last executing test programs: 3m21.211928864s ago: executing program 3 (id=91): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x0, 0xd5]}}, 0x0, 0x2d, 0x0, 0x1}, 0x28) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.stat\x00', 0x5000000, 0x0) sendfile(r1, r3, 0x0, 0xc486) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3m21.211069627s ago: executing program 3 (id=93): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x200, 0x20000) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x0, {0x653e, 0x5, 0x201d, 0x3, 0x7, 0x2, 0x2, 0x7}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000fc0)=@ethtool_ringparam={0x10, 0x403, 0xfffffffa, 0x8, 0xb, 0x3, 0x5, 0x0, 0x1}}) syz_fuse_handle_req(r1, &(0x7f0000006180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1000, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x1, {0x40, 0xff, 0x6, 0xffff, 0x1000, 0xfffffffffffffffd, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f018, 0x1}) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xe, 0x3a, 0x800, 0x1, 0x38, "f068004507507478e7432c95cc5e8d05e536b8"}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000080)={0x4, "fae81e6d73786f3499a558fba81cae912bd5d2a517734986540c4a6658bac5b7", 0x8, 0x2244d0b1, 0x8, 0x2, 0xa}) r5 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r5, &(0x7f0000007ac0), 0x5b, 0x40) set_mempolicy(0x4, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000511000/0x3000)=nil, &(0x7f0000545000/0x2000)=nil, &(0x7f00001d6000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000014b000/0x2000)=nil, &(0x7f0000655000/0x1000)=nil, &(0x7f0000376000/0x1000)=nil, &(0x7f00006e6000/0x1000)=nil, &(0x7f00002e2000/0x3000)=nil, &(0x7f000018a000/0x3000)=nil, &(0x7f00004ef000/0x1000)=nil, &(0x7f0000000580)="f84fe1958969f6b2194f2845a99109012712c0bdca61edbb0a4a14cc68e6e2510bf49a842313332f6328bd1a34aabbdd12524653be66eff6a07f3a2297be4d250ab51516a057e6242fd071e8bc9187083287c7ad7ab0285fcd2d9d157972fe6edc13fe8341f755243a5759e9fec496c298cd68cbe77da433a22d418c0baf74542fd8b657e6da", 0x86, r6}, 0x68) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m20.919433077s ago: executing program 3 (id=98): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000680)={0x2, 0x0, @remote}, &(0x7f00000006c0)=0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000700), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c0000000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x140) r3 = syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010101}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x40}]}}}]}, 0x40}}, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000040)={0xf0, 0x40000}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r5) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'sit0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) ioctl$CEC_G_MODE(r2, 0x80046108, &(0x7f0000000600)) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r7, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x1ff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x40000) r10 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000080)={0x67, 0x5, 0xfa, 0xda, "93e7435eb80eb27bf1e3d8f3960a7485cf5e80167fdef6fe81c2d4b3c33b937d73e6eef55e6a5dcf6ed70e2258edc0ddc202e9b4b3065a41771060a64ef43b3e2523dda6f3ad87514e76faf84b45218a97998e405f87811f80a3a08f5812c0bb1b9e45825fd8ef2f4f0885e38af6d35c4d246fc34babb35c80133098e8811155099e2f8779dfe6d45ffb9bb2bece6121831c5b4de688f781c9c361b2704c6b962ddc4ae37b6cbcc0e4245011167daaa81754fc047ec42638906521730c6a63b4d960edd406bf3b36ef5914034ac18b7c769b5dd9489ed53328f8"}, 0xfa, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r10, 0x80044100, &(0x7f0000000280)={0x0, [[0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]], '\x00', [{0x0, 0x4}, {0x0, 0x5}, {}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {0x0, 0xfffffffe}, {0x0, 0x80}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 3m20.76048958s ago: executing program 3 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x2, 0x0, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) read(r2, &(0x7f0000000980)=""/4096, 0x1000) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000140)=0x1, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0) mkdirat(r4, &(0x7f0000000100)='./file0\x00', 0x40) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000040)={0x80, 0x18, 0x2, 0xfffffff7, 0x0, 0x9}) sendmsg$kcm(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000060020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) syz_emit_ethernet(0x6c, &(0x7f00000001c0)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33c83", 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "e3e627", 0x0, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], ';I'}}}}}}}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 3m20.691370096s ago: executing program 3 (id=104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x1, 0x7, 0x0, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x93}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x400c821) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3550e5edd561944e}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x17, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, 0x20}}, 0x40010) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa095, 0x0, 0x0, 0x0, 0xffffffff}, [@exit]}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x78, &(0x7f0000000280)=""/120, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x10, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000380)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x3, 0x2, 0xf, 0x1}, {0x1, 0x3, 0xf}, {0x4, 0x2, 0x2, 0x6}, {0x5, 0x4, 0x3, 0xb}, {0x5, 0x1, 0x8, 0x4}], 0x10, 0xa3d}, 0x94) sendfile(r1, r0, &(0x7f0000000500)=0x2, 0x7fffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'syzkaller\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44010}, 0x10) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r4, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xa}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c081) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x25}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x32}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x1) mount(&(0x7f0000000a80)=@rnullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='binfmt_misc\x00', 0x110400, &(0x7f0000000b40)='.)!%@:.&%&#\x00') ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000b80)) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '/\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x20008050) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r2) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d80)={0x160, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x74e}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}]}, @NL802154_ATTR_SEC_DEVKEY={0x74, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc0000000000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x60000000}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x88, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x800}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7f}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10001}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x160}}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001000)=""/69, 0x45}, {&(0x7f0000001080)=""/132, 0x84}, {&(0x7f0000001140)=""/61, 0x3d}, {&(0x7f0000001180)=""/44, 0x2c}, {&(0x7f00000011c0)=""/199, 0xc7}], 0x5, &(0x7f0000001340)=""/250, 0xfa}, 0x2002) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r8, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x38, 0x3, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000080}, 0x4000) r9 = gettid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001580)={{0x1, 0x1, 0x18, r8, {0xee00, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000015c0)={{0x1, 0x1, 0x18, r8, {0xee00, 0xffffffffffffffff}}, './file0/../file0\x00'}) setsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000001600)={r9, r11, r13}, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r12, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x44, 0xf, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0xc4) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r12, 0x29, 0x1, &(0x7f0000001780), 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r10, 0x8008f512, &(0x7f00000017c0)) 3m20.480243478s ago: executing program 3 (id=110): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x4080, 0x0) 3m20.423834823s ago: executing program 32 (id=110): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x4080, 0x0) 2m38.041347709s ago: executing program 0 (id=807): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="21012cbd70000005008c8c9f530008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x440) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f17", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 2m38.041108669s ago: executing program 0 (id=808): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) (async) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000040)) 2m37.971473052s ago: executing program 0 (id=809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) fchown(r0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x2000) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="d2c113c29ca1f0329c09333c4e57bb838cfea716579dab7d1cbdce058b04b86cd2573f5a46ec9ad1bb3c276903ebcad8758f3bdb0ea994c5ea01d7771c5b21040018c812e3b3d2c92d14193a28633e7a06c3239d8e97c69f11a821f535082d74ee0c1925c46bfba566d8c9647889a9dde67089b24871471415a695730085f81a0b7c8dc2eae85ccd015b85d7d1fecd2528f2a8369ee0315327ba0d506a583c716ea4fa23575566c8cf1a2a844691717179b82f10998b7d540188e57e864820665ab70db2d483c4fdcb115ea6bbd4a888f9d383f6fea063635b69686590f540c638a77fe8e8cb266cf72667e61871faf1d1810c749c30c5a7b61609d81114f7aa0355967a7513f659d021338ddb687b0f7372386170902b612c56f58dc73a1ccecb389ccd39f926ee91220a5c053dc277919ed4e32b63da14781cb46227a71388f2aeb37e8971d4a554824bb05f7e6861a916c94204feae48f115680a40b7b2da6ec3af295979016cb78ee53d347a2a8de81c26d0468db8b59df449513e109f26ccdff64403180deba17211813b69ef3f0c42f498a6f3d05a4e7f47f99a8b9ff6bb375fcd1cf444a794a7c2a274f2786c8c220b1f80f2d0c1f311960b37357eaad7a42c0367de29a2d0d5567098dfc4ac2b0393a7accfaed79afeec5c9d526503e8fbbd3d1f6365c698775999e5109bada3ec51a9d4b884631086bcfa4fe99135a7c482d9e3d2cbd0a58a42f8cd737a812c21185d909bab234d412bd450da975be70eac2a8db479f7030ff5f41817cd798d59a2db9d8d829765459531044ba3bfa6fc89d046c75e707133e5211fd05d20f63d4f493b23bcd966e3f4314a512451b761fb3b3ed815da07c604f71d2a86937142ede6fce427766dbde15f74f2c45d4c3c08e815b507bb05ee97ddf7ed79ea2ddd5c6ef057d455d84c79bdfd6e68ba6f5cd806a6b9dfd5ed65e394554fb59df7aba2676779a547cf8a7c97379abc760e94e01264a2a23c8c63296ec0d9a4e0aa5c9c470fe46beb8db8322372f3649b7d2ad0b8d09e77e4757a2f40835860b56d41382fabc35d891deedd2168ff3b20f3345ec3238ce795fd9b0311fbd7cf10bbefe4e9349bdf7ea5294f3fc3ded1203c01c9a057641ea122eea48e30b942fdebdc4e7263353361dfcf3562eb3f7eb491fe530b3de71b557bd1baf334d39c5dd9e6842a3ef24004eafc5eb85fbdad5c1e49f60f565da146b119f27ec9077774e21300edf2883f34e299ae0465779ab80ba2d097f5d791a72785f35090dbc369864476c33d3279382a49ac45be1706211659d6fac1ae12d772fa270eb3746a69082e67664f4be335f2d172d52f5083a0768e5d4332352be40eb41e3406de4498e740a470141032ea251c144cdb5352d8049281898c72f13a5d3509c9c77308fe45016abfd7d42b1a022a60b9a5bbcece7c0a10bf9f157995465729b38fdcadd0d977574636206982a6b4e8f24bc75e3eb054fb9ae81e878afd24cfa9756f053bb89f0e4a42e195bd2af8a91a6dd5c9fbccd938681a7387ed22a0e3a8284d3182aa7ef1905a267850fc405494d7079f6d0364287cf7b16dc2310b15bc49fb68d1a96075cb5f30f4fc2ec0c51d0b7e806e78f108f4060a55b8c23b3c89a2f2fa321d5138019c417a504d230ec496583933daba2998e20d8f9a2e6798f681e1d4df88fa4e084513d3648ed4f6624d8b894470cf325e837ad177a634bf58d21378fa0d3370bcb724fa88314bbd0749bbe6ff9dd5d7826701891c180278833c3327a8b1500c3e86fbdaacaaba0e0f708052ddecaae4fe142689c812aeccc7211f61159e0787a8f639d1f0a4db373c17317fea5d3ca1c6060fc44a2d02502f0230334acb69861f0cdb82220827f5887a14e7eab133ce4ecd9a414b2a6b31d8c631325319bbb65ad01aaea7e157fea6cbb434c67f4582028c32f5890ceb243dc972e61e122cb36840d5838dff32d4b613ae1909f3970404fb1973f1e80b0e388141b2e24d47276be045880a4ac18fd136c08cf266b35c75e9b796f6210817439833b613195fe4688b22127a978d20f8b32e3df3297e09a565e659857d8052bf69c5006c5870bd25e6c3aeb411553924d06ccb849cdeca659448cb220d259b4ee2eda6886f149814b5e13ab365c448369a43553e01874acded99d24da7d1c9c283dae95b0b5311344af85c7c9a8483fb18a5bf00010000bade211edfa4c30f3d1b5bc9672a02adb5d638faea66424e2c82540937dc4cf21392fe16e05811f1bcfb83132deb1cf2a522f9b543758b25d6949400af5d2a7a566f4ab0f5fe0b0a8e8379850e3ed78cb823f5b59b3df4de700427b197720ec69b86c76080b2cfdc4a2619e9d2a901e247e591d79dea91257c0d4a3c7ebb86af42de6833aaaa2d69b71e684236705744b79c62079236759def4a37a0b97742dcdc1af8e5436434db7f17c0ce46539e4a69d65ae28845439e5e3eea34785e6065c32f3c7b71ef4edfdb16ca9ee9d5d4e066a60f9919461ce932a61c4100276dad7a22447c681bfebac9186f23dd38509090e0c0fd60219d33174d0d1f5a2b3eb194ae1c7003b159dd560e909fcd0b14b803ded8a94f2a61ca59f9015a673c018515b7605512ecdec58b60aafcba88e88b790e6dabc09a6721613d4e60ffd8d01b07ccacc1c7f2415347f5f5aa9eb7e5d27090403a55d0364721bf0363e34bdf9d92c8e83fe39e8d23e0a038717c00f82dd27709ea69a7a857575f0e039b067750b0e226dd01091b6aecae409d563a72e0805c8c101401a9d4356c532ec27cf25ad0ea92eb137e5bb367623155b3e62baa1cb29d86e4765a635d180d26f37f58a24683494cca93547b1f9ff0cc81c085cc4509b746c5327f1f169ca3bd059d324ac91e3c05bb225e5f81655d2f5b5f0cd6389d35be14f63cf76ef856634c5c42f5f6763a457be1745d9ddc4e7a77cbe86398585dd18159eb7dadc2da143cabd5794c4caafab774c5b0ad661f6f9e7bd5163af6f214bbd6351560cfb5e9fe42d3b67912e0bb52926429a43c27aa6c52e904660029285c4b763d6becb5cd4e9a029fb092ae20df18e073627d896a8de5f89474cbc2d2a525edbaa635a9704ec9f30bc0d18dea437a986553da723befb7f91d73a9976a528d2ff2ff80aef0fb80b4c84fca0d810e1f0c3857aef2616c9908aa7dc6a02e28085ccbb88e13c8c8c1acc631e4121e39b453a5897602dfcff5629f88d75ae7375cb9d08969dc6e870870c7aaad3c62f1f39c363d7edfda2d5ce1e9e62b25cf3b31bf4da9b90616a79d3be8f031837844c13fa6ea8af83db6eaa6abcb5158c38abe7fd39b8710c7d8d830ac93d5d3cec1d038c7947861c4ea118b3c205be5ff010000f856c9a81f970c2850397e735a2fb991fe2dd0f293224ed263963a1041dcefc67b77b25b82d6ab047eb282702ddab528cc4bfb8c82d86352057e893bfd4b41e3396d64d7f1a78f6a0d4cd420d4bf84eb791a513163f837556c1a2e7c4e84ab9bfaa3a23a7114bfd301ea1f6b5e5c94e076e8f42a4da7e05224589005625245672ef85a11d6ac4b379b72660583ccb62b3d6cf00090c9c0ef7f3e3bce7bc6e10baa0498799de647451281afb45cf053c7a57eca0732a8f9e9f02437be51649bc7d1a391aca1561fb6b2d47817394e97e426afda0fb9fdd248579b8eb768ef9e249dbef8b0ebbd0e8dec2f149e2356df3a9f728b5392875ea476b54a1c990040ef4e63373566611c5b555b5d60a0e69f32e05db3f9047ea3e261ee6e3d87516bb0fff783333eef6444c8d9d17f8b23514d6358c62cd34dbf0e9dd60f54f286c533d68f2610c82eaedd9e512884f37211f190a08cd3766c7ca6a5043ee9dbabf5994c48d03a2fa5ccedce7ffbe9cee1e9d54036ca4ca7c4fdc339011448c7aad3d14b639dc179e7a97f03b606b0e47a32b8c9ab82c59fbba5e0ab663538aba9ba71d27216614f59bdccb050cc2512f65f465e8476d36855df64b8bb181907e91f45c6262dba02b35dc238bb32b9cc7070d31f7f95f2193b5fca347874a64041ab629cb5c3a3d77ba999793badacf01c4244ae13c0d77fe01fae16c489fcd58010afc3084ffadb9bf7264f23f1ad0e8d9d762dcc431163c343054181812c9cd1a6ecdc9964caa0a2ba8cd29271e6824891129b89efc1ea2996100f1932940a49a324e8eb688d05ac7d6ba273aade15c2be8cc74ef1eafad9b9ebfdfa36edc5c6d109485a48ac6a8395ccdf23779919953cf3c61c3a635c7e782f84098f3cc6bea7644cf3924c2352c97c76bc7141227dd29f1d47ef209adc3aaefd8cf204fb265e6b262e83736c2f26b22d80870af83095338c23a47a5a86af2ae7decd1aaabd925ae900bfe8e82728e14fd82677769bc9962dbb507a61e206821ac9c0940b12d79ecb7a916b9f6573fa3d9a7ef773f66de8cf8db6536d986a29d7b50a2973d228ec48468c5ebec6253130c578e5ec2848b62e8e1082a3d584e84b86e24211a9546e1abf79e568827af5d9ba98ba7b33b5cd9cb7a81dc873ea11276049d9d6206d2ed0933ada7ef9b6823f24b756ebea834297743ffb146350f320ec9044df55b20df0ff84584c16350f465b5ad7d364f9b166fb534c2a0e65f6bb4d61feeb84463ceb4a4f7853c0c2410955881a60170b0bbc131f6699e2616752851063c7e8b0a82e4357b84e48bad8002610e5770c17ee0cb301f9dfe8d5cbb66c6962b5edcae17b5c5dd42026737ea9e2c79bfb9392d290b44d66ade6eb62e26321ee214a6d15facb7cca610b6209392179a50f3dcba1494d3f302745461f6172d329a12d68405be5ee05ad2a641a7aa3da1d1fd3198671bf1af5b39e2bdeed49df80cf0c6e0edc5c4812350097bda47d3fafb3827d73eeb0b29320c74dae6d4d61d8fc269652835f5a7f98710c644dd50d3af618651b41916