0x7f00004ba000/0x2000)=nil, 0x2000, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000000c0)={0x0, 'vlan0\x00', {0x1}, 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x2c, 0x2c, 0xd67, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {}, {0x1, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040011}, 0x4850) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf250500000008000300f3"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) socket$nl_netfilter(0x10, 0x3, 0xc) 133.320793ms ago: executing program 2 (id=2927): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x3c}}, 0x20) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1) recvfrom(r1, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c01000010001307fefffffffcdbdf256401010100000000000000000000000020010000000000000000000000000001000000004e2100020a0080006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBLED(r7, 0x4b65, 0x912) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}}, 0x0) 62.827842ms ago: executing program 9 (id=2928): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x2, 0x3, 0x6) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000100)={{r0}, 0x1, &(0x7f0000000040)=[0x0], 0x1ff}) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 62.240038ms ago: executing program 2 (id=2929): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x10201, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x4, 0x4c4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0xe3c4, 0x10}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, 0x0, 0x5}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000280)={r2, 0x6, 0x5, 0x92fa, 0x1000, 0xffff}, &(0x7f00000002c0)=0x14) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000300)={{0x5c, @empty, 0x4e23, 0x4, 'sh\x00', 0x14, 0x8, 0x11}, {@local, 0x4e23, 0x3002, 0x7, 0xb71, 0x7}}, 0x44) fanotify_init(0x8, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000380)=0x2, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000440)={r5, 0x1, r0, 0x9}) recvfrom$ax25(r1, &(0x7f0000000480)=""/124, 0x7c, 0x0, &(0x7f0000000500)={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @bcast]}, 0x48) r6 = syz_open_dev$vcsu(&(0x7f0000000580), 0x12, 0x800) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000005c0)={r3, 0xfffa}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000600)={r3, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000640)={r4}, 0x8) r7 = accept4$x25(r1, &(0x7f0000000680)={0x9, @remote}, &(0x7f00000006c0)=0x12, 0x80400) ioctl$SIOCX25SCUDMATCHLEN(r7, 0x89e7, &(0x7f0000000700)={0x4}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000740)={0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000780)={0x0, 0x1ea, 0x6, 0x1}) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000000b80)={r9, 0xc, 0x8000000000000000}) ioctl$SG_IO(r6, 0x2285, &(0x7f0000002580)={0x0, 0xffffffffffffffff, 0x6, 0xea, @scatter={0xa, 0x0, &(0x7f0000001440)=[{&(0x7f0000000f80)=""/41, 0x29}, {&(0x7f0000000fc0)=""/98, 0x62}, {&(0x7f0000001040)=""/12, 0xc}, {&(0x7f0000001080)=""/121, 0x79}, {&(0x7f0000001100)=""/171, 0xab}, {&(0x7f00000011c0)=""/59, 0x3b}, {&(0x7f0000001200)=""/169, 0xa9}, {&(0x7f00000012c0)=""/47, 0x2f}, {&(0x7f0000001300)=""/106, 0x6a}, {&(0x7f0000001380)=""/185, 0xb9}]}, &(0x7f0000001500)="b44cfc9a5db3", &(0x7f0000001540)=""/4096, 0x0, 0x4, 0x2, &(0x7f0000002540)}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000002600)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r10 = syz_open_dev$audion(&(0x7f0000002a00), 0x4000000000000000, 0x14b002) ioctl$VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000002a40)={0x2}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r10, 0x4018aee2, &(0x7f0000002ac0)=@attr_other={0x0, 0x8bb, 0x0, &(0x7f0000002a80)=0x3}) syz_emit_ethernet(0xde, &(0x7f0000002b00)={@random="66cc38a169ff", @random="e83dbf2c64e1", @val={@void, {0x8100, 0x5, 0x1, 0x2}}, {@x25={0x805, {0x2, 0x5, 0xf, "7fa72cb6566759a3e284d88ac9c1fefff75ab53c203ea12ced5da44e6d09e0d0793195cced3e4e66a1c50b2fe00cdd302bb777140384f4657637cea4e06d9a2e0045d80222e34cd87912e08475fc642ee5a329f93ae87852435d87a984af017a7442924ffc8acb7995ce1211ce9f18edbc6cd450e8a9b7dcc4a96c8a8655608cba038599ab729f87b786cde54ec5bfc62e2dee22d9e0c4454173ce2cfa5c18f30f91d84f9f4850b5ae8f6c41e79f36264723217ce97ead0a28e2b60cd04d2b8e6c0abc3c3b57ec4bc3"}}}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000002c00)={0x3, 'ipvlan1\x00', {0x1ff}, 0x3}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f0000002c40)={0x0, @reserved}) ioctl$SIOCAX25ADDUID(r10, 0x89e1, &(0x7f0000002e40)={0x3, @bcast}) 61.208129ms ago: executing program 9 (id=2930): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) (async) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) (async) r2 = gettid() (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r4, 0x0, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000200001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008854) (async) timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r2}, &(0x7f0000000380)=0x0) timer_settime(r5, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) r6 = gettid() tkill(r6, 0x16) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) (async) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x414902, 0x80) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) (async) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1015, 0x1) 1.183956ms ago: executing program 2 (id=2931): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x2400) ioctl$CEC_DQEVENT(r2, 0xc0506107, &(0x7f0000000280)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) kcmp(0xffffffffffffffff, r3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, 0x0, 0x0) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd29, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040840}, 0x240000c0) 0s ago: executing program 9 (id=2932): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = userfaultfd(0x801) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110}) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000724000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @local}, 0x10) syz_emit_ethernet(0x81, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@llc={0x4, {@llc={0xe, 0x0, "de", "444d0188b3b19fc23430354541e8b3e48d51cb9125101ffe97b3dc93b591397116e491d89a7789fa61742093e3fc6034851cd45742bfaa6f0ae8d405d6d61d661b79e60637cea02cb5b57aa89109efd153bbfacc505f806be726d4acb4a7eff8ee4d5d9fe9fbef54955a077f"}}}}}, &(0x7f0000000140)={0x1, 0x2, [0x125, 0x73a, 0xae9, 0xc48]}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @random="2716157f3354"}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000280)={@private2, r3}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010002b39042bbd7000ccb081679709001e8840807cb22afa470eeedef1e593c90a7700d37de6cdd955376d65a800570900ef3d7e58c0c1e95d76d948cc070fe42cbe", @ANYRES32=0x0, @ANYBLOB="08440000880004001800128008000100677265000c0002800600020010000000"], 0x38}}, 0x20000800) kernel console output (not intermixed with test programs): 61][T14083] team0: Port device team_slave_1 added [ 204.456677][T14083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.461969][T14083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.470235][T14083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.475237][T14083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.477492][T14083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.486589][T14083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.528840][T14083] hsr_slave_0: entered promiscuous mode [ 204.531797][T14083] hsr_slave_1: entered promiscuous mode [ 204.534807][T14083] debugfs: 'hsr0' already exists in 'hsr' [ 204.537289][T14083] Cannot create hsr debugfs directory [ 204.539029][T14109] input: syz1 as /devices/virtual/input/input37 [ 204.616536][T14083] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.619957][T14083] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.690917][ T40] audit: type=1400 audit(1764797381.045:24075): avc: denied { write } for pid=14114 comm="syz.6.2302" path="socket:[59503]" dev="sockfs" ino=59503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 204.701277][T14083] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.704836][T14083] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.776465][ T144] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 204.787787][T14083] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.801276][T14083] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.866337][T14083] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.869592][T14083] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.906063][T14131] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2306'. [ 204.906063][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2306'. [ 204.922892][ T144] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.926690][ T144] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.930781][ T144] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.936731][ T144] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.940947][ T144] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.949943][ T144] usb 10-1: config 0 descriptor?? [ 204.994187][T14083] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 204.998412][T14083] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 205.012912][T14083] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 205.019197][T14083] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 205.041185][T14083] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.043840][T14083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.046390][T14083] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.048751][T14083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.080957][T14083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.088602][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.097304][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.110876][T14083] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.119138][ T7802] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.121658][ T7802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.129236][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.131937][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.265530][T14083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.293902][T14083] veth0_vlan: entered promiscuous mode [ 205.298146][ T40] audit: type=1400 audit(1764797381.655:24076): avc: denied { accept } for pid=14154 comm="syz.6.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 205.299749][T14083] veth1_vlan: entered promiscuous mode [ 205.323403][T14083] veth0_macvtap: entered promiscuous mode [ 205.328617][T14083] veth1_macvtap: entered promiscuous mode [ 205.337979][T14083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.347594][T14083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.356106][T12118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.359112][T12118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.375950][T12118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.379043][T12118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.414662][ T8929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.417336][ T8929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.434688][T12118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.437361][T12118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.493496][T14160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=85 sclass=netlink_tcpdiag_socket pid=14160 comm=syz.6.2313 [ 205.549676][ T144] usbhid 10-1:0.0: can't add hid device: -71 [ 205.556772][ T144] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 205.571699][ T144] usb 10-1: USB disconnect, device number 27 [ 205.615868][ T40] audit: type=1400 audit(1764797381.975:24077): avc: denied { bind } for pid=14175 comm="syz.2.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 205.675543][T14183] batadv_slave_1: entered promiscuous mode [ 205.699649][T14182] batadv_slave_1: left promiscuous mode [ 205.729541][T14180] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 205.772437][ T40] audit: type=1400 audit(1764797382.135:24078): avc: denied { append } for pid=14192 comm="syz.7.2321" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 205.772874][T14194] blktrace: Concurrent blktraces are not allowed on sg0 [ 205.800378][T14194] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2321'. [ 205.883555][ T5934] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 205.886931][ T5934] CPU: 1 UID: 0 PID: 5934 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 205.886948][ T5934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 205.886956][ T5934] Workqueue: hci3 hci_rx_work [ 205.886992][ T5934] Call Trace: [ 205.886997][ T5934] [ 205.887002][ T5934] dump_stack_lvl+0x16c/0x1f0 [ 205.887019][ T5934] sysfs_warn_dup+0x7f/0xa0 [ 205.887040][ T5934] sysfs_create_dir_ns+0x24b/0x2b0 [ 205.887054][ T5934] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 205.887066][ T5934] ? find_held_lock+0x2b/0x80 [ 205.887080][ T5934] ? do_raw_spin_unlock+0x172/0x230 [ 205.887100][ T5934] kobject_add_internal+0x2c4/0x9b0 [ 205.887119][ T5934] kobject_add+0x16e/0x240 [ 205.887133][ T5934] ? __pfx_kobject_add+0x10/0x10 [ 205.887148][ T5934] ? do_raw_spin_unlock+0x172/0x230 [ 205.887164][ T5934] ? kobject_put+0xab/0x590 [ 205.887181][ T5934] device_add+0x288/0x1950 [ 205.887192][ T5934] ? __pfx_dev_set_name+0x10/0x10 [ 205.887204][ T5934] ? __pfx_device_add+0x10/0x10 [ 205.887214][ T5934] ? mgmt_send_event_skb+0x2fb/0x460 [ 205.887229][ T5934] hci_conn_add_sysfs+0x17e/0x230 [ 205.887244][ T5934] le_conn_complete_evt+0x1260/0x2150 [ 205.887259][ T5934] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 205.887270][ T5934] ? hci_event_packet+0x459/0x11c0 [ 205.887285][ T5934] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 205.887302][ T5934] ? skb_pull_data+0x166/0x210 [ 205.887314][ T5934] hci_le_meta_evt+0x357/0x5e0 [ 205.887327][ T5934] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 205.887342][ T5934] hci_event_packet+0x685/0x11c0 [ 205.887354][ T5934] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 205.887367][ T5934] ? __pfx_hci_event_packet+0x10/0x10 [ 205.887381][ T5934] ? kcov_remote_start+0x384/0x670 [ 205.887395][ T5934] ? lockdep_hardirqs_on+0x7c/0x110 [ 205.887412][ T5934] hci_rx_work+0x2c9/0xeb0 [ 205.887426][ T5934] process_one_work+0x9ba/0x1b20 [ 205.887447][ T5934] ? __pfx_process_one_work+0x10/0x10 [ 205.887465][ T5934] ? assign_work+0x1a0/0x250 [ 205.887481][ T5934] worker_thread+0x6c8/0xf10 [ 205.887501][ T5934] ? __pfx_worker_thread+0x10/0x10 [ 205.887515][ T5934] kthread+0x3c5/0x780 [ 205.887529][ T5934] ? __pfx_kthread+0x10/0x10 [ 205.887543][ T5934] ? rcu_is_watching+0x12/0xc0 [ 205.887555][ T5934] ? __pfx_kthread+0x10/0x10 [ 205.887569][ T5934] ret_from_fork+0x983/0xb10 [ 205.887581][ T5934] ? __pfx_ret_from_fork+0x10/0x10 [ 205.887593][ T5934] ? __switch_to+0x7af/0x10d0 [ 205.887606][ T5934] ? __pfx_kthread+0x10/0x10 [ 205.887620][ T5934] ret_from_fork_asm+0x1a/0x30 [ 205.887642][ T5934] [ 205.887657][ T5934] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 205.911208][ T9513] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 205.913173][ T5934] Bluetooth: hci3: failed to register connection device [ 205.956813][T14210] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2327'. [ 206.007509][T14206] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.010382][T14206] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.044695][T14206] bridge_slave_0: left allmulticast mode [ 206.046719][T14206] bridge_slave_0: left promiscuous mode [ 206.048725][T14206] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.059035][T14206] bridge_slave_1: left allmulticast mode [ 206.062188][T14206] bridge_slave_1: left promiscuous mode [ 206.064303][T14206] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.072355][T14206] bond0: (slave bond_slave_0): Releasing backup interface [ 206.078502][T14206] bond0: (slave bond_slave_1): Releasing backup interface [ 206.085825][ T9513] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 206.086050][T14206] team0: Port device team_slave_0 removed [ 206.089105][ T9513] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.093836][ T9513] usb 11-1: Product: syz [ 206.095279][ T9513] usb 11-1: Manufacturer: syz [ 206.097070][ T9513] usb 11-1: SerialNumber: syz [ 206.099420][T14206] team0: Port device team_slave_1 removed [ 206.101655][ T5934] Bluetooth: hci3: command tx timeout [ 206.104566][ T9513] usb 11-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 206.109537][T14206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.116501][T14206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.119922][ T9513] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 206.123344][T14206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.127773][T14206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.139154][T14206] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 206.171654][ T5934] Bluetooth: hci4: command tx timeout [ 206.211376][T14218] cgroup: Name too long [ 206.227885][ T40] audit: type=1326 audit(1764797382.585:24079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14217 comm="syz.2.2329" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff49078f7c9 code=0x7ffc0000 [ 206.379096][T14219] fuse: Bad value for 'fd' [ 206.569634][T14239] netlink: 'syz.2.2336': attribute type 2 has an invalid length. [ 206.691753][T14253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2340'. [ 206.873426][T14259] netlink: 'syz.7.2344': attribute type 9 has an invalid length. [ 206.877541][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2344'. [ 206.921745][ T29] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 206.939193][T14261] Cannot find add_set index 0 as target [ 207.081984][ T29] usb 10-1: Using ep0 maxpacket: 32 [ 207.086244][ T29] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 207.089715][ T29] usb 10-1: config 0 has no interface number 0 [ 207.102308][T14269] netlink: 'syz.7.2348': attribute type 3 has an invalid length. [ 207.107049][ T29] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 207.110721][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.111983][T14269] netlink: 'syz.7.2348': attribute type 3 has an invalid length. [ 207.116751][ T29] usb 10-1: Product: syz [ 207.119846][ T29] usb 10-1: Manufacturer: syz [ 207.122194][ T29] usb 10-1: SerialNumber: syz [ 207.131826][ T9513] ath9k_htc 11-1:1.0: ath9k_htc: Target is unresponsive [ 207.134696][ T9513] ath9k_htc: Failed to initialize the device [ 207.137260][ T29] usb 10-1: config 0 descriptor?? [ 207.143196][ T29] smsc95xx v2.0.0 [ 207.145256][ T29] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 207.152373][ T40] kauditd_printk_skb: 291 callbacks suppressed [ 207.152384][ T40] audit: type=1400 audit(1764797383.515:24371): avc: denied { compute_member } for pid=14274 comm="syz.2.2349" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 207.162730][ T29] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22 [ 207.184270][ T9513] usb 11-1: ath9k_htc: USB layer deinitialized [ 207.193501][T14275] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 207.223326][ T40] audit: type=1400 audit(1764797383.585:24372): avc: denied { create } for pid=14280 comm="syz.7.2351" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 207.286097][ T5934] Bluetooth: hci3: connection err: -111 [ 207.530797][T14178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.795427][ T6017] usb 10-1: USB disconnect, device number 28 [ 208.022006][T14307] can: request_module (can-proto-5) failed. [ 208.026360][ T40] audit: type=1400 audit(1764797384.385:24373): avc: denied { setattr } for pid=14306 comm="syz.2.2358" name="NETLINK" dev="sockfs" ino=59989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 208.028591][T14307] IPVS: set_ctl: invalid protocol: 214 10.1.1.1:20001 [ 208.075368][T14311] sctp: [Deprecated]: syz.2.2359 (pid 14311) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.075368][T14311] Use struct sctp_sack_info instead [ 208.159302][T14317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=14317 comm=syz.7.2361 [ 208.170913][T14317] bond0: entered promiscuous mode [ 208.171529][ T5934] Bluetooth: hci3: command tx timeout [ 208.173882][T14317] batadv0: entered promiscuous mode [ 208.177698][T14317] debugfs: 'hsr1' already exists in 'hsr' [ 208.179621][T14317] Cannot create hsr debugfs directory [ 208.184694][T14317] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 208.188872][T14317] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 208.195129][T14317] hsr1: entered promiscuous mode [ 208.198431][T14317] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 208.251303][ T5934] Bluetooth: hci4: command tx timeout [ 208.338464][ T29] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 208.341332][ T29] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 208.343906][ T29] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 208.348401][ T29] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 208.351975][ T29] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 208.362285][ T29] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 208.365004][ T29] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 208.367578][ T29] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 208.370244][ T29] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 208.379064][ T29] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 208.387601][ T29] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz0] on syz0 [ 208.393573][ T40] audit: type=1400 audit(1764797384.755:24374): avc: denied { read } for pid=14319 comm="syz.7.2362" name="usbmon1" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 208.399279][T14332] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2366'. [ 208.416532][ T40] audit: type=1400 audit(1764797384.755:24375): avc: denied { open } for pid=14319 comm="syz.7.2362" path="/dev/usbmon1" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 208.427137][T14333] fido_id[14333]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 208.439637][ T40] audit: type=1400 audit(1764797384.755:24376): avc: denied { ioctl } for pid=14319 comm="syz.7.2362" path="/dev/usbmon1" dev="devtmpfs" ino=738 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 208.469097][T14326] fuse: Bad value for 'fd' [ 208.731276][ C2] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 208.921221][ T9513] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 208.934428][ T40] audit: type=1326 audit(1764797385.295:24377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14352 comm="syz.5.2373" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37f958f7c9 code=0x0 [ 208.936061][ T34] usb 11-1: USB disconnect, device number 24 [ 208.946385][ T40] audit: type=1326 audit(1764797385.305:24378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14352 comm="syz.5.2373" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f958f7c9 code=0x7ffc0000 [ 208.957084][ T40] audit: type=1326 audit(1764797385.305:24379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14352 comm="syz.5.2373" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f958f7c9 code=0x7ffc0000 [ 208.974881][T14357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14357 comm=syz.6.2374 [ 208.985337][ T40] audit: type=1326 audit(1764797385.345:24380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14352 comm="syz.5.2373" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37f958f7c9 code=0x7ffc0000 [ 209.031780][T14365] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2376'. [ 209.071256][ T9513] usb 7-1: Using ep0 maxpacket: 32 [ 209.076676][ T9513] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 209.079819][ T9513] usb 7-1: config 0 has no interface number 0 [ 209.085883][ T9513] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 209.089807][ T9513] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.093707][ T9513] usb 7-1: Product: syz [ 209.095505][ T9513] usb 7-1: Manufacturer: syz [ 209.097552][ T9513] usb 7-1: SerialNumber: syz [ 209.102385][ T9513] usb 7-1: config 0 descriptor?? [ 209.120819][ T9513] smsc95xx v2.0.0 [ 209.123373][T14371] trusted_key: encrypted_key: hex blob is missing [ 209.125975][ T9513] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 209.130590][ T9513] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 209.132098][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2378'. [ 209.147155][T14373] SELinux: truncated policydb string identifier [ 209.149375][T14373] SELinux: failed to load policy [ 209.151479][T14373] SELinux: truncated policydb string identifier [ 209.153663][T14373] SELinux: failed to load policy [ 209.155450][T14373] SELinux: truncated policydb string identifier [ 209.158034][T14373] SELinux: failed to load policy [ 209.160334][T14373] SELinux: truncated policydb string identifier [ 209.162843][T14373] SELinux: failed to load policy [ 209.164815][T14373] SELinux: truncated policydb string identifier [ 209.166973][T14373] SELinux: failed to load policy [ 209.168773][T14373] SELinux: truncated policydb string identifier [ 209.170923][T14373] SELinux: failed to load policy [ 209.173657][T14373] SELinux: truncated policydb string identifier [ 209.175993][T14373] SELinux: failed to load policy [ 209.177786][T14373] SELinux: truncated policydb string identifier [ 209.179934][T14373] SELinux: failed to load policy [ 209.183038][T14373] SELinux: truncated policydb string identifier [ 209.185250][T14373] SELinux: failed to load policy [ 209.187174][T14373] SELinux: truncated policydb string identifier [ 209.189348][T14373] SELinux: failed to load policy [ 209.191497][T14373] SELinux: truncated policydb string identifier [ 209.193833][T14373] SELinux: truncated policydb string identifier [ 209.196061][T14373] SELinux: truncated policydb string identifier [ 209.198442][T14373] SELinux: truncated policydb string identifier [ 209.200694][T14373] SELinux: truncated policydb string identifier [ 209.203956][T14373] SELinux: truncated policydb string identifier [ 209.206225][T14373] SELinux: truncated policydb string identifier [ 209.208572][T14373] SELinux: truncated policydb string identifier [ 209.210835][T14373] SELinux: truncated policydb string identifier [ 209.214463][T14373] SELinux: truncated policydb string identifier [ 209.216738][T14373] SELinux: truncated policydb string identifier [ 209.219221][T14373] SELinux: truncated policydb string identifier [ 209.222023][T14373] SELinux: truncated policydb string identifier [ 209.224500][T14373] SELinux: truncated policydb string identifier [ 209.226824][T14373] SELinux: truncated policydb string identifier [ 209.229279][T14373] SELinux: truncated policydb string identifier [ 209.232346][T14373] SELinux: truncated policydb string identifier [ 209.234883][T14373] SELinux: truncated policydb string identifier [ 209.237197][T14373] SELinux: truncated policydb string identifier [ 209.239702][T14373] SELinux: truncated policydb string identifier [ 209.242351][T14373] SELinux: truncated policydb string identifier [ 209.246807][T14373] SELinux: truncated policydb string identifier [ 209.249166][T14373] SELinux: truncated policydb string identifier [ 209.252030][T14373] SELinux: truncated policydb string identifier [ 209.254752][T14373] SELinux: truncated policydb string identifier [ 209.261676][T14373] SELinux: truncated policydb string identifier [ 209.264817][T14373] SELinux: truncated policydb string identifier [ 209.267778][T14373] SELinux: truncated policydb string identifier [ 209.270177][T14373] SELinux: truncated policydb string identifier [ 209.272677][T14373] SELinux: truncated policydb string identifier [ 209.275019][T14373] SELinux: truncated policydb string identifier [ 209.277251][T14373] SELinux: truncated policydb string identifier [ 209.279637][T14373] SELinux: truncated policydb string identifier [ 209.281947][T14373] SELinux: truncated policydb string identifier [ 209.284241][T14373] SELinux: truncated policydb string identifier [ 209.286522][T14373] SELinux: truncated policydb string identifier [ 209.348242][T14405] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2385'. [ 209.371463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.541201][ T144] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 209.599766][T14421] netlink: 'syz.6.2391': attribute type 9 has an invalid length. [ 209.694959][ T144] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 209.698037][ T144] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.700711][ T144] usb 10-1: Product: syz [ 209.704419][ T144] usb 10-1: Manufacturer: syz [ 209.706370][ T144] usb 10-1: SerialNumber: syz [ 209.714204][ T144] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 209.726380][ T144] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 209.868159][T14428] NILFS (nullb0): couldn't find nilfs on the device [ 209.878787][ T60] usb 7-1: USB disconnect, device number 32 [ 209.898059][T14431] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2394'. [ 209.966516][T14437] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2395'. [ 210.098529][T14445] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 210.251538][ T5934] Bluetooth: hci3: command tx timeout [ 210.331224][ T5934] Bluetooth: hci4: command tx timeout [ 210.399479][T14451] netlink: 'syz.2.2398': attribute type 1 has an invalid length. [ 210.423096][T14451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.437213][T14451] bond1: (slave geneve2): making interface the new active one [ 210.441031][T14451] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 210.718178][T14463] sp0: Synchronizing with TNC [ 210.720833][T14462] [U] [ 210.811465][ T144] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 210.820693][ T144] ath9k_htc: Failed to initialize the device [ 210.845426][ T144] usb 10-1: ath9k_htc: USB layer deinitialized [ 210.887751][T14461] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 210.889500][T14482] program syz.7.2408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.895223][T14483] ntfs3(nullb0): Primary boot signature is not NTFS. [ 210.899599][T14483] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 210.961146][T14492] usb usb8: usbfs: interface 0 claimed by hub while 'syz.7.2411' resets device [ 211.081350][ T9513] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 211.251283][ T9513] usb 7-1: Using ep0 maxpacket: 32 [ 211.254435][ T9513] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 211.261128][ T9513] usb 7-1: config 0 has no interface number 0 [ 211.265436][ T9513] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 211.268492][ T9513] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.271297][ T9513] usb 7-1: Product: syz [ 211.273864][ T9513] usb 7-1: Manufacturer: syz [ 211.275562][ T9513] usb 7-1: SerialNumber: syz [ 211.279810][ T9513] usb 7-1: config 0 descriptor?? [ 211.286658][ T9513] smsc95xx v2.0.0 [ 211.287935][ T9513] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 211.291514][ T9513] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 211.352800][ C3] hrtimer: interrupt took 20121 ns [ 211.882609][T14517] __nla_validate_parse: 4 callbacks suppressed [ 211.882620][T14517] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2418'. [ 211.940537][ T47] usb 7-1: USB disconnect, device number 33 [ 212.232620][T14528] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2423'. [ 212.236846][T14528] netlink: 'syz.6.2423': attribute type 2 has an invalid length. [ 212.261739][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 212.261751][ T40] audit: type=1400 audit(1764797388.625:24397): avc: denied { append } for pid=14530 comm="syz.7.2424" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 212.287378][ T40] audit: type=1400 audit(1764797388.645:24398): avc: denied { bind } for pid=14532 comm="syz.6.2425" lport=34881 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 212.322813][T14538] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2427'. [ 212.482356][T14546] 9pnet_virtio: no channels available for device syz [ 212.486806][ T6016] usb 10-1: USB disconnect, device number 29 [ 212.522991][T14552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2435'. [ 212.527844][T14552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2435'. [ 212.745495][T14569] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2439'. [ 212.885656][T14578] can0: slcan on ttyS3. [ 212.951626][T14578] can0 (unregistered): slcan off ttyS3. [ 213.483583][T14583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2444'. [ 213.535792][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2445'. [ 213.538826][T14586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2445'. [ 213.545306][T14586] geneve3: entered promiscuous mode [ 213.547066][T14586] geneve3: entered allmulticast mode [ 213.710082][T14593] futex_wake_op: syz.2.2448 tries to shift op by 32; fix this program [ 213.730385][T14593] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 213.739730][T14593] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 213.749754][T14598] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2450'. [ 213.776681][T14595] gre1: entered promiscuous mode [ 213.776696][T14595] gre1: entered allmulticast mode [ 213.838978][T14602] netlink: 'syz.6.2452': attribute type 16 has an invalid length. [ 213.838993][T14602] netlink: 'syz.6.2452': attribute type 2 has an invalid length. [ 215.621371][ T29] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 215.729536][T14640] x_tables: ip6_tables: CT target: only valid in raw table, not  [ 215.771996][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 215.775289][ T29] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 215.777852][ T29] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 215.782102][ T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 215.786599][ T29] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.790478][ T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 215.794466][ T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 215.798288][ T29] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 215.803014][ T29] usb 7-1: config 168 interface 0 has no altsetting 0 [ 215.806021][ T29] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 215.808612][ T29] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 215.812612][ T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 215.816411][ T29] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.820261][ T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 215.824175][ T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 215.827913][ T29] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 215.832360][ T29] usb 7-1: config 168 interface 0 has no altsetting 0 [ 215.835380][ T29] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 215.837933][ T29] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 215.841573][ T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 215.845376][ T29] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.849316][ T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 215.853222][ T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 215.857257][ T29] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 215.861666][ T29] usb 7-1: config 168 interface 0 has no altsetting 0 [ 215.866134][ T29] usb 7-1: string descriptor 0 read error: -22 [ 215.868313][ T29] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 215.871408][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.883258][ T29] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 215.971396][ T9513] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 216.082757][ T29] usb 7-1: USB disconnect, device number 34 [ 216.101274][ T9513] usb 12-1: device descriptor read/64, error -71 [ 216.361169][ T9513] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 216.511130][ T9513] usb 12-1: device descriptor read/64, error -71 [ 216.631644][ T9513] usb usb12-port1: attempt power cycle [ 216.695020][T14644] bond2: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 216.696529][T14644] bond2 (unregistering): Released all slaves [ 216.971380][ T9513] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 216.991903][ T9513] usb 12-1: device descriptor read/8, error -71 [ 217.241394][ T9513] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 217.261755][ T9513] usb 12-1: device descriptor read/8, error -71 [ 217.311251][ T6017] usb 11-1: new low-speed USB device number 25 using dummy_hcd [ 217.381948][ T9513] usb usb12-port1: unable to enumerate USB device [ 217.463150][ T6017] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 217.463194][ T6017] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 217.463217][ T6017] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.463239][ T6017] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 217.463260][ T6017] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 217.464089][ T6017] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 217.464122][ T6017] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 217.464165][ T6017] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.464185][ T6017] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 217.464206][ T6017] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 217.465037][ T6017] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 217.465072][ T6017] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 217.465094][ T6017] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.465115][ T6017] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 217.465134][ T6017] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 217.467663][ T6017] usb 11-1: string descriptor 0 read error: -22 [ 217.467767][ T6017] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 217.467787][ T6017] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.478802][ T6017] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 217.700676][ T40] audit: type=1400 audit(1764797394.055:24399): avc: denied { setattr } for pid=14656 comm="syz.2.2469" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 217.736762][ T6074] usb 11-1: USB disconnect, device number 25 [ 218.283111][T14660] __nla_validate_parse: 5 callbacks suppressed [ 218.283126][T14660] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2470'. [ 218.443724][T14662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14662 comm=syz.6.2471 [ 218.485616][ T40] audit: type=1400 audit(1764797394.845:24400): avc: denied { getopt } for pid=14664 comm="syz.6.2472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 218.528520][ T40] audit: type=1400 audit(1764797394.885:24401): avc: denied { shutdown } for pid=14666 comm="syz.6.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 218.579875][T14670] netlink: 'syz.6.2473': attribute type 1 has an invalid length. [ 218.583458][T14670] netlink: 'syz.6.2473': attribute type 2 has an invalid length. [ 218.725105][T14675] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=14675 comm=syz.7.2476 [ 218.779747][T14684] sctp: [Deprecated]: syz.7.2477 (pid 14684) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.779747][T14684] Use struct sctp_sack_info instead [ 218.846418][T14689] netlink: 'syz.2.2479': attribute type 30 has an invalid length. [ 218.893749][T14691] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 218.990094][T14700] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0 [ 218.990344][T14697] IPVS: stopping backup sync thread 14700 ... [ 219.002154][ T40] audit: type=1400 audit(1764797395.365:24402): avc: denied { read } for pid=14696 comm="syz.2.2483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 219.051705][T14704] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 219.060058][ T40] audit: type=1326 audit(1764797395.415:24403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14702 comm="syz.2.2484" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49078f7c9 code=0x7ffc0000 [ 219.062493][T14704] netlink: 'syz.2.2484': attribute type 1 has an invalid length. [ 219.068843][ T40] audit: type=1326 audit(1764797395.415:24404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14702 comm="syz.2.2484" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49078f7c9 code=0x7ffc0000 [ 219.071683][T14704] netlink: 'syz.2.2484': attribute type 2 has an invalid length. [ 219.084439][ T40] audit: type=1326 audit(1764797395.415:24405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14702 comm="syz.2.2484" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff49078f7c9 code=0x7ffc0000 [ 219.094514][ T40] audit: type=1326 audit(1764797395.415:24406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14702 comm="syz.2.2484" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49078f7c9 code=0x7ffc0000 [ 219.104682][ T40] audit: type=1326 audit(1764797395.415:24407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14702 comm="syz.2.2484" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff49078f7c9 code=0x7ffc0000 [ 219.114012][ T40] audit: type=1326 audit(1764797395.415:24408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14702 comm="syz.2.2484" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49078f7c9 code=0x7ffc0000 [ 219.401850][T14719] lo: MTU too low for tipc bearer [ 219.403603][T14719] tipc: Enabling of bearer rejected, failed to enable media [ 219.421277][ T9513] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 219.571614][ T9513] usb 7-1: Using ep0 maxpacket: 32 [ 219.575755][ T9513] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 219.578511][ T9513] usb 7-1: config 0 has no interface number 0 [ 219.582694][ T9513] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 219.585952][ T9513] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.588600][ T9513] usb 7-1: Product: syz [ 219.590000][ T9513] usb 7-1: Manufacturer: syz [ 219.592748][ T9513] usb 7-1: SerialNumber: syz [ 219.601839][ T9513] usb 7-1: config 0 descriptor?? [ 219.606534][ T9513] smsc95xx v2.0.0 [ 219.608193][ T9513] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 219.615371][ T9513] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 219.967101][T14749] delete_channel: no stack [ 220.140803][T14764] program syz.7.2498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.232882][ T144] usb 7-1: USB disconnect, device number 35 [ 220.451274][ T9513] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 220.611164][ T9513] usb 11-1: Using ep0 maxpacket: 8 [ 220.614735][ T9513] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 220.617369][ T9513] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.620490][ T9513] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.624017][ T9513] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.627494][ T9513] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.631926][ T9513] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 220.634904][ T9513] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.805142][T14775] ipt_REJECT: TCP_RESET invalid for non-tcp [ 220.845193][ T9513] usb 11-1: GET_CAPABILITIES returned 0 [ 220.847134][ T9513] usbtmc 11-1:16.0: can't read capabilities syzkaller syzkaller login: [ 221.048796][T14769] program syz.6.2503 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.054100][ T9513] usb 11-1: USB disconnect, device number 26 [ 221.070955][T14783] bond1: Removing last ns target with arp_interval on [ 221.116602][T14787] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.2509'. [ 221.120776][T14787] cgroup: noprefix used incorrectly [ 221.181894][T14791] netlink: 'syz.2.2511': attribute type 10 has an invalid length. [ 221.189051][T14791] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.212681][T14793] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 221.303802][T14800] netlink: 'syz.2.2515': attribute type 1 has an invalid length. [ 221.319238][T14800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.338544][T14800] veth3: entered promiscuous mode [ 221.343111][T14800] bond2: (slave veth3): Enslaving as an active interface with a down link [ 221.350940][T14800] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2515'. [ 221.375194][T14806] vlan3: entered promiscuous mode [ 221.378101][T14806] vlan3: entered allmulticast mode [ 221.380274][T14806] hsr_slave_1: entered allmulticast mode [ 221.383721][T14810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2518'. [ 221.524326][T14813] binder: BINDER_SET_CONTEXT_MGR already set [ 221.526417][T14813] binder: 14812:14813 ioctl 4018620d 200000004a80 returned -16 [ 221.567225][T14815] netlink: 'syz.2.2520': attribute type 4 has an invalid length. [ 221.604010][T14817] pim6reg: entered allmulticast mode [ 221.932068][T14830] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2526'. [ 221.943232][T12117] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.943309][T14830] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2526'. [ 221.947160][T12117] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.959512][T12117] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.966130][T12117] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.007630][T14833] netlink: 