bbabb9ea7cc46c8208dd7fb99474be66e1a970c899f17129a9ed17ccce0d93411e71b8f1c7790c787f7a97a50d54acbc6f4eee49a38882c34e3477c97e1c6da0b39a1e9d0d25a3cea9364033bf4f625a02412174d03dafd642526867578f71f2e52920833b8d23713d5ac48165f49545f6c7c75b5b4ef2e0682f8f2e191fdb6c0ba529856f887391f8d5aa3f7dfc5230170b97662611e53a4436bf4eaeb16a79bb95f962b2675cb6da9f1cfcdc1ab604ef7749fe87ccb5a3660f463ff5f488b5c544cf847be84dab22d038730a7021cdc7f7ab714c1561c98a39cc92cd6aaf53c82b28665114ac18b2149ee7f1b52f894c28a49eb45d4cf6a0e65df39b3c717039ae41958fe810c1e05ad62ceef2980e0cfd891bfae0db61fb1c8d65b6812ef1bf5d426f955ab4826eae69f531979699685f5312882032a5f47ed8cf2e98e67d9f6c299d2060a04b4aa677500b48a33586b10f71293d57de846d2683621b588630a6ef06a41437bd99366787b787a68c71779132d0ee73aa5f97d5b9ca18a7ae26b7002512df1073e2eccdb4d2f137a15d9604e10547fa465aeb4f2e5899b531adeb5e72fb76c2c1c9d18ceb4a23a5f6174ba86a7119d82e35cb5a5d1c6a093351aaee0094b32b92417dc50c1d3806fffdafd2ec0e3ba176d84bdb7d59755e9083e61ded802e2a089ae9d6746f738b55845bcd4ff0a21888c2c6b972db043973fb323fd1c15e70137aa6a4bce3f60f27c1d1488f3751e5425a5776c7cc3a3c8acbfbd2171407e1a242e8e241e6e9e1287d8995265a8092ec59ad99652e63a41b744f34392017f29c1b1ca4ce7728200743d4497a70cfd2369d0ecf9e0ba6f28da25b2d918a06ad1173091b8d750b8c2120321818a0912bf47b96c9a8962930a843ea8419b24b8618b7b43482291906e151bf39d3634756d9e1ff5a6e787d1fc4be7349c38a3b882e059a5da930a9cb2a01eb8b24b54def2a2949538fc063542921947f1997dbee59842a50a043d431649ea0adde68c43259ab51592107b2618c5f761364d4d3d5d0f4d4ae1b94650cb4b695db5831c6dd789140b87525d9ed46fb8dce8fa75d68f317dfc3858d810928fb3530b7ae8701d622b0e69ab16cbbd46c8165c467850d081292da8147fe07f472776d1e2c75c17bdc0f8bafbc964da953a5efe64af69944f0f8858b2a4dece04428ede8967d0e93827910400af8a859b59579d9628191b291732bae90a3b50f8b2b7728725568a83e006ed21e9c7e4105f291ad6365138aa2d59c0b303cc298f7a70d0c39e4f17a878083631b1f96a65d7b4c5a4403929180694f55b71ba29685bdf472f0e21a1c8b3c0dbfc4892ffbc0f0f23f38ed0b785080c11b0766ffc5a0c2c750080b764df159e42ac8eb82681baec5b0ad7948153679162c223f63bf22545718accf6a30bc4402f6b54996baa00508c6def488975a2e2bf2a8dbcff49293e83f998f8baebe722cdfef96c46ac3d945d56ada194353f7cd03d2b86cb9844f7d63f008fbe553fe0023f6968e8bea9054ed3c567e5c55b283fb2337fbd20510e5e098537f5c1baa6b509f63b1e812840aaf470690894a2725f4460a106a3b0e14b12b47c3fc1a083ae7e8cd2e710b5d428b2063f7bb91105255cc0fcc8ac51398ec3df6416d283c4aba6ed44846e82be02d242c710c973c5f0a9b3b16da8a96f5cd2a164a3fa040075b0cb99944f1b34f7e79ae039d15a6c992cb40aa403de90992c064e1771f2a396734480f43b024dc799b8e242df235dc0d33cfdce41755722907d4533a1480d78e99320412326c27e15434fd3fdb19ed33a07063a8a62b39ce14be2ea1e0adadec65fcf4f19901bd801b87e90fc91f1270b420fb530b71b7aea9ad23c4a4ad28d4b63444bc2fa7b44247d5e9f0ca0209a489035b4521b5e886a499df1f9d0e27b9c5007ee75fd3909d4e0156973bdf2ff8d1a88cad1d534ba93648ecb34a30b1e760f1ee8cfb90c27c36385fd68ee48982e5f0c190e8786b7ef0e1dfd3cb1cc00efc19a92020b509d3e2c74b4265bdc765085bc49c6fc61476aa22cff375a78c59f33394cc6ff460584ebbd8dba2cbfe97feb1c9147068dbc1d3e25631ad8478d826d88c28b2cf967d07d3ff845cbb25699406d106eabd31066e9cf8abbe7598f71cca663a6f63bfb63caa95d3a363e69e9a3bc889d026df28c37e41786bf8c9a1ccc06c3499986a72bb10367f32b1b8a55365c2a5b46061b58b81c5da69ad39db6c468906f1c1225527f1b26a3dbad94b1419f3671086b061117206a634cd08beee1fcdfb4a3a7cc78b3cb1293dc900d0859505018b38033a1cc9a0051968af1f8fa60350865328b6834f9c30bb1734949fcdab62cc6904b285322da3d49f188019648cac314d65a7c57f4e25864f17e346e7ebbe411695a237622356ecc10e66c8ba33e7106a756b8d3abc1a1aababc26413adcfda74a59b9002a7e2e3edb3e7551d32c461c2e40c25cb9de751ffda44d7f353513c5bbbc473594127c09775844dec5dc922caea5532dfa98fe80d80243233a4f0c15520d9dc76da3623aabef3582380ca4d2f9558d6c71b672f259b94f26710aa1d933b3ad79c8755a96c18fcfd62a972ca80ea0d33afbfc80045ba7dab492aa06c73ea3a598b2bc6eb1549627d183c25c3486814960eb1e1b02200a92f51b8642683f88185a9ee91c6dbb576dd8a869e1338b81ec205d979242bd963308af90ec23e032253a70440edd3ebfac8e489db0a70bb5c887f22e7a5de33918374a9ae5229d419b1948eeb23bdf8dce3c5df3b81d1a3e3b38e095f261cb9e00f5567413a5c13abf469fdf64adc830cc442a099609cf0ebd3ffe936d77d6099d816be2b4cdd31e4fdf5af5904120ec65e81138416462f9e9bbe9ba6d5980c7de01288bd9f4741848802c32f3774678367c70014e531ad7f95b5527d022232ada51148012328f1693b2d08b8eba80dc26d8e9fc369b410331ed720e410ded5bd03ce69942ffb97489a2c5b6e4da93cc73811738a141c3a16d4ff6edf2ad1b3d3ae45a21c5ca2613b92e7871dea89d3cd699b86520c80f6a391cc2911538f8108dc90203b0e74ee43a087e033265e0745a9c991facff49339c40601420bb72ef014bc4b9a51cad1dcde9f1567b4ae9d11b1416ff3d8dee15f4672bdbca4348e7e71f8d75a73851bc0ad539312b7d52c498602a5eda4630296fb4ffff90d8f6122da7fb56d02755f861df193bdc5effd8a0e54c2ef78a284f7543c2b25a81bf545be3a3f549aabe86700bf058877e3fec53813f9992814a2cebf341cedcad346dba70596da899add4d723d98366ab60997cae7e5b9d417252734d9145ab8c5ece5b5b0efdc2f2578838c500ee17b866323a951979c6f1a50da2833bc437bcddd6efaed0244df44e6069daf359289d9c50c073f0fef4be1fb3802be5ea643761ed6347a35a3f537cbde402911c28d7c7c7e6b8612facbe87221f3505ff078d0dbb28ec469fe6eba2efcb4efdcfc5745299c0850e21ee2c9ef77db8070d589c547cc7379b58677d16077093514849869ab5bf8f896fa933ba3edc676dcb73e91386cc48f01782ba635564e0f91988cf98a3a17544abfedcdc1d80540e9499bf98180feb80325194cbc369be3275ed390f8e91b8d75b1364e9fabe50a1e3b9531c3fe1aaf6523e54bb05738bd3a67ca5de01b2e479ef7678a86b13d6b747fb3cb5fe1be8913228705fc232ce422186cb79c3b66c944f6124eb414322806d47978044336221f26d3a09ed8dceb52e3c7e3413535faf1f7868cb47bbbf02c37b4cc877a1d5f4023083d5b36650b673a4e51387c64d44daf58057adaa5610d22a15329804cd51a42f663311c4e5ece9d99b5a813c4025e8e0a98c0f3ec13cf07de0b18d7e1ba7d3eb143f5825f62ae5b5f6d92b167f9dbb2177e84f23322566814296277fc2933956f818f5475b6aa031545e6e2265679d16cbedff96c4f419d5fabe99ee652feac8acf9a90771ab8ade8291b42d25ebbdc03faac02b9599fdb83621f6ae1e2e7f946520f3cff881cd600c17b4a00c08d0996f7d2bb97d35647f72b80ba8ad3b4a16cb71094b2d1193a5fa1456e4671788bc51c0d506f4809ca34620d4a75a62ddfa20ab5c4d347a08eb8784d4c572fcb473b766f5e1ce9d92db70ebee83accd58b8253da36b9542686edce545261f309144a3d64900f796620003b36ee3d44a06cc4d088f73aa45288b90476d2e1e461795d473d59500aa23a6b7724a2f0d6473dc2f0af6ea311a648e193072016e199b920bc8c0830ae18f1c17e33d73badadc0f9d34cd52b54f4d3d480a7ddfe0f140f8de1a382a4c5a722d3e0f875b69054d88b8bab94e9394ba8d28937f1ffd871d1666a377620e7f032633fe58ebc87e533bd6461b537cdde38352ece085378dd7b24fa3fd5a3dc3f5b77492e4fc91238a8bfcc4e20bb396bd3317155981ec593926f2e9f15e5ac1aa533e122441649a681d88142a93386a6ed6b2d5b18d7fb57541e31a69acee17345b08c6667ebbc53a082fbcd980b4751937ba729dd2fd9b43d06091517922dd3ea524db002db7525902a465081843191d2d7ac76adb7724ac2bb88e4cb2f3188dbf0cd47acf5011b4519ec100a44b2ee6a1dacac5aade2cdcdca777c6b5edf596b05691d247f671491f68bf2e113a7e8674309ea98ab794d05c664ade246288796270e10f4a308420a62bf0df1d1636330e88bf4cc78051e5f715c8f97b8a83119b3fb5129ac6d0733256bec96d8cf435fa005e14d88884a0ca24266a4e78e25e2519796ba31971e4d0cb44ea58c5ddf54a15e3b449642e395679fc5ba600cc6bb7f2b004bfb0d621e51f9cf16309e4a02ce4f23f4a2d225aa8c84840bf2d3522a5f7a983cfbbfe4adb62d6ea622ebb784072bc6673878c5eaa865a7657b619f48cf0c51a4b0d47b20f426adc7f8ab68238b97abf68443f0eaac3796bfd99e0bc644e4f6fc43e551eccd615db802dfb031444e09aedcb04846bb894a2cf42dd0a578dc94d727736e802194ae27af8556373969cb7f27788b6edf5b2bf25a79c7f89289f827ed4be611d65f6bd89698b130aaadd0f2d914819f41a0185dfc73adcea80d2ee592bf32d15010cb32a95ef112bccb2b780b461637ffa1641d34e1b114cdd3dd1ceb365933efef1781f9ec620a73097594c945969c2ea036e36b2380b33599c3e1d4eb2b7f210324aee3bba5a944b71cf0246ceed878897fe00e30d0bd32b3dde08c8805e30efe39cbc9d11b97491d82fbb5d93b1997e5f3128252472ecd256b9f79611175b6f686629ee744d0ba2494607a4476ea5f934c936403509c14bddbc2403ad5d97bfed0da36707b66f39ffdcee7ab39602e740c1ca9761570cdbab5f56b2060db428921457445b15c4c92b9c4b0ebb0746936bc3053836fa884e97c96e44d18a5a52feca033ec4caf950927bf9a281ea1aacb2a8b1a1f74b20de25ad5f3e459ab8b61ba5d00eaedcb6b5467dcd8608cfd48cc8c1a01f2c9f68bc9ef9adf2fd81cb3e28277c52d58f42ea87c8896383c2fa88dd15dba7172990893fe28ad1b50095b2ca20856de64693f3a663be6e34a9ccbb09add5724c5599495d0c95d2b900444651048bf418070b324016678d694b82565931159ffc37d3eefd7b482c41637cdd69b8f7051b6e88cf87a01d26d0689057ca0f66f65a2c3fbca608f7dec52d8e41ea98d21be162eeb38b27e9465d5525e0ffac3bd989adae19bdcf98edc48ff9d9d2a2f0850fa2cac8421ee6e211b1930f9fe9cb7138e8058ae476aa93c0ca49b170eb4ebbbb6fb4020d000eae537b4dd4bdfc63e3fb281848c057b94fc14dc12f8833d5ada50c8f0178137964c3b1524c59eae7ae19066a8003b9f4036b0be91f6f24baf6839f360473907135a8eb777dfe4dcf18d15fb8e16d069c48c5a128f046667f66bb22d36e986c73d2ebaa1a9638a9e8c049d0c766e2008fb19c4aabd96e3443c48377214b01dec0f73538fa5a882553a60664e549030fc9cc21a74a73cf79cfdbbfa3676a474910a295044d804b9f6a30104fc8250da4efcfddc379c3a1b84a2050ee78b18ba84ec5cb4db62540ea7be026b48d2b9294f06aa48e44087dbc494d92fe3e8648792c2b9f5d0d580afac814f8fc74208239b5f8fa6c20fc75c9d73fbe448a4fd1eb1af10165c37e7aa72c83c47dbb92bf3203bc0bea3b3ae261636b9a6b621725aed16de5c33502f152ca3704b1e83a60cfc5807177d9e561b12f43c3ded0951c4ec7af0ab29f55e3745df0f10bedcdcee2d443c0023d7547018c94e2cbb04a5c67a81d33df4dda99f80777b1db00f91bf8abb96ca360353c08b8979d00860ee3af86988171d6739a0f546f64ec34c045afd1be790176228204782836484f6d118d734c8e1b302788aa20e704502da74cd11bc5a22bb717a1d10d5176a4426e88cc132479aa7e8370772b9776ea38d5bd217b08c50f94072acbdf93e732e6ce41f92159b626e59e39925b458465ec3b0191a56d8e1c3a76110200e38380ccfcc1a05f85608bc3ea0bdbbf326bfe003158c8c9e01e90a7ae164cc20de5b23146baa978611100", 0x2000, 0x0) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r3) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) 2m37.391558705s ago: executing program 0 (id=810): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x3d51c, 0x0, 0x2d, 0x9, 0x1a, "0012412d08d500201e850a21077b0a00e0edff"}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000040)=0xd) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12214}}, 0x20}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 2m37.39030673s ago: executing program 0 (id=811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x4a, 0x0, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0x10}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x5, 0x2}, 0x50) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x81, 0x60, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xa34a}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xd53f, 0x2, 0xb4}, {0x6, 0x24, 0x1a, 0xb8b, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x3, 0x46}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x8, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf8, 0x18, 0x7}}}}}}}]}}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xe4249ef8869ff4ea}}]}) 2m35.739829617s ago: executing program 0 (id=819): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x336) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) (async, rerun: 64) close(0x3) (rerun: 64) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@set_irq_handler={0xc8, 0x20, {0x81, 0x2}}, @wr_drn={0x68, 0x20, {0x2, 0x7fffffffffffffff}}], 0x40}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000180)={[0x200, 0x3, 0x9, 0x2, 0x9, 0x4, 0x5, 0x8, 0x401, 0x3, 0x400, 0x6, 0x6, 0x7, 0xffff, 0x6], 0xeeee0000, 0x12000}) (async) socket$packet(0x11, 0xa, 0x300) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="5f000000000000008b"]) (async) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f00000000c0)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, 0x2, 0x2, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) 2m20.202428655s ago: executing program 33 (id=819): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x336) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) (async, rerun: 64) close(0x3) (rerun: 64) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@set_irq_handler={0xc8, 0x20, {0x81, 0x2}}, @wr_drn={0x68, 0x20, {0x2, 0x7fffffffffffffff}}], 0x40}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000180)={[0x200, 0x3, 0x9, 0x2, 0x9, 0x4, 0x5, 0x8, 0x401, 0x3, 0x400, 0x6, 0x6, 0x7, 0xffff, 0x6], 0xeeee0000, 0x12000}) (async) socket$packet(0x11, 0xa, 0x300) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="5f000000000000008b"]) (async) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f00000000c0)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, 0x2, 0x2, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) 33.57853592s ago: executing program 1 (id=1833): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004045) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xf}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40002}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000008880)={0x2020}, 0x2020) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xfff7}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x8000}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x373}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7be}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8009}, 0x8010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x74, r5, {}, {0x2}, {0x0, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8041}, 0x10) 33.245711821s ago: executing program 1 (id=1841): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xffffffffffffffff}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x3) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000100)=0xffff1000) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000140)=@arm64={0x7f, 0x2, 0x3}) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000180)) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000200)={0x7, 0x0, [{0xa, 0x2, 0x9, 0x0, 0x4}, {0xd, 0x3, 0x6, 0x3, 0x10}, {0x0, 0x33, 0x7, 0x7fff, 0x6}, {0x7, 0x800, 0x1, 0x6, 0x36}, {0x80000007, 0x0, 0x8, 0x80000000, 0x1}, {0x6, 0xdd, 0x2, 0x6, 0x6}, {0x2, 0x5, 0x4, 0x101, 0x231}]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) ioctl$KVM_RUN(r0, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x7}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000380)={r1, 0x3f3d}, &(0x7f00000003c0)=0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x3) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000440)={0x8}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={r1}, &(0x7f00000004c0)=0x8) prctl$PR_GET_IO_FLUSHER(0x3a) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x1, 0x0, 0x0, 0x1ff, 0x10}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000700)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x800) ioctl$KVM_RUN(r0, 0xae80, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r4, 0x108, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x2004c090) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r3) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000a40)={&(0x7f0000000840), 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x120, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xee4b8206}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xef1a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3000000}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040050}, 0x8804) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000a80)) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000ac0)=0x2) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000b40), r5) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000002080)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002040)={&(0x7f0000001740)={0x8f0, r7, 0x200, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x280, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xca8e, 0x3, 0x6, 0x2}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x8f0}, 0x1, 0x0, 0x0, 0x4e0cd8db7a4e009d}, 0x4) 33.244323026s ago: executing program 1 (id=1843): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000200)={'wlan1\x00'}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setresgid(0xee00, 0xee01, 0x0) getresgid(0x0, &(0x7f0000000000)=0x0, 0x0) (async) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r2, r1) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f0000000040)=0x40000080, 0x80000000000d, 0x1, 0x0, 0x0, 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x2000008c}, 0x80) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f0000000000)) (async) syz_clone(0x1906000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 31.970367712s ago: executing program 1 (id=1848): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, &(0x7f00000002c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) r2 = socket$rds(0x15, 0x5, 0x0) connect$rds(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x7ffd, 0xe) r6 = fanotify_init(0xf00, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xfffffffffffffcaa}, {0xc}}}]}]}, 0xe94}}, 0x0) fanotify_mark(r6, 0x1, 0x5000003a, r3, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="020d0000180000002cbd700000000000080012000000020000000000000000000600000000000000fdffffff00000000ac1efa01000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000700000000fe8000000000000000000000000000aa000000000000000005000600000000000a00000000000000fc020000000000000000000000000000000000000000000004000300", @ANYRESDEC], 0xc0}}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0xfffffff8, @remote, 0x99}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x30}}], 0x1, 0x20008000) 31.839346223s ago: executing program 1 (id=1857): r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000100)=0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000c00)={0x0, 0xd, 0x126, 0x400, 0x18, 0x80000000, 0x8}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000008c0)={0x1e0, r1, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x5a}}}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_IE={0x146, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x3}, 0x5, 0xe, @device_b, 0x2, 0x2, 0x8}}, @random={0x80, 0xfa, "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"}, @dsss={0x3, 0x1, 0xef}, @supported_rates={0x1, 0x6, [{0x60, 0x1}, {}, {0x1b, 0x1}, {0x3}, {0x24}, {0xc, 0x1}]}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @void, @val=0x2, @void}}, @dsss={0x3, 0x1, 0xb5}, @channel_switch={0x25, 0x3, {0x0, 0x8d, 0x5}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast, @broadcast}}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x8b, 0xff, 0x7, 0x3, 0xc, 0x7f, 0x1, 0x9, 0x8001, 0x9, 0x7fff, 0x1, 0x4, 0x5, 0x8, 0x27]}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x2, {0x5, 0x9, 0x1}}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x5, 0xfff9, 0x280, 0x5, 0x3f, 0x41, 0x6, 0xfff7, 0x1ff, 0x1, 0xf5, 0xfff, 0x2, 0x2, 0x5, 0xfb05]}]}, 0x1e0}}, 0x4000040) setgroups(0x41, 0xfffffffffffffffe) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='sched_process_fork\x00', r4}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x13, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1494c0, 0x189) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x303a40, 0x0) 31.559454201s ago: executing program 1 (id=1861): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x123f82, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000540)={0xf0f024}) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp={0x3, 0x0, 0x3231564e, 0x0, 0x3, [{0x101, 0x9fb}, {0xb, 0x4}, {0x6, 0x1}, {0x3, 0x7fffffff}, {0x1, 0x8}, {0x7ff, 0x2007}, {0x7, 0x8}, {0x6, 0x2d19}], 0x1, 0x0, 0x0, 0x2, 0x1}}) ioctl$BLKPG(r1, 0x1269, &(0x7f00000001c0)={0x3, 0x0, 0x98, &(0x7f0000000200)={0x0, 0x1000, 0xd}}) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0xacecc787ffad8d56, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x0, 0x1, {0x0, 0x4, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r10, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640)) 31.421297714s ago: executing program 34 (id=1861): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x123f82, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000540)={0xf0f024}) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp={0x3, 0x0, 0x3231564e, 0x0, 0x3, [{0x101, 0x9fb}, {0xb, 0x4}, {0x6, 0x1}, {0x3, 0x7fffffff}, {0x1, 0x8}, {0x7ff, 0x2007}, {0x7, 0x8}, {0x6, 0x2d19}], 0x1, 0x0, 0x0, 0x2, 0x1}}) ioctl$BLKPG(r1, 0x1269, &(0x7f00000001c0)={0x3, 0x0, 0x98, &(0x7f0000000200)={0x0, 0x1000, 0xd}}) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0xacecc787ffad8d56, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x0, 0x1, {0x0, 0x4, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r10, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640)) 2.419358099s ago: executing program 5 (id=2444): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x200800, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x8, 0x4339ff34, 0x7, 0x200, 0x14, "d9d81612b24e37276f00d889859c62c72047db"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r2, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0xb, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0xfffffffd, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x2, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71d], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) syz_emit_ethernet(0x76, &(0x7f0000000880)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x33, 0xff, @dev={0xfe, 0x80, '\x00', 0x31}, @local, [@routing={0x2f}], "13d87159da0a7f6b"}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000001) 2.328184571s ago: executing program 5 (id=2446): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000840)=[@cpuid={0x14, 0x18, {0x5, 0x4}}, @wrmsr={0x1e, 0x20, {0x4000031d, 0x400}}, @wrmsr={0x1e, 0x20, {0xe7, 0x4}}, @wr_crn={0x46, 0x20, {0x0, 0x400000000004}}, @cpuid={0x14, 0x18, {0x1, 0xa}}, @wr_crn={0x46, 0x20, {0x2b964f1a3f76a3dc, 0x1}}, @wrmsr={0x1e, 0x20, {0xb11, 0xfffffffffffffffb}}, @rdmsr={0x32, 0x18, {0x86a}}, @cpuid={0x14, 0x18, {0xffffffff, 0x4}}, @rdmsr={0x32, 0x18, {0x221}}, @cpuid={0x14, 0x18, {0x7ff, 0x71393ac6}}, @rdmsr={0x32, 0x18, {0x291}}], 0x148}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc000, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x0, 0x331, 0x70bd27, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x53deffc8edb6b19e) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000080)=0xe) r4 = socket$netlink(0x10, 0x3, 0x15) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800090400150000000000002d"], 0x1c}}, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, '\x00', 0x0, 0x32, 0x80, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @mcast2}}}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 2.189424831s ago: executing program 5 (id=2449): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000240)=0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x80) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000300)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) fchdir(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYBLOB="0000000000000000280012800a00010076786c616e", @ANYRES32=0x0, @ANYRES16=r0], 0x48}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) rt_sigqueueinfo(r6, 0x31, &(0x7f0000000d40)={0x0, 0xc4, 0xff800002}) r7 = socket(0x9, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)=ANY=[@ANYBLOB='^\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fddbdf250700000028000180060005004e22000014000400fe800000000000000000000000000022060001000a000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc8d1}, 0x800) r10 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r10, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="90000000", @ANYRES16=r9, @ANYBLOB="04002bbd7000ffdbdf25080000000500050006000000050005000000000008000300000000003c00068005000200020000000500020001000000060001000a00000008000700", @ANYRES32=r11, @ANYBLOB="0500020000a2a2d5bf6ba9e2a5b5fa0000080006000c000000060001020a00000008000400040000000c000680080006201600000008000300010000000400010edae699a1403b79b6aebcc20c1acec8e73dc966014fb582710f1a9f94524159e3d12cbbcf91d546f4363850232c9d05000000cd6222ef3d436d5bcea8897cf7430949f89461a4bf6dd45c86d8eec659c211a1d98b0ab3e50530f5ad9435cb3771edf301f5f58da02eab829b81e5cb281d6b9adfecc1b4ca37430232e9f7e39943377c0404e1b4b3b0677d239798a3e71ea0deff5757546e467f1272c2b8538b766ce981a20a8b1dc18f7a1b86d2688ce73503aa0524a95e863b3f05fa68f5a595bb7c503bb649b37866b2b5c91ec4010377a0d8937881ea581f8bbc3f6e5b032bd195da762ad66b3b047c3f8dffd4229a91ef1838a8fb78826e4fc4fda3951c16c8a260a63c37b4b88ef633511c7b9ea11ca697bbf155c881e894"], 0x90}, 0x1, 0x0, 0x0, 0x4050}, 0x20000801) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 2.188911425s ago: executing program 4 (id=2450): mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000804000/0x1000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@func_proto, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0x5, 0x5}, {0x4, 0x2}, {0x9, 0x2}, {0xf, 0x3}, {0x10}, {0x7bc7, 0x5}, {0x5, 0x4}, {0xe, 0x3}, {0x1, 0x3}]}]}, {0x0, [0x30]}}, 0x0, 0x83, 0x0, 0x1, 0x10001}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000406030000000000000000000000000005000100070000000900020073797a310000"], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a51080002"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000001c0), 0x0, 0xbff0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000480)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="b5a599ab07ea2256199851775cff9a91044536fe57ba40", 0x17}, {&(0x7f0000000200)}, {&(0x7f0000000240)="8d556d4e041ee1b5e1c035407c576dfb30f76556dad69f3273dc8caa6ae3aa04e07efdb309d578ab036e0efeb5fcb63626aca0f2966b7b345919862a71ebe310f1f6e7887f1d908c5814094056c2a3e2052808", 0x53}, {&(0x7f00000003c0)="fdaf9daa321e4bb71aad018d09b5c0c6fc288d2a53479470efe4e5d90b583c5e28af4bd2797578b339e1", 0x2a}], 0x4, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}], 0x1, 0x8004) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x2c, r7, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3807}, @NL80211_ATTR_IE={0x6, 0x2a, [@random={0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa711f2) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f0000000040)) 2.089834842s ago: executing program 5 (id=2451): ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) r0 = socket(0x11, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000440), 0x4) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) stat(0x0, 0x0) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0xb3, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001500)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x10, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000011c0)="c2fb8e95213f23e208cf81fbe16d915cb2e816bd045d354bddc623f898f6580e69c83b9e8ca9739ed3f76ef58bed373d1bd6bd34beea34e51a7b0fe4fa93b62992", 0x41}, {&(0x7f0000001240)="ecc478bfb7a2d6e0c4ffad9b83979efe7f127abfe94d655c4997a59723a350a8b720540a904321b8b69f53df629125db72b1d12666ef41f2c0eff8b639de542834a6adb98c2b4e54c14c6dbe0ba9ae3c86", 0x51}], 0x2}}], 0x1, 0x4001c00) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000032680)=@newchain={0x1050, 0x64, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xf}, {0xc, 0x8}, {0xffe0, 0x8}}, [@f_tcindex={{0xc}, {0x1020, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0xe, 0x2, 0x8, 0x8, 0xa, 0x4, 0x1, 0x200, 0x8, 0x3, 0x5, 0x0, 0x5, 0x7, 0x1, 0x1, 0x5, 0x7, 0x8, 0xca, 0xa, 0x5, 0x100, 0xbc5, 0x7, 0x6, 0x7, 0x4, 0x1142, 0x5, 0xfffffffd, 0xff7f, 0xf6, 0x80, 0x4, 0x1ff, 0x7f, 0x4, 0x6, 0x949c, 0x7fffffff, 0x5, 0x53, 0xff, 0xffffffff, 0x6, 0x4, 0x2, 0x1, 0x7, 0x80000000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x80000000, 0x8, 0x3, 0x5, 0xff, 0x9, 0x8dc, 0xf, 0x7ff, 0x6, 0x8, 0xfffffff8, 0x1, 0x8, 0x0, 0x3, 0x2900, 0xff, 0x10001, 0x0, 0x8, 0xc2, 0x497b, 0x10001, 0x8, 0x1, 0xfffffffd, 0x0, 0x8, 0x7ff, 0x8000, 0x7, 0x3, 0x9, 0x100, 0xfffffffc, 0x200, 0xcba5, 0xa5, 0x5, 0xd51, 0x7, 0x5, 0x1, 0xffffffff, 0xe79, 0x5, 0x5, 0xf57, 0x1, 0x24, 0x7, 0x0, 0x797, 0x8000, 0x1, 0x0, 0x9, 0x8, 0x1, 0x2, 0x5, 0x80, 0x5, 0x5, 0x8009, 0x8a, 0x7fff, 0xffffffff, 0xfffffbee, 0x1bbe, 0xff8, 0x10001, 0x9, 0x80, 0x4, 0x7, 0x1ff, 0x6, 0x400, 0x5, 0x70ba, 0xa9e, 0x9, 0x6, 0x2, 0x3, 0x7fffffff, 0x3, 0xf, 0xfdc, 0x1, 0x320c8ab8, 0x7ff, 0x96, 0x1, 0x2, 0x20000000, 0x3, 0x401, 0x8, 0x2, 0x3, 0x7f, 0x200, 0x9, 0x2, 0x5, 0x0, 0x0, 0x2, 0x0, 0xd2, 0x1, 0x5, 0x6, 0x3, 0x4, 0x0, 0x8, 0x8, 0xfffffe00, 0x5, 0x9, 0x1ff, 0xa, 0x3a, 0x10, 0x9, 0x7, 0x8, 0x5, 0x4, 0x3ff, 0x1, 0x4, 0xffffffff, 0xe, 0x0, 0x7fff, 0x1, 0x6, 0x1, 0x6, 0x1000, 0x100, 0xff, 0x7, 0x7, 0x7ced, 0x7f, 0x0, 0x2f91, 0x9, 0x4, 0x3, 0xfffffffd, 0x1000, 0x3, 0x0, 0x576a0ed1, 0x0, 0x2, 0x3, 0x0, 0x5, 0x6a9b, 0x3ff, 0x8, 0x80, 0x2, 0x3, 0x6, 0x7, 0x3, 0x5, 0x7fff, 0x1, 0x5, 0x70, 0xa, 0x120b, 0xd, 0x7, 0x9, 0x3, 0x5b02, 0x3800000, 0x1, 0x0, 0x7, 0x6, 0x806, 0xd816, 0x2, 0x3, 0x80000000]}]}, @TCA_TCINDEX_POLICE={0x80c, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x512, 0x3, 0x81, 0x1656e018, 0x2, 0x3febaad8, 0x7, 0xf3, 0x5, 0xffffffff, 0x2, 0xfff, 0xfff, 0x1, 0x354a, 0x60000, 0xfffff200, 0x0, 0x80000001, 0x7, 0x1, 0x8, 0x5, 0x2, 0xe72, 0x7, 0x5, 0x6, 0x0, 0x6, 0x9, 0x5, 0x47a, 0x9, 0x7, 0x3981f74, 0x7, 0x4, 0xc3e, 0x3, 0x60, 0x7, 0x9, 0xfffffffb, 0x6, 0x400, 0xfb28, 0x80000001, 0x9, 0x10, 0x28000000, 0x6, 0x401, 0x3, 0x100, 0x7c0f, 0x5, 0x5, 0x8, 0x10001, 0xff, 0x0, 0x1, 0x4, 0x0, 0x7, 0xa36, 0x2, 0x2, 0xc, 0xc337, 0x1, 0xfffffffc, 0x577, 0x0, 0x5, 0x530, 0xfffffffc, 0x9, 0x1, 0x5, 0x0, 0x7fff, 0x80000001, 0x0, 0x0, 0x100, 0x4, 0x98, 0x4, 0x6, 0x1, 0x38000000, 0x9, 0x2, 0x1, 0x3830044d, 0x5, 0xd9, 0x400, 0x0, 0xfffffffd, 0x4, 0x48000, 0x3, 0xfffffff6, 0x7fffffff, 0xf6, 0x5, 0x9, 0x6acf, 0x3, 0x7, 0x9, 0xfffffffc, 0x6, 0x6, 0x10, 0x7, 0x3, 0x9, 0x75c9fe1d, 0xffffff86, 0x0, 0x7f, 0x80000000, 0x6, 0x7ff, 0x1, 0x6, 0xffff72fa, 0x80000000, 0x9, 0x2, 0x0, 0x0, 0x80, 0x4, 0xfff, 0x5, 0x1, 0x200, 0x9, 0x80000001, 0x6, 0x8, 0x6, 0x93, 0x709, 0x7, 0xb3, 0x8, 0x3, 0x1, 0x5, 0x40, 0x4, 0x374f, 0x3, 0x3, 0xa75, 0x8, 0xffffe7e1, 0x0, 0x3, 0x3, 0x1, 0x10001, 0xd516, 0x2, 0xbe6, 0x7f, 0x6, 0xc9, 0x1, 0x3ff, 0xc5, 0x313, 0x7, 0x81, 0x5, 0x800, 0xd10, 0x3, 0x0, 0x9, 0x6, 0x9, 0xe63, 0x71, 0x100, 0x1, 0x38000000, 0x800, 0xb42, 0x6, 0x2, 0x8000, 0xfffffffd, 0x3, 0xfffffffa, 0x2, 0x3, 0x2, 0xe, 0x9, 0x100000, 0x7, 0x7, 0x3762, 0x7, 0x7ff, 0x8, 0xfffffff8, 0x5, 0x2, 0x3, 0x27, 0x2, 0x200, 0x7, 0x6, 0xff8, 0x9, 0x9, 0x6, 0x7, 0x2, 0x7ff, 0x100, 0x6, 0x1ff, 0x2, 0x4, 0xfffff001, 0x1, 0x5, 0x1, 0x0, 0x5, 0x3, 0x9, 0xd, 0x7, 0x8000, 0x8, 0x4, 0x7fff, 0x1, 0x1000, 0x1000, 0x8, 0x7, 0x7, 0xa73a, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x7, 0x8, 0x6, 0x5, 0x1ff, 0xd, 0x7, 0x3b48, 0x5, 0x5, 0x8866, 0x9fa9, 0x8, 0x7, 0x8, 0x6, 0x2, 0x7fffffff, 0x9, 0x0, 0x8000, 0x10, 0x6, 0x101, 0x3, 0x73, 0x2, 0x7fffffff, 0xd, 0x1, 0x8001, 0x9e4, 0xfff, 0x7, 0x80000001, 0x3, 0x92, 0x9, 0x1dae0bd1, 0x8001, 0x3, 0x1, 0x400, 0x2, 0xfffff50e, 0x4, 0x9b0e, 0x0, 0x100, 0x6, 0x10001, 0x187, 0x10, 0x8, 0x8, 0x5b, 0x80000001, 0x8001, 0x10001, 0x1, 0x2, 0x9, 0x5, 0xb7a, 0x5, 0x5, 0x7fff, 0x7, 0x10000, 0x7, 0xfffffff8, 0x9a, 0x5, 0xffff7fff, 0x99, 0x2, 0x8, 0x1, 0x200, 0x4, 0x8, 0x8, 0x6, 0x15, 0x4, 0xb26e, 0x9, 0x18000, 0x7, 0x4, 0x2, 0x10000, 0x3, 0x7, 0xff, 0x6c1, 0x7, 0x3ff, 0x23, 0x517, 0x6, 0x2, 0x3, 0x1ff, 0x3, 0x5a2, 0x8001, 0x5, 0xffff, 0x9, 0x80000001, 0x5, 0x5, 0x20000002, 0x2, 0x1, 0x48000000, 0x8, 0x5, 0x0, 0x9, 0xfff, 0x4, 0x6, 0x4, 0x0, 0xfffffffc, 0x5, 0x6, 0xe, 0xffffffff, 0x100, 0x8, 0x9, 0x2, 0x5, 0x8, 0x7fffffff, 0x8000, 0x8, 0x5, 0x7, 0x4ba9, 0x4, 0xd, 0x8, 0x1, 0x9, 0x7, 0x2, 0xffff, 0x1, 0x60, 0x5, 0x9578, 0x6, 0xffff0001, 0x7fffffff, 0x80000001, 0x2, 0x1, 0x2, 0x9, 0xb1, 0x1400000, 0xa63, 0x6, 0x3, 0x1, 0x2, 0x3, 0xc, 0x0, 0x8, 0x8, 0x1, 0x1, 0x5, 0x2, 0x6, 0x0, 0x318, 0x0, 0x180000, 0x8, 0x5, 0x2, 0x2, 0x80, 0x6, 0x40000, 0x5edb, 0x7fffffff, 0x8, 0xcc2c, 0x6, 0x1ff, 0x0, 0xffff1476, 0xd, 0x7, 0x6, 0x1000, 0xe, 0x88, 0x2, 0x4, 0xe1, 0x3, 0x1, 0x3, 0x3, 0x9a45, 0x0, 0x7, 0x9, 0x80000000, 0x2, 0xffff899f, 0x0, 0x6, 0x805, 0x6, 0x203, 0x7, 0x401, 0x8, 0x4e07, 0x1cf, 0x81, 0x7, 0x6, 0x3ff, 0x9fa, 0x9, 0x6, 0x94, 0x2, 0xc, 0x55e6, 0x10000, 0x67, 0x1ff, 0xfff, 0x4, 0x4, 0x36a, 0xb443, 0xb2, 0x80000001, 0x3, 0x800, 0x7, 0x3, 0x4]}]}, @TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xb, 0x8, 0x6, 0x4f, 0x5, 0xb5, 0x6, 0x1, 0x9, 0x2, 0x6, 0x9, 0x4, 0x533, 0x8, 0x1, 0xf, 0x1, 0x7, 0x80000000, 0x5, 0x4a, 0x4, 0x40, 0x5a1, 0x3, 0x8, 0x5, 0x0, 0x7, 0x7, 0x0, 0x595, 0x1000, 0x6, 0x4, 0x8, 0x79bc, 0x4, 0x4, 0x3, 0x40001, 0x4, 0xc, 0x2, 0x80000001, 0x4, 0xc5a6, 0xfffffffb, 0x5, 0x10001, 0x0, 0x1, 0x6, 0xffffffff, 0x7, 0x4, 0xc, 0xadbb, 0x3, 0xffffd602, 0x5, 0x3, 0x7, 0x81, 0x10000, 0x100, 0x7, 0x5, 0x10, 0x5, 0x6, 0x9, 0x1, 0x1, 0x7, 0x7, 0x4, 0x1e7, 0x9, 0x1, 0xa, 0xfff, 0xa, 0x9, 0x40, 0x2, 0x8, 0x80, 0x8, 0x800, 0x4166, 0xffffffff, 0x69, 0x7f, 0x10000, 0x5, 0x7, 0x0, 0x1f, 0x1, 0x4, 0x183, 0x0, 0x1, 0x9, 0x2, 0x9, 0x6, 0x4, 0x6, 0x1000008, 0xb, 0x4, 0x2, 0x2, 0x10000, 0x8, 0xfffff000, 0xa0, 0x9, 0xc, 0xffff, 0x0, 0xa86b, 0xffffffff, 0x40, 0x6, 0x7, 0x4, 0xfe000000, 0x7, 0x0, 0x1, 0xd7, 0x1, 0x7, 0x88e1, 0xc, 0x2, 0x7, 0xff, 0xfa, 0x4, 0x51, 0xb7e, 0x0, 0x2, 0x91be, 0x800, 0x2, 0x8, 0xffff, 0x7fffffff, 0x6, 0x7, 0x1, 0xc, 0x8, 0x40000, 0x3, 0x3, 0x5, 0x2, 0x3, 0x9, 0x3, 0xc, 0x7, 0x0, 0xd, 0x5, 0x100, 0x2d, 0x7fffffff, 0x66a4, 0x3, 0x9, 0x0, 0x7, 0x80000001, 0x80, 0x1, 0x6, 0x9, 0x8, 0x5, 0x7, 0x4, 0x40, 0x10001, 0x8, 0xd, 0x3, 0x38, 0x10001, 0xbd4, 0xc3, 0x5, 0x7f, 0x81, 0x9, 0x2, 0x7fff, 0xfffffffa, 0x1ff, 0x0, 0x1, 0xbd, 0x9, 0x5, 0x3, 0x9, 0xb, 0x7, 0x6, 0x8, 0x9, 0xa80, 0x1, 0xfffffffb, 0x123eac57, 0x5612, 0x13c, 0x7ff, 0x6, 0xfffffff9, 0x6, 0x6, 0x6, 0x6, 0x6, 0x4, 0x8, 0x5, 0x79, 0x8, 0x4, 0x8, 0x9, 0x1c9ea2f, 0x2, 0x3ff, 0xda6c, 0x200, 0x1, 0x5, 0x5, 0xa, 0x7, 0xfffffffe, 0xb0, 0x3, 0x2, 0x5]}]}]}}]}, 0x1050}, 0x1, 0x0, 0x0, 0x80}, 0x4811) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b84954fc5dc28"], 0xdd12}], 0x1}, 0x20048821) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r8) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0x358, 0xffff88806a609000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r9], &(0x7f00000002c0)='GPL\x00', 0x5, 0xae, &(0x7f0000000300)=""/174, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) pipe2$watch_queue(&(0x7f0000000100), 0x80) 2.020148403s ago: executing program 5 (id=2452): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f00000016c0)={{}, 0x2}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0xe2) (async, rerun: 32) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0x49) (async, rerun: 32) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x5) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x5) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x5) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000005c0)=0x7e) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x1}) 2.019331118s ago: executing program 5 (id=2453): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300)={{r1, r2/1000+60000}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r9, @fallback=0x2f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010360108fdffffff0000020000000000080d84e8f2faf8e5b0b2920db5709f7f85a1117ee2b21672b75085a2892eecb703b22826", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c000a800500080001000000"], 0x38}}, 0x0) fcntl$setlease(r0, 0x400, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000340)=ANY=[@ANYRES64=r3], &(0x7f0000000240)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r11}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r12}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 1.610010336s ago: executing program 4 (id=2455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x0, 0x101, 0x0, 0x100, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, r3, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0xffffffff80000000, 0xfffc, 0x2, 0x6b, 0x2, 0x0, 0x0, 0x0, 0x933}}, 0x50) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r4, 0x932, 0x200000000005) (async) close(r0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000c80)=""/231, 0xd5, 0x0, 0x3, 0x2}}, 0x60) (async, rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.609137302s ago: executing program 4 (id=2456): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x1, [0x1]}, 0x6) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000998000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) 1.520051429s ago: executing program 4 (id=2457): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000e8ff00000000000000000000000000000000000000000000c97b02e6dce26a1fe52731233cec3f1b77a07af6f986071518280b43f7ee6c8c324fd1e9b623702f828c58d4a2f027e26d42d1cfb0e65c8c85a2944b1f8c8bea678a8b38c66d0902a91f1ee04816fc22bd569a250d70ac0ac7db3fbc4a76c655de91ab00cb543ef00e7911c3a21518cd8ae3096c8baf35deb1e4c58442af4f6fa4452791999a1fd8043fca7bfbac8aa03db1aa5161772b2ba6f9b1c76118bfac558f65b7630f2fd41e874a91b726005c01d75a7a9f5a46412c6a2ddb094c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.519645721s ago: executing program 4 (id=2458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) fchdir(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@bridge_newvlan={0x18, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000}, 0x0) (async) gettid() (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = syz_open_dev$audion(&(0x7f0000000080), 0x5, 0x40a00) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) r4 = dup(r2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000088a805001600080014"], 0xfdef) 1.408937062s ago: executing program 4 (id=2460): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="74000000020601030000a80900000000050000000c00078008000800000000400900020073797a"], 0x74}}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, 0x0) r7 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read$FUSE(r7, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2020) read(r3, &(0x7f00000005c0)=""/238, 0xee) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000000)={0x48, 0xfffffffffffffff5, r8, [{0x2, 0xfffffffffffffffd, 0x0, 0x5}, {0x1, 0x7, 0x1, 0x6, ']'}]}, 0x48) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f004b432352ecb83c7cec4c01"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000480)={0x138, 0xffffffffffffffda, r8, [{0x3, 0x9922, 0xb, 0xae, '/dev/loop0\x00'}, {0x5, 0x7fffffff, 0xb, 0x1, '%]/9%-]\'{*\x00'}, {0x3, 0x4, 0x1, 0x401, '#'}, {0x4, 0x8, 0xb, 0xffffffff, '%]/9%-]\'{*\x00'}, {0x2, 0x6a, 0xa, 0xfffffffb, '/dev/fuse\x00'}, {0x1, 0x7, 0xb, 0xfff, '%]/9%-]\'{*\x00'}, {0x4, 0x401, 0x2, 0x4, '$.'}, {0x2, 0x8, 0x1, 0x7fff, '^'}]}, 0x138) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={[&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='{\xd9,\x00', &(0x7f0000000180)='!\x00', &(0x7f0000000200)='rootmode', &(0x7f0000000240)='#,\x00', &(0x7f0000000280)='\x00']}, &(0x7f0000000440)={[&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000340)='/dev/loop0\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\xc8:(\x00', &(0x7f0000000400)='%]/9%-]\'{*\x00']}, 0x400) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r10, 0x112, 0x9, &(0x7f0000001740)=0x64, 0x1) mount$fuseblk(&(0x7f000000aa80), &(0x7f000000aac0)='./file0\x00', &(0x7f000000ab00), 0x4, &(0x7f000000ac40)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}}) 379.582916ms ago: executing program 2 (id=2466): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/113, 0x71}], 0x1, 0x3, 0xd) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x5) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdb7468305f746f5f7465616d0000000800060003000000705e193d456d2705b67ac4929a418f29e23d13eaa037999653139f1da36560b46d1c113d9323622237c49862a4fff08fe258e0fc4def909d6e4fb7d280f1bfe6a0da5321ad53ba1e2508e62b3a760739bd8dd6ab1930"], 0x34}}, 0x4) 378.858692ms ago: executing program 2 (id=2467): syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x102) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000040)={0x1, "07a798e5c4f670768fa82190e0413d1b5a6e6592e09f70bbc8e8861d06ed316332a2dc83001f62c52fbec085f7613de2d4ed6c8828bd3560787ea8544491451c"}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r6}, 0x10) io_setup(0x3, &(0x7f0000000340)) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) madvise(&(0x7f0000fe8000/0x2000)=nil, 0x2000, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 319.915258ms ago: executing program 6 (id=2468): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3f, 0x30, 0xfffc, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @remote, "53f683785c5b987df5ff06000000007ee410f074"}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x8001}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x6}, 0x50) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x91) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) (async) read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) 319.263289ms ago: executing program 6 (id=2469): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0xb0, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_USERDATA={0x9b, 0x6, "c49fff512800195979a63cf6a6d0b94ebcb18934c328b1e7887d4db5e02504f727fff1950401cf89941359f9ebb537a265cd444a8e3637f644e98b55fdf21ff0c9a0dd9084bb1066b16a78f1885076a15798fec4eb798bb7735737b0ddf709c5bf72663b5b0ed3179b5ff925b6d889c28c8c131767134a2b2521fcb84f0cd7e2eedb06cec8eb1a5199a65d2cf06e6cac2ba07cfc7bf45c"}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x140}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x50bd2f, 0xfffffffc, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xb, 0x7, 0x2}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x1004400c) 260.331592ms ago: executing program 6 (id=2470): openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000000)='fd/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendfile(r1, r1, 0x0, 0x3) 259.65406ms ago: executing program 2 (id=2471): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f00006ff000/0x1000)=nil, 0x1000, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x18, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x4000080) r2 = accept4$tipc(r1, 0x0, &(0x7f0000000040), 0x0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) 258.496125ms ago: executing program 6 (id=2472): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r9, @ANYBLOB="01"], 0x20}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r9, @ANYBLOB="01"], 0x20}}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' ,\x00\t\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r11, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 119.558904ms ago: executing program 2 (id=2473): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 119.144917ms ago: executing program 2 (id=2474): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x300, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0x0, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RTT={0x8, 0x7, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000040)=@sg0, r0, &(0x7f0000000200)) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x4, 0xf, 0x3, 0xc0}, {0x8080000, 0x0, 0xe, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x8080000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x7, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x2, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) (async, rerun: 32) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f0000000c40)) listen(r2, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) (async) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) (async, rerun: 32) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x204000, 0x9c) (rerun: 32) bind$alg(r10, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-arm)\x00'}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) (async) close_range(r9, r10, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r9, 0xae80, 0x0) (rerun: 32) 69.557373ms ago: executing program 6 (id=2475): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101a01) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000f40)=0x1, 0x4) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045520, 0x0) 68.901699ms ago: executing program 6 (id=2476): r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20, 0x0) write$snapshot(r1, &(0x7f0000000100)="00dc7573a991f295d3feb1494c4735d63931f747a9868dcb0b7138a79294ffb02785a330311edeb2a566472de8478927c04251dfe2353269d592ad2df84bb57b13", 0x41) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0xe}, @l2cap_cid_le_signaling={{0xa}, @l2cap_ecred_reconf_req={{0x19, 0x60, 0x6}, {0x4, 0x3, [0x3ff]}}}}, 0x13) r2 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x2, 0x30080) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x2}, &(0x7f0000000240)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={r3, 0x7ff}, 0x8) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x53}, "28afca5ef608d1d6149993562d0e60d54995868fff70cf9ac369adeef50c6e5dc25f62aaa7df53b68b9d01e0e58e52dd369762edc699a718907a594dffae9313a777e63108979e45a9148b6e1ae2e09ea8100f"}, 0x57) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r2) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xdc, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x404c085}, 0x20008000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x5) ioctl$int_in(r0, 0x5452, &(0x7f00000006c0)=0x10000) syz_emit_vhci(&(0x7f0000000700)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000740)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4e}, "0e200ab47b0bb7a1f6c2c74f5c5bf25b7ae88bf4b924c8256844b776429a817ecf287c00c0413fdaa141934e59a74db52fee74c883b9fe2a7f8515bec86a1b04c22c3209dfa0bbbe78d972cc74cf"}, 0x52) syz_emit_vhci(&(0x7f00000007c0)=@HCI_VENDOR_PKT, 0x2) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000800), 0x420000, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r7, 0x400c330d, &(0x7f0000000840)={0x1, 0x1}) ioctl$int_in(r2, 0x5421, &(0x7f0000000880)=0xff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000008c0), 0x4) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900), 0xc0a40, 0x0) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000940)=0xe36) syz_emit_vhci(&(0x7f0000000980)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x5}}}}, 0xf) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x54, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6}, {0x8, 0x15, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x240048a4}, 0x20000810) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000b00)={'batadv_slave_1\x00'}) r9 = inotify_init1(0x80000) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000000b40)) 0s ago: executing program 2 (id=2477): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000380)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3, 0xbe}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f0000000040)="260000000300060000071a800100613f", 0x10) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x3, 0x3a0, 0x83}, 0x48) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000340), 0x8) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0x10000008ebc, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r4, 0x8004af70, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e23, @remote}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, {0x2, 0x4e21, @broadcast}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) kernel console output (not intermixed with test programs): Enslaving as an active interface with an up link [ 208.814358][ T5998] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 208.821308][ T5998] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 208.821647][T16041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.824660][ T5998] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.831365][ T5998] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.835740][ T5998] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.838682][ T5998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.859210][ T64] Bluetooth: hci2: command tx timeout [ 208.888195][T16041] team0: Port device team_slave_0 added [ 208.897888][T16041] team0: Port device team_slave_1 added [ 208.978907][T16041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.981772][T16041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.993629][T16041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.003017][T16041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.005818][T16041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.014606][T16041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.054004][ T5998] usb 7-1: GET_CAPABILITIES returned 0 [ 209.056247][ T5998] usbtmc 7-1:16.0: can't read capabilities [ 209.077775][T16041] hsr_slave_0: entered promiscuous mode [ 209.081961][T16041] hsr_slave_1: entered promiscuous mode [ 209.085187][T16041] debugfs: 'hsr0' already exists in 'hsr' [ 209.087440][T16041] Cannot create hsr debugfs directory [ 209.280009][ C3] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 209.292190][T16032] usbtmc 7-1:16.0: Unable to send data, error -71 [ 209.304069][ T5985] usb 7-1: USB disconnect, device number 25 [ 209.321270][ T40] audit: type=1400 audit(1763947996.802:729): avc: denied { ioctl } for pid=17059 comm="syz.1.1548" path="socket:[53972]" dev="sockfs" ino=53972 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 209.406074][ T40] audit: type=1400 audit(1763947996.882:730): avc: denied { connect } for pid=17070 comm="syz.1.