'syz.7.2527': attribute type 1 has an invalid length. [ 222.037962][T14833] gretap1: entered promiscuous mode [ 222.044213][T14833] bond2: (slave gretap1): making interface the new active one [ 222.048342][T14833] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 222.060827][T14833] macvlan2: entered promiscuous mode [ 222.063240][T14833] macvlan2: entered allmulticast mode [ 222.066379][T14833] bond2: entered promiscuous mode [ 222.069358][T14833] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 222.077395][T14833] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 222.086767][T14833] bond2: left promiscuous mode [ 222.125733][T14836] autofs4:pid:14836:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 222.211750][ T144] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 222.311284][T14848] kAFS: unable to lookup cell '/,cL' [ 222.364028][ T144] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 222.367482][ T144] usb 7-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 222.370612][ T144] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.375861][ T144] usb 7-1: config 0 descriptor?? [ 222.451332][ T29] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 222.602655][ T29] usb 12-1: Using ep0 maxpacket: 8 [ 222.609741][ T29] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 222.614379][ T29] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.618903][ T29] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.623395][ T29] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.628199][ T29] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.633964][ T29] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 222.638030][ T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.694633][T14859] openvswitch: netlink: nsh attr 0 has unexpected len 24 expected 0 [ 222.703719][T14859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.750910][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 222.750929][ T40] audit: type=1400 audit(1764797399.105:24446): avc: denied { read } for pid=14864 comm="syz.6.2537" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 222.765255][ T40] audit: type=1400 audit(1764797399.105:24447): avc: denied { open } for pid=14864 comm="syz.6.2537" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 222.774690][ T40] audit: type=1400 audit(1764797399.105:24448): avc: denied { ioctl } for pid=14864 comm="syz.6.2537" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 222.783364][ T40] audit: type=1400 audit(1764797399.125:24449): avc: denied { ioctl } for pid=14864 comm="syz.6.2537" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x5508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 222.792036][ T40] audit: type=1400 audit(1764797399.125:24450): avc: denied { write } for pid=14864 comm="syz.6.2537" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 223.005089][ T40] audit: type=1400 audit(1764797399.365:24451): avc: denied { append } for pid=14878 comm="syz.6.2540" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 223.013833][ T40] audit: type=1400 audit(1764797399.365:24452): avc: denied { ioctl } for pid=14878 comm="syz.6.2540" path="/dev/input/event2" dev="devtmpfs" ino=947 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 223.400763][T14882] usbtmc 12-1:16.0: simple usb_control_msg failed -32 [ 223.451027][T14843] F2FS-fs (nbd7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 223.455531][T14843] F2FS-fs (nbd7): Can't find valid F2FS filesystem in 1th superblock [ 223.458962][T14843] F2FS-fs (nbd7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 223.462226][T14843] F2FS-fs (nbd7): Can't find valid F2FS filesystem in 2th superblock [ 223.475290][T14843] omfs: Invalid superblock (0) [ 223.524564][ T9513] usb 12-1: USB disconnect, device number 6 [ 224.091347][ C2] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 224.111231][ T6074] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 224.262376][ T6074] usb 11-1: config index 0 descriptor too short (expected 65162, got 72) [ 224.267223][ T6074] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 224.272996][ T6074] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.276426][ T6074] usb 11-1: Product: syz [ 224.278267][ T6074] usb 11-1: Manufacturer: syz [ 224.280320][ T6074] usb 11-1: SerialNumber: syz [ 224.283155][T14897] openvswitch: netlink: Flow key attr not present in new flow. [ 224.289639][ T6074] usb 11-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 224.308202][ T47] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 224.359092][T14901] xt_hashlimit: max too large, truncated to 1048576 [ 224.586225][ T40] audit: type=1400 audit(1764797400.945:24453): avc: denied { create } for pid=14911 comm="syz.7.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 224.594583][ T40] audit: type=1400 audit(1764797400.945:24454): avc: denied { write } for pid=14911 comm="syz.7.2551" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 224.604797][ T40] audit: type=1400 audit(1764797400.945:24455): avc: denied { open } for pid=14911 comm="syz.7.2551" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 224.659812][ T144] usb 7-1: USB disconnect, device number 36 [ 224.694119][T14917] pimreg3: entered allmulticast mode [ 224.782341][T14925] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.785053][T14925] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.268761][T14936] Cannot find del_set index 4 as target [ 225.371385][ T47] ath9k_htc 11-1:1.0: ath9k_htc: Target is unresponsive [ 225.373895][ T47] ath9k_htc: Failed to initialize the device [ 225.393121][ T47] usb 11-1: ath9k_htc: USB layer deinitialized [ 225.656263][T14938] syzkaller1: entered promiscuous mode [ 225.657968][T14938] syzkaller1: entered allmulticast mode [ 225.678153][ T144] usb 11-1: USB disconnect, device number 27 [ 225.779999][T14941] random: crng reseeded on system resumption [ 225.875424][T14949] program syz.2.2566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.879004][T14953] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2565'. [ 226.036140][T14959] bridge: RTM_NEWNEIGH with invalid ether address [ 226.112274][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2567'. [ 226.611238][ T47] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 226.623341][T14986] syzkaller1: entered promiscuous mode [ 226.625792][T14986] syzkaller1: entered allmulticast mode [ 226.761191][ T47] usb 12-1: Using ep0 maxpacket: 32 [ 226.765006][ T47] usb 12-1: config 0 has an invalid interface number: 67 but max is 0 [ 226.768040][ T47] usb 12-1: config 0 has no interface number 0 [ 226.774120][ T47] usb 12-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 226.778139][ T47] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.788308][ T47] usb 12-1: Product: syz [ 226.790218][ T47] usb 12-1: Manufacturer: syz [ 226.792492][ T47] usb 12-1: SerialNumber: syz [ 226.796900][ T47] usb 12-1: config 0 descriptor?? [ 226.800854][ T47] smsc95xx v2.0.0 [ 226.802265][ T47] smsc95xx 12-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 226.806819][ T47] smsc95xx 12-1:0.67: probe with driver smsc95xx failed with error -22 [ 226.859571][ T6016] hid_parser_main: 73 callbacks suppressed [ 226.859590][ T6016] hid-generic 00A0:0006:0003.000E: unknown main item tag 0x0 [ 226.866837][ T6016] hid-generic 00A0:0006:0003.000E: unknown main item tag 0x0 [ 226.870095][ T6016] hid-generic 00A0:0006:0003.000E: unknown main item tag 0x0 [ 226.875157][ T6016] hid-generic 00A0:0006:0003.000E: unknown main item tag 0x0 [ 226.878089][ T6016] hid-generic 00A0:0006:0003.000E: unknown main item tag 0x0 [ 226.880527][ T6016] hid-generic 00A0:0006:0003.000E: unknown main item tag 0x0 [ 226.883156][ T6016] hid-generic 00A0:0006:0003.000E: unknown main item tag 0x0 [ 226.885595][ T6016] hid-generic 00A0:0006:0003.000E: unknown main item tag 0x0 [ 226.888038][ T6016] hid-generic 00A0:0006:0003.000E: unknown main item tag 0x0 [ 226.890562][ T6016] hid-generic 00A0:0006:0003.000E: unknown main item tag 0x0 [ 226.897509][ T6016] hid-generic 00A0:0006:0003.000E: hidraw1: HID v0.05 Device [syz0] on syz0 [ 226.940460][T14989] fido_id[14989]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 227.005019][T14995] random: crng reseeded on system resumption [ 227.011485][T14995] Unrecognized hibernate image header format! [ 227.014423][T14995] PM: hibernation: Image mismatch: architecture specific data [ 227.119162][T14998] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2581'. [ 227.202196][ T47] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 227.211257][T15008] Bluetooth: MGMT ver 1.23 [ 227.315555][T15013] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2583'. [ 227.315682][T15013] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2583'. [ 227.354785][ T47] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 227.354812][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.354828][ T47] usb 7-1: Product: syz [ 227.354841][ T47] usb 7-1: Manufacturer: syz [ 227.354851][ T47] usb 7-1: SerialNumber: syz [ 227.358990][ T47] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 227.376164][ T6074] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 227.435527][ T144] usb 12-1: USB disconnect, device number 7 [ 227.933862][T15016] netlink: 'syz.7.2584': attribute type 2 has an invalid length. [ 228.000977][T15018] 9pnet_fd: Insufficient options for proto=fd [ 228.098082][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 228.100058][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 228.102350][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 228.103582][ T5946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 228.104326][ T5946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 228.230042][T15019] chnl_net:caif_netlink_parms(): no params data found [ 228.289208][T15019] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.291961][T15019] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.294508][T15019] bridge_slave_0: entered allmulticast mode [ 228.297628][T15019] bridge_slave_0: entered promiscuous mode [ 228.304498][T15019] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.307436][T15019] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.310151][T15019] bridge_slave_1: entered allmulticast mode [ 228.313478][T15019] bridge_slave_1: entered promiscuous mode [ 228.332709][T15019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.338050][T15019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.367837][T15019] team0: Port device team_slave_0 added [ 228.372018][T15019] team0: Port device team_slave_1 added [ 228.411365][ T6074] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 228.416529][ T6074] ath9k_htc: Failed to initialize the device [ 228.434122][T15019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.437187][T15019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.444314][ T6074] usb 7-1: ath9k_htc: USB layer deinitialized [ 228.448433][T15019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.460243][T15019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.463269][T15019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.473701][T15019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.513517][T15019] hsr_slave_0: entered promiscuous mode [ 228.516909][T15019] hsr_slave_1: entered promiscuous mode [ 228.520123][T15019] debugfs: 'hsr0' already exists in 'hsr' [ 228.522551][T15019] Cannot create hsr debugfs directory [ 228.583116][T15035] overlayfs: upper fs does not support file handles, falling back to index=off. [ 228.687253][T15019] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 228.691755][T15019] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 228.696271][T15019] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 228.700570][T15019] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 228.731378][T15019] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.734687][T15019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.738089][T15019] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.741554][T15019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.787281][T15019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.798598][ T8932] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.807985][ T8932] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.808484][T15049] fuse: Bad value for 'rootmode' [ 228.826124][T15051] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 228.827496][T15019] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.836577][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2591'. [ 228.842997][ T8932] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.846149][ T8932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.850764][ T8932] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.854258][ T8932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.894660][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 228.894676][ T40] audit: type=1400 audit(1764797405.255:24477): avc: denied { mounton } for pid=15050 comm="syz.6.2591" path="/proc/1350/cgroup" dev="proc" ino=64192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 228.965560][ T843] IPVS: starting estimator thread 0... [ 229.025927][T15019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.071315][T15064] IPVS: using max 46 ests per chain, 110400 per kthread [ 229.102199][ T6017] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 229.211721][ T5946] Bluetooth: hci4: command 0x0405 tx timeout [ 229.243549][T15076] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 229.249694][T15076] bond7 (unregistering): Released all slaves [ 229.251409][ T6017] usb 12-1: Using ep0 maxpacket: 32 [ 229.255705][ T6017] usb 12-1: config 0 has an invalid interface number: 67 but max is 0 [ 229.258425][ T6017] usb 12-1: config 0 has no interface number 0 [ 229.262197][ T6017] usb 12-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 229.265304][ T6017] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.267910][ T6017] usb 12-1: Product: syz [ 229.269315][ T6017] usb 12-1: Manufacturer: syz [ 229.270874][ T6017] usb 12-1: SerialNumber: syz [ 229.274415][ T6017] usb 12-1: config 0 descriptor?? [ 229.277713][ T6017] smsc95xx v2.0.0 [ 229.278971][ T6017] smsc95xx 12-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 229.283085][ T6017] smsc95xx 12-1:0.67: probe with driver smsc95xx failed with error -22 [ 229.283778][T15019] veth0_vlan: entered promiscuous mode [ 229.288584][ T40] audit: type=1400 audit(1764797405.645:24478): avc: denied { create } for pid=15075 comm="syz.6.2595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.297465][ T40] audit: type=1400 audit(1764797405.645:24479): avc: denied { ioctl } for pid=15075 comm="syz.6.2595" path="socket:[63288]" dev="sockfs" ino=63288 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.309707][T15019] veth1_vlan: entered promiscuous mode [ 229.326989][T15019] veth0_macvtap: entered promiscuous mode [ 229.348446][T15019] veth1_macvtap: entered promiscuous mode [ 229.357615][T15019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.366151][T15019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.373412][ T8935] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.376366][ T8935] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.382398][ T8935] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.385371][ T8935] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.434634][T12117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.437265][T12117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.452285][ T40] audit: type=1400 audit(1764797405.815:24480): avc: denied { read } for pid=15079 comm="syz.6.2596" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 229.457547][ T8931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.462700][ T40] audit: type=1400 audit(1764797405.815:24481): avc: denied { open } for pid=15079 comm="syz.6.2596" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 229.465806][ T8931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.583563][ T40] audit: type=1400 audit(1764797405.945:24482): avc: denied { setopt } for pid=15082 comm="syz.8.