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.497828][T17080] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 209.507896][T17080] CIFS mount error: No usable UNC path provided in device string! [ 209.507896][T17080] [ 209.512660][T17080] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 209.585307][ T40] audit: type=1400 audit(1763947997.062:731): avc: denied { bind } for pid=17089 comm="syz.1.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 209.586707][T17089] delete_channel: no stack [ 209.718912][T16041] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 209.732897][T16041] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 209.740310][T16041] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 209.760674][T16041] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 209.836507][T16041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.845391][T17123] loop2: detected capacity change from 0 to 7 [ 209.849992][T17123] Dev loop2: unable to read RDB block 7 [ 209.852424][T17123] loop2: AHDI p1 p2 p3 [ 209.854254][T17123] loop2: partition table partially beyond EOD, truncated [ 209.858304][T17123] loop2: p1 start 1601398130 is beyond EOD, truncated [ 209.862125][T17123] loop2: p2 start 1702059890 is beyond EOD, truncated [ 209.872312][T17122] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1559'. [ 209.874778][T16041] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.876070][T17122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1559'. [ 209.880271][ T5985] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 209.882903][T17122] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1559'. [ 209.887434][T10040] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.889991][T17122] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1559'. [ 209.892584][T10040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.906376][T10040] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.909665][T10040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.053020][T16041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.078845][ T5985] usb 6-1: Using ep0 maxpacket: 8 [ 210.082959][ T5985] usb 6-1: config 0 has no interfaces? [ 210.087648][ T5985] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 210.091825][ T5985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.100737][ T5985] usb 6-1: config 0 descriptor?? [ 210.207162][T16041] veth0_vlan: entered promiscuous mode [ 210.212739][T16041] veth1_vlan: entered promiscuous mode [ 210.227418][T16041] veth0_macvtap: entered promiscuous mode [ 210.234345][T16041] veth1_macvtap: entered promiscuous mode [ 210.243339][T16041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.254566][T16041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.262792][T10040] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.266588][T10040] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.271349][T10040] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.275276][T10040] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.334366][T10040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.338377][T10040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.365055][T10042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.367822][T10042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.425403][ T40] audit: type=1400 audit(1763947997.902:732): avc: denied { bind } for pid=17160 comm="syz.5.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.432542][T17161] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 210.435754][T17161] overlayfs: failed to set xattr on upper [ 210.438427][T17161] overlayfs: ...falling back to redirect_dir=nofollow. [ 210.442194][T17161] overlayfs: ...falling back to metacopy=off. [ 210.444816][T17161] overlayfs: ...falling back to index=off. [ 210.447471][T17161] overlayfs: ...falling back to uuid=null. [ 210.452052][T17161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1006'. [ 210.457730][T17161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1006'. [ 210.512199][T17096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.515542][T17096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.527831][ T939] usb 6-1: USB disconnect, device number 22 [ 210.539186][ T64] Bluetooth: hci3: command tx timeout [ 210.873739][T17183] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 210.952274][ T64] Bluetooth: hci2: command tx timeout [ 211.007193][T17192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1565'. [ 211.020019][T17192] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1565'. [ 211.048623][ T5941] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.058275][ T5941] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.064496][ T5941] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.074161][ T5941] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.076933][ T5941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.146867][T17234] loop2: detected capacity change from 0 to 7 [ 211.150910][T17234] Dev loop2: unable to read RDB block 7 [ 211.153495][T17234] loop2: AHDI p1 p2 p3 [ 211.156278][T17234] loop2: partition table partially beyond EOD, truncated [ 211.160180][T17234] loop2: p1 start 1601398130 is beyond EOD, truncated [ 211.162427][T17234] loop2: p2 start 1702059890 is beyond EOD, truncated [ 211.309921][T17194] chnl_net:caif_netlink_parms(): no params data found [ 211.414009][T17471] program syz.1.1574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.417549][T17471] ata1.00: invalid command format 0 [ 211.451148][T17194] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.453834][T17194] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.456404][T17194] bridge_slave_0: entered allmulticast mode [ 211.460993][T17194] bridge_slave_0: entered promiscuous mode [ 211.466801][T17194] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.470428][T17194] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.472783][T17194] bridge_slave_1: entered allmulticast mode [ 211.475446][T17194] bridge_slave_1: entered promiscuous mode [ 211.513334][T17606] CUSE: unknown device info "" [ 211.514968][T17606] CUSE: zero length info key specified [ 211.537850][T17194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.544882][T17194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.661671][ T40] audit: type=1400 audit(1763947999.142:733): avc: denied { accept } for pid=17784 comm="syz.5.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 211.662652][T17194] team0: Port device team_slave_0 added [ 211.677059][T17194] team0: Port device team_slave_1 added [ 211.756980][T17194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.766762][T17194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.778924][T17194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.792292][T17194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.794523][T17194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.804010][T17194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.886288][T17194] hsr_slave_0: entered promiscuous mode [ 211.888635][T17194] hsr_slave_1: entered promiscuous mode [ 211.890965][T17194] debugfs: 'hsr0' already exists in 'hsr' [ 211.892818][T17194] Cannot create hsr debugfs directory [ 211.968988][T18183] netlink: 'syz.5.1587': attribute type 3 has an invalid length. [ 212.008332][T18207] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20003 [ 212.023587][T18240] loop2: detected capacity change from 0 to 7 [ 212.030115][T18240] Dev loop2: unable to read RDB block 7 [ 212.031909][T18240] loop2: AHDI p1 p2 p3 [ 212.033254][T18240] loop2: partition table partially beyond EOD, truncated [ 212.035910][T18240] loop2: p1 start 1601398130 is beyond EOD, truncated [ 212.038175][T18240] loop2: p2 start 1702059890 is beyond EOD, truncated [ 212.156964][T18292] binder: 18289:18292 unknown command 0 [ 212.159237][T18292] binder: 18289:18292 ioctl c0306201 200000000080 returned -22 [ 212.184422][T17194] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.192017][T17194] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.246384][ T40] audit: type=1400 audit(1763947999.722:734): avc: denied { setopt } for pid=18308 comm="syz.1.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 212.265723][T18312] loop2: detected capacity change from 0 to 7 [ 212.269707][T18312] Dev loop2: unable to read RDB block 7 [ 212.272400][T18312] loop2: AHDI p1 p2 p3 [ 212.273756][T18312] loop2: partition table partially beyond EOD, truncated [ 212.276238][T18312] loop2: p1 start 1601398130 is beyond EOD, truncated [ 212.279574][T18312] loop2: p2 start 1702059890 is beyond EOD, truncated [ 212.295767][T17194] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.300113][T17194] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.316352][T18314] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 212.321239][T18314] tmpfs: Bad value for 'mpol' [ 212.388111][T17194] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.397327][T17194] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.402558][T18341] overlayfs: failed to resolve './bus': -2 [ 212.432882][T18349] bridge_slave_0: left allmulticast mode [ 212.434776][T18349] bridge_slave_0: left promiscuous mode [ 212.436736][T18349] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.552066][T17194] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.557039][T17194] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.569358][T18363] loop2: detected capacity change from 0 to 7 [ 212.572549][T18363] Dev loop2: unable to read RDB block 7 [ 212.574337][T18363] loop2: AHDI p1 p2 p3 [ 212.575740][T18363] loop2: partition table partially beyond EOD, truncated [ 212.578277][T18363] loop2: p1 start 1601398130 is beyond EOD, truncated [ 212.581332][T18363] loop2: p2 start 1702059890 is beyond EOD, truncated [ 212.628929][ T64] Bluetooth: hci3: command tx timeout [ 212.782643][T17194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 212.787210][T17194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 212.792194][T17194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 212.796271][T17194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 212.800162][T18411] loop2: detected capacity change from 0 to 7 [ 212.802859][T18411] Dev loop2: unable to read RDB block 7 [ 212.804626][T18411] loop2: AHDI p1 p2 p3 [ 212.805949][T18411] loop2: partition table partially beyond EOD, truncated [ 212.809810][T18411] loop2: p1 start 1601398130 is beyond EOD, truncated [ 212.811960][T18411] loop2: p2 start 1702059890 is beyond EOD, truncated [ 212.886949][T17194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.897982][T17194] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.904193][T10051] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.907265][T10051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.915471][T10051] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.918534][T10051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.056410][T17194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.087448][T17194] veth0_vlan: entered promiscuous mode [ 213.094587][T17194] veth1_vlan: entered promiscuous mode [ 213.099014][ T64] Bluetooth: hci4: command tx timeout [ 213.120877][T17194] veth0_macvtap: entered promiscuous mode [ 213.126691][T17194] veth1_macvtap: entered promiscuous mode [ 213.143942][T17194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.150682][T17194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.158521][T10045] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.162173][T10045] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.165568][T10045] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.168404][T10045] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.214022][T10042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.220403][T10042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.238075][T10042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.241853][T10042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.522063][T18370] overlayfs: statfs failed on './file0' [ 213.609102][T18510] usb usb8: usbfs: process 18510 (syz.2.1620) did not claim interface 0 before use [ 213.686337][T18515] loop2: detected capacity change from 0 to 7 [ 213.690943][T18515] Dev loop2: unable to read RDB block 7 [ 213.693119][T18515] loop2: AHDI p1 p2 p3 [ 213.695210][T18515] loop2: partition table partially beyond EOD, truncated [ 213.698244][T18515] loop2: p1 start 1601398130 is beyond EOD, truncated [ 213.701069][T18515] loop2: p2 start 1702059890 is beyond EOD, truncated [ 213.922353][T18526] team0 (unregistering): Port device team_slave_0 removed [ 213.927165][T18526] team0 (unregistering): Port device team_slave_1 removed [ 213.948135][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.954558][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.964998][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.970167][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.973430][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.188317][T18532] chnl_net:caif_netlink_parms(): no params data found [ 214.350545][T18532] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.353121][T18532] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.355617][T18532] bridge_slave_0: entered allmulticast mode [ 214.360008][T18532] bridge_slave_0: entered promiscuous mode [ 214.364451][T18532] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.366955][T18532] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.369644][T18532] bridge_slave_1: entered allmulticast mode [ 214.373120][T18532] bridge_slave_1: entered promiscuous mode [ 214.433688][T18532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.445745][T18532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.464671][T19013] tls_set_device_offload_rx: netdev not found [ 214.520585][T18532] team0: Port device team_slave_0 added [ 214.523904][T18532] team0: Port device team_slave_1 added [ 214.601986][T18532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.606090][T18532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.612421][T19268] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 214.614535][T18532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.625210][T18532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.627647][T18532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.641177][T18532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.698976][ T5941] Bluetooth: hci3: command tx timeout [ 214.732886][T18532] hsr_slave_0: entered promiscuous mode [ 214.736854][T18532] hsr_slave_1: entered promiscuous mode [ 214.742903][T18532] debugfs: 'hsr0' already exists in 'hsr' [ 214.743159][T19445] use of bytesused == 0 is deprecated and will be removed in the future, [ 214.744896][T18532] Cannot create hsr debugfs directory [ 214.752910][T19445] use the actual size instead. [ 214.878955][T10041] veth0_to_bridge: left allmulticast mode [ 214.881259][T10041] veth0_to_bridge: left promiscuous mode [ 214.883196][T10041] bridge0: port 3(veth0_to_bridge) entered disabled state [ 214.887254][T10041] bridge_slave_0: left allmulticast mode [ 214.891251][T10041] bridge_slave_0: left promiscuous mode [ 214.893057][T10041] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.940160][ T5941] Bluetooth: hci2: command tx timeout [ 215.049734][T10041] bond1 (unregistering): (slave geneve2): Releasing active interface [ 215.097969][T19615] netlink: 'syz.2.1650': attribute type 8 has an invalid length. [ 215.101443][T19615] __nla_validate_parse: 13 callbacks suppressed [ 215.101454][T19615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 215.178974][ T5941] Bluetooth: hci4: command tx timeout [ 215.441603][T10041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.445597][T10041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.450970][T10041] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 215.455902][T10041] bond0 (unregistering): Released all slaves [ 215.531870][T10041] bond1 (unregistering): Released all slaves [ 215.541410][T10041] bond2 (unregistering): Released all slaves [ 215.548123][T10041] bond3 (unregistering): Released all slaves [ 215.626757][T10041] bond4 (unregistering): Released all slaves [ 215.719461][T10041] bond5 (unregistering): (slave veth3): Releasing backup interface [ 215.723536][T10041] veth3: left promiscuous mode [ 215.727140][T10041] bond5 (unregistering): Released all slaves [ 215.819566][T10041] bond6 (unregistering): Released all slaves [ 215.825703][T10041] bond7 (unregistering): Released all slaves [ 215.832222][T10041] bond8 (unregistering): Released all slaves [ 215.838664][T10041] bond9 (unregistering): Released all slaves [ 215.866167][T19615] bond0: entered promiscuous mode [ 215.868399][T19615] bond_slave_0: entered promiscuous mode [ 215.871185][T19615] bond_slave_1: entered promiscuous mode [ 215.879855][T19615] gretap0: entered promiscuous mode [ 215.888528][T19615] bond0: left promiscuous mode [ 215.891521][T19615] bond_slave_0: left promiscuous mode [ 215.894110][T19615] bond_slave_1: left promiscuous mode [ 215.898815][T19615] gretap0: left promiscuous mode [ 216.006620][ T40] audit: type=1400 audit(1763948003.482:735): avc: denied { append } for pid=19632 comm="syz.4.1654" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 216.018272][ T40] audit: type=1400 audit(1763948003.492:736): avc: denied { read } for pid=19632 comm="syz.4.1654" dev="sockfs" ino=58534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.047871][T10041] tipc: Left network mode [ 216.061312][ T5941] Bluetooth: hci1: command tx timeout [ 216.095991][ T40] audit: type=1400 audit(1763948003.572:737): avc: denied { bind } for pid=19650 comm="syz.4.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 216.207703][T10041] hsr_slave_0: left promiscuous mode [ 216.211404][T10041] hsr_slave_1: left promiscuous mode [ 216.213521][T10041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.216331][T10041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.223131][T19744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1660'. [ 216.509900][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.526509][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.531323][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.536606][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.547355][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.810079][T10041] team0 (unregistering): Port device team_slave_1 removed [ 216.832112][ T1126] sr 2:0:0:0: [sr0] tag#1 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 216.835380][ T1126] sr 2:0:0:0: [sr0] tag#1 Sense Key : Illegal Request [current] [ 216.837916][ T1126] sr 2:0:0:0: [sr0] tag#1 Add. Sense: Invalid command operation code [ 216.840726][ T1126] sr 2:0:0:0: [sr0] tag#1 CDB: Write(10) 2a 00 00 00 00 00 00 00 20 00 [ 216.848167][ T1126] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 2 [ 216.852976][ T1126] buffer_io_error: 44 callbacks suppressed [ 216.852986][ T1126] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 216.857969][ T1126] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 216.860627][ T1126] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 216.863168][ T1126] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 216.865647][ T1126] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 216.868233][ T1126] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 216.870937][ T1126] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 216.873493][ T1126] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 216.876403][ T1126] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 216.878999][ T1126] Buffer I/O error on dev sr0, logical block 9, lost async page write [ 216.900847][T10041] team0 (unregistering): Port device team_slave_0 removed [ 217.134812][T19757] fuse: Bad value for 'fd' [ 217.258030][T19765] netlink: 'syz.4.1665': attribute type 1 has an invalid length. [ 217.268909][ T5941] Bluetooth: hci4: command tx timeout [ 217.446495][T19766] bond2: (slave geneve2): making interface the new active one [ 217.449377][T19766] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 217.454167][T10050] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 217.457066][T10050] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 217.471330][T10050] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 217.475484][T10043] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 217.570099][ T40] audit: type=1400 audit(1763948005.042:738): avc: denied { listen } for pid=19833 comm="syz.4.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 217.681547][T19930] support for the xor transformation has been removed. [ 217.691244][T19746] chnl_net:caif_netlink_parms(): no params data found [ 217.854127][T19746] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.856981][T19746] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.860898][T19746] bridge_slave_0: entered allmulticast mode [ 217.863964][T19746] bridge_slave_0: entered promiscuous mode [ 217.867677][T19746] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.870221][T19746] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.872549][T19746] bridge_slave_1: entered allmulticast mode [ 217.875159][T19746] bridge_slave_1: entered promiscuous mode [ 217.933525][T19746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.938265][T19746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.992830][T19746] team0: Port device team_slave_0 added [ 217.996687][T19746] team0: Port device team_slave_1 added [ 218.038861][T19746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.041682][T19746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.052172][T19746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.058498][T19746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.062962][T19746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.072227][T19746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.126696][T19746] hsr_slave_0: entered promiscuous mode [ 218.130580][T19746] hsr_slave_1: entered promiscuous mode [ 218.132710][T19746] debugfs: 'hsr0' already exists in 'hsr' [ 218.134559][T19746] Cannot create hsr debugfs directory [ 218.138969][ T5941] Bluetooth: hci1: command tx timeout [ 218.619033][ T5941] Bluetooth: hci0: command tx timeout [ 219.338859][ T5941] Bluetooth: hci4: command tx timeout [ 219.971853][T19746] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.077966][T19746] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.152746][T19746] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.229360][ T5941] Bluetooth: hci1: command tx timeout [ 220.239618][T19746] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.373520][T19746] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 220.378484][T19746] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 220.390114][T19746] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 220.394381][T19746] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 220.444755][T18532] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 220.453555][T18532] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 220.457821][T18532] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 220.462633][T18532] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 220.507406][T19746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.528214][T19746] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.536144][T10054] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.538516][T10054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.548298][T10041] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.551423][T10041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.559100][T18532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.579801][T18532] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.590534][T10041] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.593392][T10041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.602090][T10040] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.605214][T10040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.642236][T18532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.700973][ T5941] Bluetooth: hci0: command tx timeout [ 220.732965][T19746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.735734][T20902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1680'. [ 220.750068][T18532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.774257][T18532] veth0_vlan: entered promiscuous mode [ 220.781348][T18532] veth1_vlan: entered promiscuous mode [ 220.797366][T18532] veth0_macvtap: entered promiscuous mode [ 220.803023][T18532] veth1_macvtap: entered promiscuous mode [ 220.816154][T18532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.825693][T18532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.834081][T10050] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.836821][T10050] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.840721][T10050] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.844997][T10050] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.852757][T20912] 9pnet_fd: Insufficient options for proto=fd [ 220.887831][T10050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.890464][T10050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.913337][T10054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.916867][T10054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.929972][T19746] veth0_vlan: entered promiscuous mode [ 220.934862][ T40] audit: type=1400 audit(2000000003.189:739): avc: denied { write } for pid=18532 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 220.935627][T19746] veth1_vlan: entered promiscuous mode [ 220.944063][ T40] audit: type=1400 audit(2000000003.189:740): avc: denied { open } for pid=18532 comm="syz-executor" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 220.963914][T19746] veth0_macvtap: entered promiscuous mode [ 220.967962][T19746] veth1_macvtap: entered promiscuous mode [ 220.976939][T19746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.982974][T19746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.988590][T10050] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.992318][T10050] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.999529][T10050] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.003332][T10050] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.053566][T10051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.056589][T10051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.086247][T10041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.089148][T10041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.123607][T20939] program syz.1.1682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.126722][T20939] ata1.00: invalid command format 7 [ 221.170256][ T40] audit: type=1400 audit(2000000003.429:741): avc: denied { write } for pid=20942 comm="syz.1.1683" lport=42386 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 221.421582][ T40] audit: type=1400 audit(2000000003.679:742): avc: denied { read } for pid=20950 comm="syz.1.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 221.467088][T20953] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1687'. [ 221.567044][T20959] overlayfs: workdir and upperdir must reside under the same mount [ 221.612360][T20961] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1689'. [ 221.622910][T20966] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 221.626430][T20966] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 221.870355][T21001] netlink: 'syz.2.1702': attribute type 10 has an invalid length. [ 221.872961][T21001] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1702'. [ 221.876043][T21001] team0: entered promiscuous mode [ 221.878004][T21001] team_slave_0: entered promiscuous mode [ 221.881346][T21001] team_slave_1: entered promiscuous mode [ 221.883496][T21001] bridge0: port 3(team0) entered blocking state [ 221.886411][T21001] bridge0: port 3(team0) entered disabled state [ 221.888913][T21001] team0: entered allmulticast mode [ 221.890932][T21001] team_slave_0: entered allmulticast mode [ 221.893363][T21001] team_slave_1: entered allmulticast mode [ 221.901705][T21001] bridge0: port 3(team0) entered blocking state [ 221.904373][T21001] bridge0: port 3(team0) entered forwarding state [ 221.907542][T21001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1702'. [ 222.024875][T21018] futex_wake_op: syz.1.1707 tries to shift op by -1; fix this program [ 222.079573][ T40] audit: type=1400 audit(2000000004.339:743): avc: denied { execute_no_trans } for pid=21015 comm="syz.4.1706" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=60543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 222.140574][T21035] vxcan1: tx address claim with dlc 0 [ 222.156977][T21037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.159661][T21037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.162855][T21037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.165482][T21037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.182989][T21041] loop2: detected capacity change from 0 to 7 [ 222.186483][T11263] Dev loop2: unable to read RDB block 7 [ 222.188633][T11263] loop2: AHDI p1 p2 p3 [ 222.193372][T11263] loop2: partition table partially beyond EOD, truncated [ 222.196589][T11263] loop2: p1 start 1601398130 is beyond EOD, truncated [ 222.199032][T11263] loop2: p2 start 1702059890 is beyond EOD, truncated [ 222.202870][T21041] Dev loop2: unable to read RDB block 7 [ 222.204688][T21041] loop2: AHDI p1 p2 p3 [ 222.206137][T21041] loop2: partition table partially beyond EOD, truncated [ 222.209067][T21041] loop2: p1 start 1601398130 is beyond EOD, truncated [ 222.211197][T21041] loop2: p2 start 1702059890 is beyond EOD, truncated [ 222.272073][T21056] netlink: 'syz.4.1716': attribute type 9 has an invalid length. [ 222.308960][ T5941] Bluetooth: hci1: command tx timeout [ 222.410030][T21062] random: crng reseeded on system resumption [ 222.427388][T10043] Bluetooth: hci3: Frame reassembly failed (-84) [ 222.450513][T21069] IPVS: set_ctl: invalid protocol: 46 172.20.20.42:20004 [ 222.505889][ T40] audit: type=1400 audit(2000000004.759:744): avc: denied { connect } for pid=21074 comm="syz.2.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 222.779799][ T64] Bluetooth: hci0: command tx timeout [ 222.948468][T21089] loop2: detected capacity change from 0 to 7 [ 222.952284][T21089] Dev loop2: unable to read RDB block 7 [ 222.954280][T21089] loop2: AHDI p1 p2 p3 [ 222.955640][T21089] loop2: partition table partially beyond EOD, truncated [ 222.958914][T21089] loop2: p1 start 1601398130 is beyond EOD, truncated [ 222.961126][T21089] loop2: p2 start 1702059890 is beyond EOD, truncated [ 223.000481][T21100] netlink: 'syz.2.1725': attribute type 10 has an invalid length. [ 223.002965][T21100] macvlan1: entered allmulticast mode [ 223.004775][T21100] veth1_vlan: entered allmulticast mode [ 223.006689][T21100] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 223.448838][ T842] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 223.608863][ T842] usb 7-1: Using ep0 maxpacket: 8 [ 223.612932][ T842] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.616884][ T842] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.621322][ T842] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.625210][ T842] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.631043][ T842] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.633941][ T842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.841544][ T842] usb 7-1: GET_CAPABILITIES returned 0 [ 223.843365][ T842] usbtmc 7-1:16.0: can't read capabilities [ 224.012539][T21157] mkiss: ax0: crc mode is auto. [ 224.034671][T21165] overlay: Bad value for 'verity' [ 224.034708][ T40] audit: type=1400 audit(2000000006.289:745): avc: denied { mounton } for pid=21154 comm="syz.5.1732" path="/5/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 224.042838][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.052091][ T6016] usb 7-1: USB disconnect, device number 26 [ 224.084430][T21158] sp0: Synchronizing with TNC [ 224.146667][T21157] mkiss: ax0: crc mode is auto. [ 224.211499][T21158] sp0: Synchronizing with TNC [ 224.283090][T21157] mkiss: ax0: crc mode is auto. [ 224.342271][T21158] sp0: Synchronizing with TNC [ 224.402565][T21157] mkiss: ax0: crc mode is auto. [ 224.458977][ T64] Bluetooth: hci3: command 0xfc11 tx timeout [ 224.462455][ T5941] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 224.472727][T21158] sp0: Synchronizing with TNC [ 224.598013][T21227] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 224.614139][T21157] mkiss: ax0: crc mode is auto. [ 224.676606][T21158] sp0: Synchronizing with TNC [ 224.736128][T21252] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1737'. [ 224.743401][T21252] tipc: Invalid UDP bearer configuration [ 224.743443][T21252] tipc: Enabling of bearer rejected, failed to enable media [ 224.760104][T21157] mkiss: ax0: crc mode is auto. [ 224.790746][ T40] audit: type=1400 audit(2000000007.049:746): avc: denied { write } for pid=21259 comm="syz.4.