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.840782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 229.963365][ T5985] usb 12-1: USB disconnect, device number 8 [ 230.031836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 230.041429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 230.181451][ T5934] Bluetooth: hci1: command tx timeout [ 230.242162][ T6074] usb 7-1: USB disconnect, device number 37 [ 230.315391][T15090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.317208][T15090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.378983][ T40] audit: type=1400 audit(1764797406.735:24483): avc: denied { write } for pid=15099 comm="syz.6.2601" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 230.462065][T15107] Invalid logical block size (-3) [ 230.484400][ T6017] hid-generic 0006:0009:0009.000F: hidraw1: VIRTUAL HID v0.04 Device [syz0] on syz0 [ 230.529488][T15115] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2605'. [ 230.542506][T15115] 0X: renamed from caif0 [ 230.548507][T15115] 0X: entered allmulticast mode [ 230.550840][T15115] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 230.569002][T15114] fido_id[15114]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 230.570734][ T40] audit: type=1400 audit(1764797406.925:24484): avc: denied { call } for pid=15113 comm="syz.7.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 230.650259][ T40] audit: type=1400 audit(1764797407.005:24485): avc: denied { read write } for pid=15121 comm="syz.7.2608" name="video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 230.651482][T15122] SELinux: Context system_u:object_r:crash_device_t:s0 is not valid (left unmapped). [ 230.660529][ T40] audit: type=1400 audit(1764797407.005:24486): avc: denied { open } for pid=15121 comm="syz.7.2608" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 230.750398][T15127] netlink: 'syz.7.2610': attribute type 2 has an invalid length. [ 230.754697][T15127] netlink: 46 bytes leftover after parsing attributes in process `syz.7.2610'. [ 230.771159][ T9513] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 230.925601][ T9513] usb 13-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 230.929774][ T9513] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.933487][ T9513] usb 13-1: Product: syz [ 230.935481][ T9513] usb 13-1: Manufacturer: syz [ 230.937685][ T9513] usb 13-1: SerialNumber: syz [ 230.949659][ T9513] usb 13-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 230.962045][ T843] usb 13-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 231.131563][ T29] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 231.281251][ T29] usb 12-1: Using ep0 maxpacket: 32 [ 231.285549][ T29] usb 12-1: config 0 has an invalid interface number: 67 but max is 0 [ 231.289055][ T29] usb 12-1: config 0 has no interface number 0 [ 231.293875][ T29] usb 12-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 231.297776][ T29] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.301557][ T29] usb 12-1: Product: syz [ 231.303361][ T29] usb 12-1: Manufacturer: syz [ 231.305453][ T29] usb 12-1: SerialNumber: syz [ 231.309686][ T29] usb 12-1: config 0 descriptor?? [ 231.315404][ T29] smsc95xx v2.0.0 [ 231.317127][ T29] smsc95xx 12-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 231.322169][ T29] smsc95xx 12-1:0.67: probe with driver smsc95xx failed with error -22 [ 231.378126][T15133] veth1_macvtap: left promiscuous mode [ 231.380600][T15133] macsec0: entered promiscuous mode [ 231.385406][T15133] macsec0: entered allmulticast mode [ 231.768754][T15149] veth0: entered promiscuous mode [ 231.784373][T15145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2616'. [ 232.013165][ T843] ath9k_htc 13-1:1.0: ath9k_htc: Target is unresponsive [ 232.016211][ T843] ath9k_htc: Failed to initialize the device [ 232.033271][ T29] usb 12-1: USB disconnect, device number 9 [ 232.050146][ T843] usb 13-1: ath9k_htc: USB layer deinitialized [ 232.097027][T15165] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2622'. [ 232.179032][ T9513] usb 13-1: USB disconnect, device number 2 [ 232.252513][ T5934] Bluetooth: hci1: command tx timeout [ 232.428524][T15180] 8021q: VLANs not supported on sit0 [ 232.549053][T15185] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 232.603589][T15189] overlayfs: statfs failed on './file0' [ 232.760349][T15206] overlayfs: failed to resolve './file1': -2 [ 232.761817][T15205] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 233.024475][ T8925] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.027784][ T5934] Bluetooth: hci4: hardware error 0x00 [ 233.027928][ T8925] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.052847][ T6017] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 233.124344][ T8925] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.127763][ T8925] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.205608][ T6017] usb 13-1: config index 0 descriptor too short (expected 23569, got 27) [ 233.209286][ T6017] usb 13-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 233.212969][ T6017] usb 13-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 233.215671][ T6017] usb 13-1: Manufacturer: syz [ 233.232071][ T6017] usb 13-1: config 0 descriptor?? [ 233.240925][ T8925] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.244427][ T8925] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.281207][ T6017] rc_core: IR keymap rc-hauppauge not found [ 233.283441][ T6017] Registered IR keymap rc-empty [ 233.286220][ T6017] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 233.290616][ T6017] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input40 [ 233.358333][T15254] IPv6: NLM_F_REPLACE set, but no existing node found! [ 233.367767][ T5293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.374769][ T5293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.385688][ T5293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.389837][ T5293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.403690][ T5293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.406442][ T8925] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.415166][ T8925] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.456315][ T47] usb 13-1: USB disconnect, device number 3 [ 233.514661][T15258] : entered promiscuous mode [ 233.716836][ T8925] bond2 (unregistering): (slave gretap1): Releasing active interface [ 233.865123][ T8925] bond0 (unregistering): left promiscuous mode [ 233.867604][ T8925] bond0 (unregistering): Released all slaves [ 233.872342][ T8925] bond1 (unregistering): Released all slaves [ 233.878870][ T8925] bond2 (unregistering): Released all slaves [ 233.891597][T15252] chnl_net:caif_netlink_parms(): no params data found [ 233.932646][T15279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2654'. [ 233.977838][T15252] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.982605][T15252] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.985152][T15252] bridge_slave_0: entered allmulticast mode [ 233.988088][T15252] bridge_slave_0: entered promiscuous mode [ 233.992221][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 233.992231][ T40] audit: type=1326 audit(1764797410.355:24504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15278 comm="syz.2.2654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49078f7c9 code=0x7ff00000 [ 234.002618][ T40] audit: type=1326 audit(1764797410.355:24505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15278 comm="syz.2.2654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49078f7c9 code=0x7ff00000 [ 234.010270][ T40] audit: type=1326 audit(1764797410.355:24506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15278 comm="syz.2.2654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49078f7c9 code=0x7ff00000 [ 234.020672][ T40] audit: type=1326 audit(1764797410.355:24507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15278 comm="syz.2.2654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49078f7c9 code=0x7ff00000 [ 234.029807][ T40] audit: type=1326 audit(1764797410.355:24508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15278 comm="syz.2.2654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49078f7c9 code=0x7ff00000 [ 234.038443][ T40] audit: type=1326 audit(1764797410.355:24509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15278 comm="syz.2.2654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49078f7c9 code=0x7ff00000 [ 234.047545][ T40] audit: type=1326 audit(1764797410.355:24510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15278 comm="syz.2.2654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49078f7c9 code=0x7ff00000 [ 234.056658][T15252] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.056707][T15252] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.056837][T15252] bridge_slave_1: entered allmulticast mode [ 234.059676][ T40] audit: type=1326 audit(1764797410.355:24511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15278 comm="syz.2.2654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49078f7c9 code=0x7ff00000 [ 234.064635][T15252] bridge_slave_1: entered promiscuous mode [ 234.072456][ T40] audit: type=1326 audit(1764797410.355:24512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15278 comm="syz.2.2654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49078f7c9 code=0x7ff00000 [ 234.082121][ T40] audit: type=1326 audit(1764797410.355:24513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15278 comm="syz.2.2654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49078f7c9 code=0x7ff00000 [ 234.088365][T15252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.100226][T15252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.146237][T15252] team0: Port device team_slave_0 added [ 234.149679][T15252] team0: Port device team_slave_1 added [ 234.178313][T15252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.180781][T15252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.189784][T15252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.207758][ T8925] batadv0: left promiscuous mode [ 234.214329][ T8925] hsr_slave_0: left promiscuous mode [ 234.223206][ T8925] veth1_macvtap: left promiscuous mode [ 234.225138][ T8925] veth0_macvtap: left promiscuous mode [ 234.227086][ T8925] veth1_vlan: left promiscuous mode [ 234.229155][ T8925] veth0_vlan: left promiscuous mode [ 234.331559][ T5946] Bluetooth: hci1: command tx timeout [ 235.061304][T15252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.063638][T15252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.081123][T15252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.093825][T15300] pimreg: tun_chr_ioctl cmd 1074025677 [ 235.095739][T15300] pimreg: linktype set to 825 [ 235.132346][ T5934] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 235.143655][T15252] hsr_slave_0: entered promiscuous mode [ 235.146462][T15252] hsr_slave_1: entered promiscuous mode [ 235.342573][T15252] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 235.353704][T15252] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 235.358819][T15252] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 235.369554][T15252] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 235.435449][T15252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.454070][T15252] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.454391][ T5934] Bluetooth: hci2: command tx timeout [ 235.462531][ T8929] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.465478][ T8929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.479522][ T8929] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.482610][ T8929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.676530][T15252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.696948][T15360] netlink: 'syz.6.2666': attribute type 1 has an invalid length. [ 235.708059][T15360] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 235.789333][T15370] overlayfs: empty lowerdir [ 235.796907][T15372] overlayfs: empty lowerdir [ 235.847355][T15252] veth0_vlan: entered promiscuous mode [ 235.859846][T15252] veth1_vlan: entered promiscuous mode [ 235.896856][T15252] veth0_macvtap: entered promiscuous mode [ 235.910144][T15252] veth1_macvtap: entered promiscuous mode [ 235.913539][T15382] netlink: 'syz.8.2671': attribute type 5 has an invalid length. [ 235.919726][T15379] fuseblk: Bad value for 'fd' [ 235.923457][T15252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.929829][T15252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.936221][ T8935] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.957834][ T8935] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.970025][ T8935] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.977197][ T8935] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.056389][ T8929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.058867][ T8929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.099701][ T8935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.105404][ T8935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.193317][T15402] netlink: 'syz.9.2645': attribute type 1 has an invalid length. [ 236.213992][T15402] erspan1: entered allmulticast mode [ 236.421331][ T5934] Bluetooth: hci1: command tx timeout [ 236.851135][ T47] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 236.987613][T15447] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2689'. [ 236.995735][T15447] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15447 comm=syz.8.2689 [ 237.008187][T15447] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2689'. [ 237.018577][T15447] bridge0: entered promiscuous mode [ 237.021010][T15447] macsec1: entered allmulticast mode [ 237.023552][T15447] bridge0: entered allmulticast mode [ 237.027374][T15447] bridge0: port 3(macsec1) entered blocking state [ 237.030263][T15447] bridge0: port 3(macsec1) entered disabled state [ 237.031128][ T47] usb 14-1: Using ep0 maxpacket: 32 [ 237.037715][T15447] bridge0: left allmulticast mode [ 237.038216][ T47] usb 14-1: config 0 has an invalid interface number: 67 but max is 0 [ 237.040048][T15447] bridge0: left promiscuous mode [ 237.042818][ T47] usb 14-1: config 0 has no interface number 0 [ 237.049113][ T47] usb 14-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 237.052341][ T47] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.054982][ T47] usb 14-1: Product: syz [ 237.056389][ T47] usb 14-1: Manufacturer: syz [ 237.057932][ T47] usb 14-1: SerialNumber: syz [ 237.060806][ T47] usb 14-1: config 0 descriptor?? [ 237.065107][ T47] smsc95xx v2.0.0 [ 237.066459][ T47] smsc95xx 14-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 237.070605][ T47] smsc95xx 14-1:0.67: probe with driver smsc95xx failed with error -22 [ 237.531699][ T5934] Bluetooth: hci2: command tx timeout [ 237.944216][ T54] usb 14-1: USB disconnect, device number 2 [ 237.973630][T15488] infiniband syz0: set active [ 237.976884][T15488] infiniband syz0: added bond0 [ 238.010193][T15497] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 238.020777][T15499] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio0-cursor) [ 238.046931][T15488] RDS/IB: syz0: added [ 238.049487][T15488] smc: adding ib device syz0 with port count 1 [ 238.053712][T15488] smc: ib device syz0 port 1 has no pnetid [ 238.067792][T15504] syz.6.2705 (15504): drop_caches: 0 [ 238.169423][T15516] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2709'. [ 238.177316][T15516] geneve2: entered promiscuous mode [ 238.179093][T15516] geneve2: entered allmulticast mode [ 238.187598][ T8925] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 238.190527][ T8925] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 238.193738][T15516] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2709'. [ 238.197467][T15519] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2709'. [ 238.200562][ T8925] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 238.204092][ T8925] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 238.322374][T15532] qrtr: Invalid version 0 [ 238.487911][T15542] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2718'. [ 238.518782][T15545] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2719'. [ 238.732908][ C0] vcan0: j1939_tp_rxtimer: 0xffff888039170800: rx timeout, send abort [ 239.233045][ C0] vcan0: j1939_tp_rxtimer: 0xffff888039170c00: rx timeout, send abort [ 239.237147][ C0] vcan0: j1939_tp_rxtimer: 0xffff888039170800: abort rx timeout. Force session deactivation [ 239.341243][ T7693] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 239.416761][T15575] netlink: 'syz.6.2730': attribute type 10 has an invalid length. [ 239.420163][T15575] netlink: 55 bytes leftover after parsing attributes in process `syz.6.2730'. [ 239.501447][ T7693] usb 14-1: Using ep0 maxpacket: 32 [ 239.506053][ T7693] usb 14-1: config 0 has an invalid interface number: 67 but max is 0 [ 239.510122][ T7693] usb 14-1: config 0 has no interface number 0 [ 239.526994][ T7693] usb 14-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 239.531013][ T7693] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.538369][ T7693] usb 14-1: Product: syz [ 239.540325][ T7693] usb 14-1: Manufacturer: syz [ 239.543873][ T7693] usb 14-1: SerialNumber: syz [ 239.548373][ T7693] usb 14-1: config 0 descriptor?? [ 239.554375][ T7693] smsc95xx v2.0.0 [ 239.556093][ T7693] smsc95xx 14-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 239.563903][ T7693] smsc95xx 14-1:0.67: probe with driver smsc95xx failed with error -22 [ 239.619113][ T5934] Bluetooth: hci2: command tx timeout [ 239.714977][ T40] kauditd_printk_skb: 27485 callbacks suppressed [ 239.714993][ T40] audit: type=1400 audit(1764797416.075:51999): avc: denied { create } for pid=15587 comm="syz.6.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 239.725585][T15588] random: crng reseeded on system resumption [ 239.735727][ T40] audit: type=1400 audit(1764797416.085:52000): avc: denied { ioctl } for pid=15587 comm="syz.6.2733" path="socket:[68812]" dev="sockfs" ino=68812 ioctlcmd=0x5462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 239.736594][ C0] vcan0: j1939_tp_rxtimer: 0xffff888039170c00: abort rx timeout. Force session deactivation [ 239.828735][T15573] netlink: 1260 bytes leftover after parsing attributes in process `syz.8.2729'. [ 239.832781][ C1] vcan0: j1939_session_tx_dat: 0xffff888058cda400: queue data error: -100 [ 239.836032][ C1] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 239.838505][ C1] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 239.841012][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.843626][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.846218][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.848754][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.851380][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.853939][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.856538][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.859080][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.860133][T15597] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.2735'. [ 239.861756][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.861768][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.861798][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.861806][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.861835][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.865528][T15597] openvswitch: netlink: Message has 6 unknown bytes. [ 239.867545][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.867588][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.885390][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.887973][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.890500][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.893216][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.895766][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.898355][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.900907][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.903551][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.906135][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.908744][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.911365][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.913973][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.916516][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.919080][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.921726][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.924298][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.926818][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.929388][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.932041][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.934636][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.937179][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.939702][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.942283][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.944815][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.947333][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.949834][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.952427][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.954964][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.957500][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.960051][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.962709][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.965279][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.967750][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.970258][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.972864][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.975440][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.978002][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.980571][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.983214][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.985840][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.988404][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.990988][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.993693][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 239.996296][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 239.998848][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.001570][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.004141][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.006738][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.009280][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.011870][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.014396][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.016909][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.019430][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.022065][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.024656][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.027178][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.029658][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.032290][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.034823][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.037415][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.039976][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.042622][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.045147][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.047731][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.050214][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.052858][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.055343][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.057833][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.060305][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.062951][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.065522][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.068287][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.070962][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.073792][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.076356][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.078865][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.081537][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.084220][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.086772][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.089523][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.092226][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.095349][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.097920][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.100535][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.103205][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.105803][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.108344][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.110895][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.113549][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.116151][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.118702][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.121340][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.124085][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.126710][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.129265][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.131990][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.134544][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.137456][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.140020][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.142737][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 240.145275][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 240.221907][ T944] usb 14-1: USB disconnect, device number 3 [ 240.621630][T15625] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 240.624532][T15625] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 240.627909][T15625] vhci_hcd vhci_hcd.0: Device attached [ 240.630999][T15627] vhci_hcd: connection closed [ 240.633397][ T8925] vhci_hcd: stop threads [ 240.636525][ T8925] vhci_hcd: release socket [ 240.638058][ T8925] vhci_hcd: disconnect device [ 240.890284][T15635] team0: Device gtp0 is up. Set it down before adding it as a team port [ 241.006493][T15637] netlink: 'syz.9.2746': attribute type 32 has an invalid length. [ 241.197577][ T40] audit: type=1400 audit(1764797417.555:52001): avc: denied { bind } for pid=15648 comm="syz.8.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 241.643077][T15679] fuse: Bad value for 'fd' [ 241.649236][T15682] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 241.653166][T15681] block nbd2: not configured, cannot reconfigure [ 241.656040][T15682] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 241.659167][T15682] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 241.664650][T15682] UDF-fs: Scanning with blocksize 512 failed [ 241.669318][T15682] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 241.673217][T15682] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 241.678365][T15682] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 241.680944][T15682] UDF-fs: Scanning with blocksize 1024 failed [ 241.683469][T15682] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 241.686645][T15682] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 241.689829][T15682] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 241.692730][T15682] UDF-fs: Scanning with blocksize 2048 failed [ 241.695051][T15682] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 241.698225][T15682] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 241.701571][ T5934] Bluetooth: hci2: command tx timeout [ 241.702856][T15682] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 241.706086][T15682] UDF-fs: Scanning with blocksize 4096 failed [ 241.708233][T15682] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 241.772919][ T40] audit: type=1400 audit(1764797418.135:52002): avc: denied { lock } for pid=15688 comm="syz.2.2760" path="socket:[67929]" dev="sockfs" ino=67929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 241.833569][T15692] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 241.891130][ T6880] usb 14-1: new full-speed USB device number 4 using dummy_hcd [ 242.053172][ T6880] usb 14-1: unable to get BOS descriptor or descriptor too short [ 242.056904][ T6880] usb 14-1: not running at top speed; connect to a high speed hub [ 242.060910][ T6880] usb 14-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.066538][ T6880] usb 14-1: config 1 interface 0 has no altsetting 0 [ 242.071727][ T6880] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.075666][ T6880] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.079139][ T6880] usb 14-1: Product: syz [ 242.080897][ T6880] usb 14-1: Manufacturer: syz [ 242.083720][ T6880] usb 14-1: SerialNumber: syz [ 242.220462][T15719] netlink: 'syz.2.2770': attribute type 21 has an invalid length. [ 242.224000][T15719] __nla_validate_parse: 4 callbacks suppressed [ 242.224017][T15719] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2770'. [ 242.303381][ T6880] cdc_ether 14-1:1.0: probe with driver cdc_ether failed with error -71 [ 242.323417][ T6880] usb 14-1: USB disconnect, device number 4 [ 242.326286][T15729] nftables ruleset with unbound chain [ 242.703013][ T60] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 242.882885][ T40] audit: type=1400 audit(1764797419.245:52003): avc: denied { read write } for pid=15748 comm="syz.9.2778" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 242.883262][ T40] audit: type=1400 audit(1764797419.245:52004): avc: denied { open } for pid=15748 comm="syz.9.2778" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 242.958318][T15755] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.960768][T15755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.030308][T15758] bond7 (unregistering): Released all slaves [ 243.092449][ T40] audit: type=1400 audit(1764797419.445:52005): avc: denied { watch_mount } for pid=15752 comm="syz.6.2779" path="/517" dev="tmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 243.116722][T15738] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2776'. [ 243.125291][ T60] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 243.127950][ T60] usb 7-1: can't read configurations, error -71 [ 243.202586][T15768] netlink: 128 bytes leftover after parsing attributes in process `syz.9.2783'. [ 243.310736][ T40] audit: type=1400 audit(1764797419.665:52006): avc: denied { shutdown } for pid=15767 comm="syz.9.2783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 243.605249][T15777] JFS: discard option not supported on device [ 243.610590][T15777] Mount JFS Failure: -5 [ 243.641621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 244.088364][T15797] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.2793' sets config #1 [ 244.146868][ T40] audit: type=1400 audit(1764797420.505:52007): avc: denied { ioctl } for pid=15801 comm="syz.2.2795" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 244.161505][ T7693] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 244.192080][T15804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2796'. [ 244.212745][T15804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2796'. [ 244.314745][ T7693] usb 13-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 244.317893][ T7693] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.320802][ T7693] usb 13-1: Product: syz [ 244.322828][ T7693] usb 13-1: Manufacturer: syz [ 244.324493][ T7693] usb 13-1: SerialNumber: syz [ 244.329807][ T7693] usb 13-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 244.348931][ T6880] usb 13-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 244.350744][T15810] random: crng reseeded on system resumption [ 244.636016][T15830] 9pnet_fd: Insufficient options for proto=fd [ 244.639281][T15830] 9pnet_fd: Insufficient options for proto=fd [ 244.673383][T15834] overlayfs: failed to resolve './file0': -2 [ 244.677754][ T40] audit: type=1400 audit(1764797421.035:52008): avc: denied { create } for pid=15833 comm="syz.6.2805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 244.690142][T15834] Failed to get privilege flags for destination (handle=0x2:0x2) [ 244.844628][T15852] netlink: 'syz.2.2811': attribute type 1 has an invalid length. [ 244.911427][T15853] gretap1: entered promiscuous mode [ 245.045274][ T40] audit: type=1400 audit(1764797421.405:52009): avc: denied { accept } for pid=15863 comm="syz.2.2814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 245.086844][T15870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=15870 comm=syz.9.2815 [ 245.177511][T15883] netlink: 'syz.2.2819': attribute type 142 has an invalid length. [ 245.187292][ T40] audit: type=1400 audit(1764797421.545:52010): avc: denied { create } for pid=15886 comm="syz.9.2820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 245.188296][T15888] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2820'. [ 245.227844][T15892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2822'. [ 245.295711][T15892] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2822'. [ 245.324254][T15892] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 245.328539][T15892] sel_write_load: 36 callbacks suppressed [ 245.328585][T15892] SELinux: failed to load policy [ 245.375466][ T40] audit: type=1400 audit(1764797421.735:52011): avc: denied { name_bind } for pid=15909 comm="syz.6.2826" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 245.382758][ T6880] ath9k_htc 13-1:1.0: ath9k_htc: Target is unresponsive [ 245.385196][ T6880] ath9k_htc: Failed to initialize the device [ 245.398674][T15916] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 245.407851][T15896] /dev/sr0: Can't open blockdev [ 245.411134][T15903] gfs2: gfs2 mount does not exist [ 245.418259][ T6880] usb 13-1: ath9k_htc: USB layer deinitialized [ 245.421253][T15916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2827'. [ 245.508968][T15934] netlink: 'syz.6.2834': attribute type 1 has an invalid length. [ 245.514919][T15935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15935 comm=syz.6.2834 [ 245.522499][T15934] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 245.555782][ T40] audit: type=1400 audit(1764797421.915:52012): avc: denied { setattr } for pid=15941 comm="syz.9.2835" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 245.569160][T15943] syzkaller0: entered promiscuous mode [ 245.572111][T15943] syzkaller0: entered allmulticast mode [ 245.606301][T15942] netlink: 'syz.6.2836': attribute type 10 has an invalid length. [ 245.713814][T15953] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2836'. [ 245.781334][ T6223] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 245.781849][T15955] netlink: 'syz.9.2837': attribute type 21 has an invalid length. [ 245.941254][ T6223] usb 7-1: Using ep0 maxpacket: 8 [ 245.944746][ T6223] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 245.949544][ T6223] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 245.954162][ T6223] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.958338][ T6223] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.963575][ T6223] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.967202][ T6223] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.073616][T15964] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.169071][T15964] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.174434][ T6223] usb 7-1: usb_control_msg returned -32 [ 246.176266][ T6223] usbtmc 7-1:16.0: can't read capabilities [ 246.300907][ T944] usb 7-1: USB disconnect, device number 40 [ 246.320892][T15964] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.408427][T15964] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.418317][T15971] binder: BINDER_SET_CONTEXT_MGR already set [ 246.420766][T15971] binder: 15970:15971 ioctl 4018620d 200000000100 returned -16 [ 246.427031][T15971] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 246.545673][T15979] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.575812][ T8930] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.583177][T15982] trusted_key: encrypted_key: master key parameter is missing [ 246.585712][ T40] audit: type=1400 audit(1764797422.945:52013): avc: denied { read } for pid=15977 comm="syz.6.2842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 246.591785][ T8930] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.605940][ T7804] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.611222][T15979] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.623954][ T8925] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.651982][T15983] loop4: detected capacity change from 0 to 524288000 [ 246.704772][T15979] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.785252][T15979] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.862089][ T7801] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.873247][ T8925] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.885560][ T7801] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.895857][ T8925] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.936773][ T144] usb 13-1: USB disconnect, device number 4 [ 246.974653][T15993] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 246.977180][T15993] overlayfs: failed to set xattr on upper [ 246.979545][T15993] overlayfs: ...falling back to redirect_dir=nofollow. [ 246.982686][T15993] overlayfs: ...falling back to index=off. [ 246.985220][T15993] overlayfs: ...falling back to uuid=null. [ 246.998739][T15993] xt_l2tp: missing protocol rule (udp|l2tpip) [ 247.144700][ T40] audit: type=1400 audit(1764797423.485:52014): avc: granted { setsecparam } for pid=16003 comm="syz.8.2852" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 247.178415][T16007] netlink: 'syz.8.2853': attribute type 10 has an invalid length. [ 247.178432][T16008] netlink: 'syz.8.2853': attribute type 10 has an invalid length. [ 247.186788][T16007] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 247.190578][T16007] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 247.206588][T16007] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 247.208929][T16008] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 247.212909][T16008] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 247.217232][T16008] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 247.333571][T16026] __nla_validate_parse: 1 callbacks suppressed [ 247.333583][T16026] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2856'. [ 247.418960][T15982] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 247.421383][T15982] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 247.430282][ T5934] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 247.430624][T15982] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 247.448835][T15982] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 247.451017][T15982] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 247.459185][T15982] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 247.535430][ T40] audit: type=1400 audit(1764797423.895:52015): avc: denied { execute } for pid=16042 comm="syz.9.2860" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=68443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 247.596570][T16044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.599667][T16044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.779803][T16069] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 247.787474][T16069] loop2: detected capacity change from 0 to 7 [ 247.792803][T13201] Dev loop2: unable to read RDB block 7 [ 247.794713][T13201] loop2: AHDI p1 p2 p3 [ 247.796113][T13201] loop2: partition table partially beyond EOD, truncated [ 247.798762][T13201] loop2: p1 start 1601398130 is beyond EOD, truncated [ 247.801314][T13201] loop2: p2 start 1702059890 is beyond EOD, truncated [ 247.804790][T16069] Dev loop2: unable to read RDB block 7 [ 247.807351][T16069] loop2: AHDI p1 p2 p3 [ 247.809313][T16069] loop2: partition table partially beyond EOD, truncated [ 247.813312][T16069] loop2: p1 start 1601398130 is beyond EOD, truncated [ 247.816279][T16069] loop2: p2 start 1702059890 is beyond EOD, truncated [ 247.831681][ T60] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 247.921178][ T6223] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 247.961230][ T60] usb 14-1: device descriptor read/64, error -71 [ 248.011282][T16072] JFS: discard option not supported on device [ 248.014664][T16072] Mount JFS Failure: -5 [ 248.071211][ T6223] usb 13-1: Using ep0 maxpacket: 32 [ 248.075757][ T6223] usb 13-1: config 0 has an invalid interface number: 67 but max is 0 [ 248.083511][ T6223] usb 13-1: config 0 has no interface number 0 [ 248.087375][ T6223] usb 13-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 248.090561][ T6223] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.096093][ T6223] usb 13-1: Product: syz [ 248.097533][ T6223] usb 13-1: Manufacturer: syz [ 248.099095][ T6223] usb 13-1: SerialNumber: syz [ 248.103413][ T6223] usb 13-1: config 0 descriptor?? [ 248.106729][ T6223] smsc95xx v2.0.0 [ 248.107990][ T6223] smsc95xx 13-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 248.111714][ T6223] smsc95xx 13-1:0.67: probe with driver smsc95xx failed with error -22 [ 248.195599][T16081] usb usb8: usbfs: process 16081 (syz.2.2868) did not claim interface 0 before use [ 248.199619][T16081] usb usb8: usbfs: process 16081 (syz.2.2868) did not claim interface 0 before use [ 248.211547][ T60] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 248.269731][T16081] lo speed is unknown, defaulting to 1000 [ 248.274030][T16081] lo speed is unknown, defaulting to 1000 [ 248.277735][T16081] lo speed is unknown, defaulting to 1000 [ 248.284996][T16081] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 248.297771][T16081] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 248.324324][T16081] lo speed is unknown, defaulting to 1000 [ 248.327646][T16081] lo speed is unknown, defaulting to 1000 [ 248.331029][T16081] lo speed is unknown, defaulting to 1000 [ 248.334576][T16081] lo speed is unknown, defaulting to 1000 [ 248.337364][T16081] lo speed is unknown, defaulting to 1000 [ 248.340353][T16081] lo speed is unknown, defaulting to 1000 [ 248.343610][T16081] lo speed is unknown, defaulting to 1000 [ 248.351735][ T60] usb 14-1: device descriptor read/64, error -71 [ 248.396055][T16090] bridge2: entered promiscuous mode [ 248.398278][T16090] bridge2: entered allmulticast mode [ 248.405891][T16090] team0: Port device bridge2 added [ 248.471437][ T60] usb usb14-port1: attempt power cycle [ 248.685172][ T9513] usb 13-1: USB disconnect, device number 5 [ 248.813012][ T60] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 248.842323][ T60] usb 14-1: device descriptor read/8, error -71 [ 249.081226][ T60] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 249.097282][T16093] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 249.104126][T16093] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 249.110832][T16093] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 249.114786][ T60] usb 14-1: device descriptor read/8, error -71 [ 249.219759][ T40] audit: type=1400 audit(1764797425.575:52016): avc: denied { read } for pid=16098 comm="syz.8.2872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 249.229085][ T60] usb usb14-port1: unable to enumerate USB device [ 249.294502][ T40] audit: type=1400 audit(1764797425.655:52017): avc: denied { write } for pid=16098 comm="syz.8.2872" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 249.451246][ T5934] Bluetooth: hci2: command 0x0c1a tx timeout [ 249.451723][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 250.313441][T16113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.317694][T16113] batadv_slave_0: entered promiscuous mode [ 250.322310][T16113] batadv_slave_0: entered