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 224.825017][T21158] sp0: Synchronizing with TNC [ 224.831433][ T40] audit: type=1400 audit(2000000007.089:747): avc: denied { create } for pid=21267 comm="syz.4.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 224.842639][ T40] audit: type=1400 audit(2000000007.089:748): avc: denied { bind } for pid=21267 comm="syz.4.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 224.863766][ T40] audit: type=1400 audit(2000000007.109:749): avc: denied { connect } for pid=21275 comm="syz.5.1739" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 224.869132][ T5941] Bluetooth: hci0: command tx timeout [ 224.874676][T21269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5126 sclass=netlink_route_socket pid=21269 comm=syz.4.1738 [ 224.904284][T21284] ALSA: mixer_oss: invalid OSS volume 'IGAgN' [ 224.906429][T21284] ALSA: mixer_oss: invalid OSS volume 'IM' [ 224.937904][T21157] mkiss: ax0: crc mode is auto. [ 224.937914][T21287] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1742'. [ 224.942963][T21287] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1742'. [ 225.026793][T21298] overlayfs: failed to get inode (-116) [ 225.029516][T21298] overlayfs: failed to get inode (-116) [ 225.032288][T21298] overlayfs: failed to get inode (-116) [ 225.034530][T21298] overlayfs: failed to get inode (-116) [ 225.051593][T21158] sp0: Synchronizing with TNC [ 225.074617][T21309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=21309 comm=syz.5.1745 [ 225.126783][ T40] audit: type=1400 audit(2000000007.379:750): avc: denied { accept } for pid=21316 comm="syz.1.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 225.134761][ T40] audit: type=1400 audit(2000000007.379:751): avc: denied { create } for pid=21316 comm="syz.1.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 225.156872][ T40] audit: type=1400 audit(2000000007.409:752): avc: denied { write } for pid=21323 comm="syz.4.1749" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 225.165231][T21326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1750'. [ 225.167134][ T40] audit: type=1400 audit(2000000007.419:753): avc: denied { accept } for pid=21323 comm="syz.4.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 225.168568][T21326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1750'. [ 225.276107][T21351] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 225.359735][T21355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.364798][T21355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.370877][T21355] bond0 (unregistering): Released all slaves [ 225.399700][T21351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.440583][T21395] netlink: 'syz.1.1758': attribute type 9 has an invalid length. [ 225.482955][ T5941] Bluetooth: to_multiplier 54284 > 3200 [ 226.009955][T21450] xt_connbytes: Forcing CT accounting to be enabled [ 226.012600][T21450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.019616][ T34] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 226.165879][T21471] __nla_validate_parse: 66 callbacks suppressed [ 226.165891][T21471] netlink: 98 bytes leftover after parsing attributes in process `syz.5.1772'. [ 226.171022][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 226.175682][ T34] usb 6-1: unable to get BOS descriptor or descriptor too short [ 226.180111][ T34] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 32 [ 226.184191][ T34] usb 6-1: config 1 interface 0 has no altsetting 0 [ 226.188518][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.191750][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.194385][ T34] usb 6-1: Product: syz [ 226.195733][ T34] usb 6-1: Manufacturer: syz [ 226.197223][ T34] usb 6-1: SerialNumber: syz [ 226.201883][T21464] /dev/sr0: Can't open blockdev [ 226.204108][T21415] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 226.235073][T21484] program syz.5.1777 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.242874][T21484] QAT: Stopping all acceleration devices. [ 226.293947][T21486] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 226.300466][T10040] Bluetooth: hci3: Frame reassembly failed (-84) [ 226.320741][T21491] binder_alloc: 21489: binder_alloc_buf, no vma [ 226.414521][ T40] audit: type=1400 audit(2000000008.669:754): avc: denied { accept } for pid=21499 comm="syz.2.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.416833][ T34] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 226.429962][ T34] usb 6-1: USB disconnect, device number 23 [ 226.788966][ T5998] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 226.960769][ T5998] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 226.964484][ T5998] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 226.968287][ T5998] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 226.972647][ T5998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.976999][T21523] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 226.980458][T21523] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 226.986494][ T5998] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 227.189099][T21555] xt_ipcomp: unknown flags 1D [ 227.209281][ T5998] usb 7-1: USB disconnect, device number 27 [ 227.247779][T21555] netlink: 'syz.1.1789': attribute type 4 has an invalid length. [ 227.251251][T21555] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1789'. [ 227.334570][T21587] netlink: 'syz.2.1792': attribute type 1 has an invalid length. [ 227.337122][T21587] netlink: 'syz.2.1792': attribute type 2 has an invalid length. [ 227.367383][T21592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1793'. [ 227.371428][T21592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1793'. [ 227.440879][T21601] 9pnet_fd: Insufficient options for proto=fd [ 227.461828][T21604] bridge_slave_0: left allmulticast mode [ 227.464366][T21604] bridge_slave_0: left promiscuous mode [ 227.467433][T21604] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.478963][T21604] bridge_slave_1: left allmulticast mode [ 227.481122][T21604] bridge_slave_1: left promiscuous mode [ 227.483258][T21604] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.497264][T21604] bond0: (slave bond_slave_0): Releasing backup interface [ 227.503222][T21604] bond0: (slave bond_slave_1): Releasing backup interface [ 227.508611][T21608] netlink: 'syz.1.1796': attribute type 10 has an invalid length. [ 227.509268][ T64] Bluetooth: hci4: command tx timeout [ 227.510049][T21604] team0: Port device team_slave_0 removed [ 227.518625][T21604] team0: Port device team_slave_1 removed [ 227.524619][T21604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.527281][T21604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.531731][T21604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.534135][T21604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.537987][T21604] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 227.570866][T21608] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 227.686961][T21623] hpfs: Bad magic ... probably not HPFS [ 227.728311][T21626] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1802'. [ 227.754082][T21630] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1799'. [ 227.758449][T21630] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1799'. [ 228.006871][T21645] netlink: 'syz.2.1806': attribute type 10 has an invalid length. [ 228.017543][T21645] dummy0: entered promiscuous mode [ 228.019794][T21645] dummy0: entered allmulticast mode [ 228.021835][T21645] team0: Port device dummy0 added [ 228.025390][T21645] tipc: Started in network mode [ 228.027008][T21645] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 228.031135][T21645] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 228.033797][T21645] tipc: Enabled bearer , priority 10 [ 228.036856][T21646] netlink: 'syz.2.1806': attribute type 10 has an invalid length. [ 228.037274][T21645] tipc: Enabling of bearer rejected, already enabled [ 228.212462][T21664] Bluetooth: MGMT ver 1.23 [ 228.309046][ T64] Bluetooth: hci3: command 0x1003 tx timeout [ 228.309060][ T5941] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 228.514336][T21689] loop2: detected capacity change from 0 to 7 [ 228.518701][T21689] Dev loop2: unable to read RDB block 7 [ 228.521175][T21689] loop2: AHDI p1 p2 p3 [ 228.523262][T21689] loop2: partition table partially beyond EOD, truncated [ 228.526940][T21689] loop2: p1 start 1601398130 is beyond EOD, truncated [ 228.531050][T21689] loop2: p2 start 1702059890 is beyond EOD, truncated [ 228.747496][T21699] netlink: 'syz.1.1818': attribute type 21 has an invalid length. [ 228.751272][T21699] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1818'. [ 228.793394][T21705] EXT4-fs (sr0): unable to read superblock [ 228.876072][T21718] xt_TCPMSS: Only works on TCP SYN packets [ 228.972466][T21727] hfsplus: unable to find HFS+ superblock [ 229.028631][T21729] binder: BINDER_SET_CONTEXT_MGR already set [ 229.039714][T21729] binder: 21728:21729 ioctl 4018620d 200000004a80 returned -16 [ 229.045939][T21733] xt_l2tp: v2 doesn't support IP mode [ 229.105538][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 229.105549][ T40] audit: type=1400 audit(2000000011.359:760): avc: denied { ioctl } for pid=21737 comm="syz.1.1828" path="socket:[61795]" dev="sockfs" ino=61795 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 229.150673][ T5998] tipc: Node number set to 1 [ 229.198813][ T40] audit: type=1400 audit(2000000011.429:761): avc: denied { accept } for pid=21740 comm="syz.5.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 229.235301][T21763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1833'. [ 229.315180][T21774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21774 comm=syz.5.1838 [ 229.319538][T21774] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1838'. [ 229.321175][ T40] audit: type=1800 audit(2000000011.579:762): pid=21768 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1836" name="file0" dev="9p" ino=71827613 res=0 errno=0 [ 229.332590][T21768] netfs: Couldn't get user pages (rc=-14) [ 229.564131][T21857] isofs_fill_super: bread failed, dev=sr0, iso_blknum=16, block=16 [ 229.572745][T21857] input: syz1 as /devices/virtual/input/input42 [ 229.628824][ T2297] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 229.811985][ T2297] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 229.815084][ T2297] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.817704][ T2297] usb 10-1: Product: syz [ 229.819427][ T2297] usb 10-1: Manufacturer: syz [ 229.821269][ T2297] usb 10-1: SerialNumber: syz [ 229.830086][ T2297] usb 10-1: config 0 descriptor?? [ 230.040393][T21774] SELinux: syz.5.1838 (21774) set checkreqprot to 1. This is no longer supported. [ 230.045298][ T40] audit: type=1400 audit(2000000012.299:763): avc: denied { setcheckreqprot } for pid=21773 comm="syz.5.1838" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 230.736471][ T29] usb 10-1: USB disconnect, device number 2 [ 230.810568][ T40] audit: type=1400 audit(2000000013.069:764): avc: denied { bind } for pid=21902 comm="syz.1.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 230.817495][ T40] audit: type=1400 audit(2000000013.069:765): avc: denied { connect } for pid=21902 comm="syz.1.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 230.855693][ T34] IPVS: starting estimator thread 0... [ 230.856833][ T40] audit: type=1400 audit(2000000013.109:766): avc: denied { remount } for pid=21909 comm="syz.2.1850" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 230.876773][T21913] program syz.4.1851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.925415][T21922] netlink: 'syz.2.1854': attribute type 29 has an invalid length. [ 230.928936][T21922] netlink: 'syz.2.1854': attribute type 29 has an invalid length. [ 230.949008][T21911] IPVS: using max 42 ests per chain, 100800 per kthread [ 230.969290][T21929] netlink: 'syz.4.1856': attribute type 1 has an invalid length. [ 231.001480][T21929] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 231.005126][T21929] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 231.049648][T21977] bridge2: entered promiscuous mode [ 231.054823][T21977] bond3: (slave bridge2): Enslaving as an active interface with a down link [ 231.223560][ T40] audit: type=1400 audit(2000000013.479:767): avc: denied { getopt } for pid=21988 comm="syz.2.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 231.230426][T21989] tmpfs: Cannot change global quota limit on remount [ 231.265042][T10040] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.292773][T21993] overlay: ./bus is not a directory [ 231.355452][T10040] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.411099][ T40] audit: type=1400 audit(2000000013.669:768): avc: denied { setopt } for pid=21997 comm="syz.5.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 231.452828][T10040] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.462123][ T40] audit: type=1400 audit(2000000013.719:769): avc: granted { setsecparam } for pid=22004 comm="syz.5.1866" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 231.499234][T22009] bond0: entered allmulticast mode [ 231.501468][T22009] bond_slave_0: entered allmulticast mode [ 231.503775][T22009] bond_slave_1: entered allmulticast mode [ 231.526667][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.542239][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.547586][T10040] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.550940][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.553641][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.557837][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.703312][T22066] FAULT_INJECTION: forcing a failure. [ 231.703312][T22066] name failslab, interval 1, probability 0, space 0, times 0 [ 231.707306][T22066] CPU: 0 UID: 0 PID: 22066 Comm: syz.5.1874 Not tainted syzkaller #0 PREEMPT(full) [ 231.707321][T22066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 231.707328][T22066] Call Trace: [ 231.707339][T22066] [ 231.707344][T22066] dump_stack_lvl+0x16c/0x1f0 [ 231.707367][T22066] should_fail_ex+0x512/0x640 [ 231.707384][T22066] ? fs_reclaim_acquire+0xae/0x150 [ 231.707397][T22066] should_failslab+0xc2/0x120 [ 231.707410][T22066] __kmalloc_noprof+0xdd/0x880 [ 231.707424][T22066] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 231.707440][T22066] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 231.707452][T22066] tomoyo_realpath_from_path+0xc2/0x6e0 [ 231.707466][T22066] ? tomoyo_profile+0x47/0x60 [ 231.707481][T22066] tomoyo_path_number_perm+0x245/0x580 [ 231.707491][T22066] ? tomoyo_path_number_perm+0x237/0x580 [ 231.707502][T22066] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 231.707513][T22066] ? find_held_lock+0x2b/0x80 [ 231.707538][T22066] ? find_held_lock+0x2b/0x80 [ 231.707550][T22066] ? hook_file_ioctl_common+0x145/0x410 [ 231.707567][T22066] ? __fget_files+0x20e/0x3c0 [ 231.707580][T22066] security_file_ioctl+0x9b/0x240 [ 231.707592][T22066] __x64_sys_ioctl+0xb7/0x210 [ 231.707608][T22066] do_syscall_64+0xcd/0xfa0 [ 231.707619][T22066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.707630][T22066] RIP: 0033:0x7f34ad98f749 [ 231.707639][T22066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.707649][T22066] RSP: 002b:00007f34ae7a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.707659][T22066] RAX: ffffffffffffffda RBX: 00007f34adbe5fa0 RCX: 00007f34ad98f749 [ 