allmulticast mode [ 250.335045][T16113] tipc: Started in network mode [ 250.337560][T16113] tipc: Node identity 4, cluster identity 4711 [ 250.340175][T16113] tipc: Node number set to 4 [ 250.370100][ T40] audit: type=1400 audit(1764797426.725:52018): avc: denied { read } for pid=16121 comm="syz.8.2879" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 250.382316][ T40] audit: type=1400 audit(1764797426.725:52019): avc: denied { open } for pid=16121 comm="syz.8.2879" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 250.750748][ T40] audit: type=1400 audit(1764797427.105:52020): avc: denied { ioctl } for pid=16134 comm="syz.9.2882" path="/42/file0/cpuset.effective_cpus" dev="9p" ino=71827935 ioctlcmd=0x64b6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 250.971553][ T60] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 250.976723][T16145] lo speed is unknown, defaulting to 1000 [ 251.112529][T16146] lo speed is unknown, defaulting to 1000 [ 251.123961][ T60] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 251.126916][ T60] usb 7-1: config 1 has no interface number 0 [ 251.129275][ T60] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1023 [ 251.135657][ T60] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 251.142042][ T60] usb 7-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 251.149112][ T60] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 251.159078][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.163147][ T60] usb 7-1: Product: syz [ 251.165024][ T60] usb 7-1: Manufacturer: syz [ 251.166705][ T60] usb 7-1: SerialNumber: syz [ 251.174142][T16141] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 251.177188][T16141] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 251.181771][ T60] usb 7-1: Expected 3 endpoints, found: 2 [ 251.502569][ T60] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 251.531417][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout [ 251.541461][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 251.651275][ T60] usb 13-1: Using ep0 maxpacket: 32 [ 251.656000][ T60] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.660496][ T60] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.664485][ T60] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 251.668623][ T60] usb 13-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 251.671960][ T60] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.679692][ T60] usb 13-1: config 0 descriptor?? [ 251.736189][T16165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.742025][T16165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.767330][ T6880] usb 7-1: USB disconnect, device number 41 [ 251.809019][T16170] nbd: must specify at least one socket [ 251.826122][T16170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2890'. [ 251.938657][T16177] 9pnet_fd: p9_fd_create_tcp (16177): problem connecting socket to 127.0.0.1 [ 251.945168][T16177] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2892'. [ 252.093330][ T60] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:0458:5011.0010/input/input43 [ 252.172443][ T60] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:0458:5011.0010/input/input44 [ 252.216738][ T60] kye 0003:0458:5011.0010: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.8-1/input0 [ 252.365594][T16190] bpf: Bad value for 'gid' [ 252.769509][T16201] veth1_macvtap: left promiscuous mode [ 252.772967][T16201] macsec0: entered promiscuous mode [ 252.777012][T16201] macsec0: entered allmulticast mode [ 252.787311][T16201] veth1_macvtap: entered promiscuous mode [ 252.789835][T16201] veth1_macvtap: entered allmulticast mode [ 252.793063][T16201] macsec0: left promiscuous mode [ 252.795395][T16201] macsec0: left allmulticast mode [ 252.797630][T16201] veth1_macvtap: left allmulticast mode [ 252.859630][T16205] netlink: 'syz.2.2901': attribute type 13 has an invalid length. [ 252.860735][T16206] netlink: 'syz.2.2901': attribute type 13 has an invalid length. [ 252.964389][ T29] lo speed is unknown, defaulting to 1000 [ 253.107546][ C2] kye 0003:0458:5011.0010: usb_submit_urb(ctrl) failed: -1 [ 253.114752][ T24] usb 13-1: USB disconnect, device number 6 [ 253.199621][ T40] audit: type=1800 audit(1764797429.555:52021): pid=16213 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2903" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 253.342459][T16225] netlink: 'syz.2.2906': attribute type 9 has an invalid length. [ 253.512232][T16236] bridge: RTM_NEWNEIGH with invalid ether address [ 253.611176][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout [ 253.781038][T16242] loop5: detected capacity change from 0 to 7 [ 253.781167][ T6880] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 253.804476][T13201] Dev loop5: unable to read RDB block 7 [ 253.806417][T13201] loop5: unable to read partition table [ 253.808428][T13201] loop5: partition table beyond EOD, truncated [ 253.822079][T16242] Dev loop5: unable to read RDB block 7 [ 253.824479][T16242] loop5: unable to read partition table [ 253.826944][T16242] loop5: partition table beyond EOD, truncated [ 253.829541][T16242] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 253.941154][ T6880] usb 14-1: Using ep0 maxpacket: 32 [ 253.944907][ T6880] usb 14-1: config 0 has an invalid interface number: 67 but max is 0 [ 253.948041][ T6880] usb 14-1: config 0 has no interface number 0 [ 253.953030][ T6880] usb 14-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 253.956359][ T6880] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.959373][ T6880] usb 14-1: Product: syz [ 253.971340][ T6880] usb 14-1: Manufacturer: syz [ 253.973392][ T6880] usb 14-1: SerialNumber: syz [ 253.979454][ T6880] usb 14-1: config 0 descriptor?? [ 253.983097][ T6880] smsc95xx v2.0.0 [ 253.984932][ T6880] smsc95xx 14-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 253.988615][ T6880] smsc95xx 14-1:0.67: probe with driver smsc95xx failed with error -22 [ 254.171972][ C2] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 254.598098][ T40] audit: type=1400 audit(1764797430.955:52022): avc: denied { read } for pid=16270 comm="syz.8.2918" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 254.608837][ T40] audit: type=1400 audit(1764797430.955:52023): avc: denied { open } for pid=16270 comm="syz.8.2918" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 254.619737][ T40] audit: type=1400 audit(1764797430.955:52024): avc: denied { ioctl } for pid=16270 comm="syz.8.2918" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 254.754667][ T6880] usb 14-1: USB disconnect, device number 9 [ 254.893639][T16279] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2920'. [ 254.897570][T16279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'. [ 254.964359][T16282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.004582][ T40] audit: type=1400 audit(1764797431.365:52025): avc: denied { create } for pid=16285 comm="syz.8.2922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 255.013510][ T40] audit: type=1400 audit(1764797431.365:52026): avc: denied { connect } for pid=16285 comm="syz.8.2922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 255.603588][T16302] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2926'. [ 255.700791][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2927'. [ 255.822634][T16311] misc userio: Invalid payload size [ 255.852680][T16320] batadv_slave_1: entered promiscuous mode [ 255.856481][T16320] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2932'. [ 255.860734][T16319] batadv_slave_1: left promiscuous mode [ 255.869111][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2931'. [ 255.900549][T12124] [ 255.901619][T12124] ============================================ [ 255.904215][T12124] WARNING: possible recursive locking detected [ 255.906764][T12124] syzkaller #0 Not tainted [ 255.908972][T12124] -------------------------------------------- [ 255.911706][T12124] kworker/u32:39/12124 is trying to acquire lock: [ 255.914511][T12124] ffffe8fefc5927a8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x7d7/0xda0 [ 255.918291][T12124] [ 255.918291][T12124] but task is already holding lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 255.920727][T12124] ffffe8fefc79dc58 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x6b0/0xda0 [ 255.923934][T12124] [ 255.923934][T12124] other info that might help us debug this: [ 255.927419][T12124] Possible unsafe locking scenario: [ 255.927419][T12124] [ 255.930623][T12124] CPU0 [ 255.932132][T12124] ---- [ 255.933626][T12124] lock(&pd_list->lock); [ 255.935537][T12124] lock(&pd_list->lock); [ 255.937463][T12124] [ 255.937463][T12124] *** DEADLOCK *** [ 255.937463][T12124] [ 255.940946][T12124] May be due to missing lock nesting notation [ 255.940946][T12124] [ 255.944477][T12124] 3 locks held by kworker/u32:39/12124: [ 255.946847][T12124] #0: ffff888100747948 ((wq_completion)pdecrypt_parallel){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 255.951405][T12124] #1: ffffc900062cfc90 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 255.956144][T12124] #2: ffffe8fefc79dc58 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x6b0/0xda0 [ 255.960062][T12124] [ 255.960062][T12124] stack backtrace: [ 255.962603][T12124] CPU: 0 UID: 0 PID: 12124 Comm: kworker/u32:39 Not tainted syzkaller #0 PREEMPT(full) [ 255.962626][T12124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 255.962639][T12124] Workqueue: pdecrypt_parallel padata_parallel_worker [ 255.962662][T12124] Call Trace: [ 255.962670][T12124] [ 255.962678][T12124] dump_stack_lvl+0x116/0x1f0 [ 255.962699][T12124] print_deadlock_bug+0x285/0x3b0 [ 255.962723][T12124] __lock_acquire+0x136e/0x22f0 [ 255.962749][T12124] lock_acquire+0x179/0x330 [ 255.962770][T12124] ? padata_do_serial+0x7d7/0xda0 [ 255.962788][T12124] ? mark_held_locks+0x49/0x80 [ 255.962808][T12124] ? queue_work_on+0x12a/0x1f0 [ 255.962834][T12124] _raw_spin_lock+0x2e/0x40 [ 255.962849][T12124] ? padata_do_serial+0x7d7/0xda0 [ 255.962991][T12124] padata_do_serial+0x7d7/0xda0 [ 255.963018][T12124] pcrypt_aead_dec+0x5b/0x70 [ 255.963046][T12124] padata_parallel_worker+0x65/0xb0 [ 255.963064][T12124] process_one_work+0x9ba/0x1b20 [ 255.963093][T12124] ? __pfx_process_one_work+0x10/0x10 [ 255.963127][T12124] ? assign_work+0x1a0/0x250 [ 255.963151][T12124] worker_thread+0x6c8/0xf10 [ 255.963177][T12124] ? __kthread_parkme+0x19e/0x250 [ 255.963195][T12124] ? __pfx_worker_thread+0x10/0x10 [ 255.963218][T12124] kthread+0x3c5/0x780 [ 255.963238][T12124] ? __pfx_kthread+0x10/0x10 [ 255.963259][T12124] ? rcu_is_watching+0x12/0xc0 [ 255.963277][T12124] ? __pfx_kthread+0x10/0x10 [ 255.963297][T12124] ret_from_fork+0x983/0xb10 [ 255.963318][T12124] ? __pfx_ret_from_fork+0x10/0x10 [ 255.963335][T12124] ? __switch_to+0x7af/0x10d0 [ 255.963356][T12124] ? __pfx_kthread+0x10/0x10 [ 255.963377][T12124] ret_from_fork_asm+0x1a/0x30 [ 255.963407][T12124] [ 256.274982][ T82] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.413832][ T82] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.464263][ T82] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.524289][ T82] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.581187][ T82] bridge_slave_1: left allmulticast mode [ 256.583538][ T82] bridge_slave_1: left promiscuous mode [ 256.585949][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.589567][ T82] bridge_slave_0: left allmulticast mode [ 256.592294][ T82] bridge_slave_0: left promiscuous mode [ 256.594654][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.784163][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.789331][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.794273][ T82] bond0 (unregistering): Released all slaves [ 257.065408][ T82] hsr_slave_0: left promiscuous mode [ 257.068333][ T82] hsr_slave_1: left promiscuous mode [ 257.071704][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.075107][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.079615][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.091203][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.098246][ T82] veth1_macvtap: left promiscuous mode [ 257.100556][ T82] veth0_macvtap: left promiscuous mode [ 257.102978][ T82] veth1_vlan: left promiscuous mode [ 257.105161][ T82] veth0_vlan: left promiscuous mode [ 257.232027][ T82] team0 (unregistering): Port device team_slave_1 removed [ 257.258133][ T82] team0 (unregistering): Port device team_slave_0 removed [ 257.764307][ T82] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.835152][ T82] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.904539][ T82] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.973134][ T82] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.059558][ T82] bridge_slave_1: left allmulticast mode [ 258.062294][ T82] bridge_slave_1: left promiscuous mode [ 258.064872][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.069365][ T82] bridge_slave_0: left allmulticast mode [ 258.073136][ T82] bridge_slave_0: left promiscuous mode [ 258.075717][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.230381][ T82] bond1 (unregistering): (slave geneve2): Releasing active interface [ 258.399810][ T82] team0: Port device bridge2 removed [ 258.467829][ T7801] smc: removing ib device syz0 [ 258.470171][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.476042][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.483138][ T82] bond0 (unregistering): Released all slaves [ 258.586210][ T82] bond1 (unregistering): Released all slaves [ 258.684282][ T82] bond2 (unregistering): (slave veth3): Releasing active interface [ 258.689312][ T82] bond2 (unregistering): Released all slaves [ 258.696319][ T82] bond3 (unregistering): Released all slaves [ 258.702764][ T82] bond4 (unregistering): Released all slaves [ 258.708981][ T82] bond5 (unregistering): Released all slaves [ 258.716657][ T82] bond6 (unregistering): Released all slaves [ 258.725609][ T82] bond7 (unregistering): Released all slaves [ 258.733545][ T82] bond8 (unregistering): Released all slaves [ 258.927473][ T82] tipc: Left network mode [ 259.127793][ T82] hsr_slave_0: left promiscuous mode [ 259.130008][ T82] hsr_slave_1: left promiscuous mode [ 259.132376][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.135098][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.137545][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.142117][ T82] veth1_macvtap: left promiscuous mode [ 259.144095][ T82] veth0_macvtap: left promiscuous mode [ 259.146153][ T82] veth1_vlan: left promiscuous mode [ 259.147904][ T82] veth0_vlan: left promiscuous mode [ 259.190706][ T82] pimreg3 (unregistering): left allmulticast mode [ 259.199874][ T82] pim6reg (unregistering): left allmulticast mode [ 259.514575][ T82] team0 (unregistering): Port device team_slave_1 removed [ 259.541265][ T82] team0 (unregistering): Port device team_slave_0 removed [ 259.756799][ T6223] lo speed is unknown, defaulting to 1000 [ 259.758749][ T6223] syz2: Port: 1 Link DOWN [ 260.582878][ T1423] ieee802154 phy1 wpan1: encryption failed: -22