231.707665][T22066] RDX: 0000200000001440 RSI: 00000000000089f0 RDI: 0000000000000003 [ 231.707671][T22066] RBP: 00007f34ae7a3090 R08: 0000000000000000 R09: 0000000000000000 [ 231.707677][T22066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.707683][T22066] R13: 00007f34adbe6038 R14: 00007f34adbe5fa0 R15: 00007ffd6bae14e8 [ 231.707696][T22066] [ 231.707701][T22066] ERROR: Out of memory at tomoyo_realpath_from_path. [ 231.736477][T22069] fuse: Unknown parameter '' [ 231.953527][ T64] Bluetooth: hci4: unexpected cc 0x2039 length: 9 > 1 [ 232.157009][T10040] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 232.164779][T10040] bond0 (unregistering): Released all slaves [ 232.178537][T22012] chnl_net:caif_netlink_parms(): no params data found [ 232.294706][T22012] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.297082][T22012] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.300384][T22012] bridge_slave_0: entered allmulticast mode [ 232.303151][T22012] bridge_slave_0: entered promiscuous mode [ 232.306319][T22012] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.308797][T22012] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.311954][T22012] bridge_slave_1: entered allmulticast mode [ 232.314644][T22012] bridge_slave_1: entered promiscuous mode [ 232.380137][T22012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.399857][T22012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.519774][T22012] team0: Port device team_slave_0 added [ 232.523249][T22012] team0: Port device team_slave_1 added [ 232.615012][T22012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.617929][T22012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.630535][T22012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.650608][T22012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.652848][T22012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.664728][T22012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.681709][T22746] ip6t_srh: unknown srh match flags 4000 [ 232.689792][T10040] hsr_slave_0: left promiscuous mode [ 232.694476][T10040] hsr_slave_1: left promiscuous mode [ 232.694763][T22741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=544 sclass=netlink_route_socket pid=22741 comm=syz.4.1882 [ 232.723775][T10040] veth1_macvtap: left promiscuous mode [ 232.726327][T10040] veth0_macvtap: left promiscuous mode [ 232.729363][T10040] veth1_vlan: left promiscuous mode [ 232.731637][T10040] veth0_vlan: left promiscuous mode [ 232.980536][T22760] __nla_validate_parse: 5 callbacks suppressed [ 232.980547][T22760] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1884'. [ 233.590903][ T64] Bluetooth: hci1: command tx timeout [ 234.147356][T22895] FAULT_INJECTION: forcing a failure. [ 234.147356][T22895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.151945][T22895] CPU: 0 UID: 0 PID: 22895 Comm: syz.5.1887 Not tainted syzkaller #0 PREEMPT(full) [ 234.151967][T22895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 234.151976][T22895] Call Trace: [ 234.151981][T22895] [ 234.151988][T22895] dump_stack_lvl+0x16c/0x1f0 [ 234.152009][T22895] should_fail_ex+0x512/0x640 [ 234.152034][T22895] _copy_from_user+0x2e/0xd0 [ 234.152056][T22895] get_user_ifreq+0xf1/0x250 [ 234.152083][T22895] sock_ioctl+0x586/0x6b0 [ 234.152108][T22895] ? __pfx_sock_ioctl+0x10/0x10 [ 234.152124][T22895] ? hook_file_ioctl_common+0x145/0x410 [ 234.152154][T22895] ? selinux_file_ioctl+0x180/0x270 [ 234.152173][T22895] ? selinux_file_ioctl+0xb4/0x270 [ 234.152193][T22895] ? __pfx_sock_ioctl+0x10/0x10 [ 234.152210][T22895] __x64_sys_ioctl+0x18e/0x210 [ 234.152235][T22895] do_syscall_64+0xcd/0xfa0 [ 234.152254][T22895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.152271][T22895] RIP: 0033:0x7f34ad98f749 [ 234.152286][T22895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.152301][T22895] RSP: 002b:00007f34ae7a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.152317][T22895] RAX: ffffffffffffffda RBX: 00007f34adbe5fa0 RCX: 00007f34ad98f749 [ 234.152328][T22895] RDX: 0000200000001440 RSI: 00000000000089f0 RDI: 0000000000000003 [ 234.152337][T22895] RBP: 00007f34ae7a3090 R08: 0000000000000000 R09: 0000000000000000 [ 234.152347][T22895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.152355][T22895] R13: 00007f34adbe6038 R14: 00007f34adbe5fa0 R15: 00007ffd6bae14e8 [ 234.152379][T22895] [ 234.153049][T22012] hsr_slave_0: entered promiscuous mode [ 234.231708][T22012] hsr_slave_1: entered promiscuous mode [ 234.234714][T22012] debugfs: 'hsr0' already exists in 'hsr' [ 234.237492][T22012] Cannot create hsr debugfs directory [ 234.267200][T22903] bond0: Unable to set down delay as MII monitoring is disabled [ 234.271387][T22903] bond0 (unregistering): Released all slaves [ 234.402488][T23116] sp0: Synchronizing with TNC [ 234.417380][T23140] validate_nla: 1 callbacks suppressed [ 234.417396][T23140] netlink: 'syz.5.1892': attribute type 1 has an invalid length. [ 234.417638][T23114] virtio-fs: tag not found [ 234.451611][T23115] [U] [ 234.475859][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 234.475908][ T40] audit: type=1400 audit(2000000016.739:771): avc: denied { ioctl } for pid=23192 comm="syz.4.1893" path="socket:[62294]" dev="sockfs" ino=62294 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 234.519649][T23206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=23206 comm=syz.5.1895 [ 234.527596][T22012] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 234.537625][T22012] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 234.544977][T22012] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 234.561630][T22012] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 234.579992][ T40] audit: type=1400 audit(2000000016.839:772): avc: denied { setopt } for pid=23216 comm="syz.2.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 234.589236][ T40] audit: type=1400 audit(2000000016.839:773): avc: denied { connect } for pid=23216 comm="syz.2.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 234.652393][T22012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.668977][T23230] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1900'. [ 234.675401][T22012] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.682724][T10040] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.684921][T10040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.691321][T10054] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.693535][T10054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.697108][T23221] netlink: 'syz.4.1898': attribute type 1 has an invalid length. [ 234.769459][T23245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1901'. [ 234.805264][T22012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.938478][ T40] audit: type=1400 audit(2000000017.189:774): avc: denied { append } for pid=23264 comm="syz.5.1903" name="usbmon1" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 234.944707][T23265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=23265 comm=syz.5.1903 [ 234.956213][T22012] veth0_vlan: entered promiscuous mode [ 234.973808][T22012] veth1_vlan: entered promiscuous mode [ 235.000385][T22012] veth0_macvtap: entered promiscuous mode [ 235.005966][T22012] veth1_macvtap: entered promiscuous mode [ 235.017309][T22012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.024546][T23271] random: crng reseeded on system resumption [ 235.025437][T22012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.033753][T10050] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.036966][T10050] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.040137][T10050] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.046693][T10050] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.107746][T10050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.111409][T10050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.118282][T23283] EXT4-fs (nbd2): unable to read superblock [ 235.128847][ T40] audit: type=1400 audit(2000000017.389:775): avc: denied { getopt } for pid=23282 comm="syz.2.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 235.132880][T10040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.141181][T10040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.305010][T23314] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 235.314683][T23313] bridge_slave_0: left allmulticast mode [ 235.316947][T23313] bridge_slave_0: left promiscuous mode [ 235.319174][T23313] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.325517][T23313] bridge_slave_1: left allmulticast mode [ 235.327401][T23313] bridge_slave_1: left promiscuous mode [ 235.330380][T23313] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.335403][T23313] bond0: (slave bond_slave_0): Releasing backup interface [ 235.338093][T23313] bond_slave_0: left allmulticast mode [ 235.342948][T23313] bond0: (slave bond_slave_1): Releasing backup interface [ 235.346237][T23313] bond_slave_1: left allmulticast mode [ 235.354154][T23313] team0: Port device team_slave_0 removed [ 235.359168][T23313] team0: Port device team_slave_1 removed [ 235.362544][T23313] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 235.458894][ T2297] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 235.610677][ T2297] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 235.614554][ T2297] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 235.618682][ T2297] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 235.622721][ T2297] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 235.627280][ T2297] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 235.634244][ T2297] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 235.638160][ T2297] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 235.641748][ T2297] usb 7-1: Product: syz [ 235.643526][ T2297] usb 7-1: Manufacturer: syz [ 235.644467][T23332] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1916'. [ 235.654123][ T2297] cdc_wdm 7-1:1.0: skipping garbage [ 235.656380][ T2297] cdc_wdm 7-1:1.0: skipping garbage [ 235.659137][ T64] Bluetooth: hci1: command tx timeout [ 235.663850][ T2297] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 235.666315][ T2297] cdc_wdm 7-1:1.0: Unknown control protocol [ 235.713901][ T40] audit: type=1400 audit(2000000017.969:776): avc: denied { audit_write } for pid=23340 comm="syz.5.1918" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 235.723222][ T40] audit: type=1107 audit(2000000017.969:777): pid=23340 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=' [ 235.723222][ T40] 1O]}A/GuaJ>@B@' s ȌNy8oCd'~kXi(!p+EQEkX.{q>PK/½2jrxdͽԀmi@6;(͆bߋ*t' [ 235.854779][ T40] audit: type=1400 audit(2000000018.109:778): avc: denied { read write } for pid=23301 comm="syz.2.1909" name="cdc-wdm0" dev="devtmpfs" ino=3810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 235.864160][ T40] audit: type=1400 audit(2000000018.109:779): avc: denied { open } for pid=23301 comm="syz.2.1909" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 235.882286][ T6365] usb 7-1: USB disconnect, device number 28 [ 235.957773][T23377] netlink: 'syz.5.1924': attribute type 10 has an invalid length. [ 235.961879][T23377] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 235.966689][T23377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.981183][ T64] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 235.986541][ T64] Bluetooth: hci4: Injecting HCI hardware error event [ 235.993042][ T5941] Bluetooth: hci4: hardware error 0x00 [ 235.999543][T23374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1923'. [ 236.004413][T23374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1923'. [ 236.180518][T23398] netlink: 'syz.6.1929': attribute type 1 has an invalid length. [ 236.183763][T23398] netlink: 'syz.6.1929': attribute type 4 has an invalid length. [ 236.187099][T23398] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1929'. [ 236.191103][T23398] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1929'. [ 236.241890][ T40] audit: type=1400 audit(2000000018.499:780): avc: denied { mounton } for pid=23413 comm="syz.6.1933" path="/2/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 236.293803][T23418] tty tty31: ldisc open failed (-12), clearing slot 30 [ 236.309387][T23427] kAFS: No cell specified [ 236.421828][T23440] netlink: 'syz.5.1938': attribute type 2 has an invalid length. [ 236.466838][T23451] overlayfs: conflicting lowerdir path [ 236.615616][T23470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1947'. [ 236.621098][T23470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1947'. [ 236.736337][T23479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.281925][T23538] netlink: 'syz.6.1962': attribute type 1 has an invalid length. [ 237.285080][T23538] netlink: 'syz.6.1962': attribute type 2 has an invalid length. [ 237.293713][T23541] QAT: Invalid ioctl 37896 [ 237.319993][T23546] input: syz1 as /devices/virtual/input/input44 [ 237.329501][T23551] ntfs3(sr0): try to read out of volume at offset 0x0 [ 237.738848][ T5943] Bluetooth: hci1: command tx timeout [ 237.895752][T23602] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 237.911906][T23602] bond0: Unable to set down delay as MII monitoring is disabled [ 237.915971][T23602] bond0 (unregistering): Released all slaves [ 238.059199][ T5941] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 238.293593][T23679] binder: 23678:23679 ioctl c00c620f 200000000000 returned -22 [ 238.558661][T23730] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 238.566798][T23730] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 238.589676][ T5941] Bluetooth: Wrong link type (-71) [ 238.620386][T23737] __nla_validate_parse: 1 callbacks suppressed [ 238.620402][T23737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1989'. [ 238.649755][T10071] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 238.783060][T23747] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1992'. [ 238.819650][T10071] usb 7-1: unable to get BOS descriptor or descriptor too short [ 238.824095][T10071] usb 7-1: no configurations [ 238.826412][T10071] usb 7-1: can't read configurations, error -22 [ 238.885951][T23753] netlink: 'syz.5.1993': attribute type 3 has an invalid length. [ 238.885958][T23752] netlink: 'syz.5.1993': attribute type 3 has an invalid length. [ 238.925714][T23756] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1994'. [ 239.567882][T23787] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2004'. [ 239.597509][T23790] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2005'. [ 239.614158][T23792] validate_nla: 2 callbacks suppressed [ 239.614169][T23792] netlink: 'syz.5.2006': attribute type 4 has an invalid length. [ 239.614178][T23792] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2006'. [ 239.616474][T23792] .`: renamed from bond0 (while UP) [ 239.658848][ T64] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 239.658899][ T5941] Bluetooth: hci3: command 0x1003 tx timeout [ 239.706559][T23802] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2008'. [ 239.710615][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 239.710625][ T40] audit: type=1400 audit(2000000021.969:789): avc: denied { write } for pid=23800 comm="syz.6.2008" name="/" dev="9p" ino=71827603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.712642][T23802] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 239.754136][T23802] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 239.754567][T23802] overlayfs: failed to look up (tracing) for ino (-66) [ 239.819477][ T64] Bluetooth: hci1: command tx timeout [ 239.878821][ T842] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 239.989743][ T40] audit: type=1400 audit(2000000022.249:790): avc: denied { create } for pid=23823 comm="syz.2.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 240.005107][ T64] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 240.009685][ T64] CPU: 3 UID: 0 PID: 64 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 240.009703][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 240.009711][ T64] Workqueue: hci2 hci_rx_work [ 240.009741][ T64] Call Trace: [ 240.009745][ T64] [ 240.009751][ T64] dump_stack_lvl+0x16c/0x1f0 [ 240.009764][ T64] sysfs_warn_dup+0x7f/0xa0 [ 240.009779][ T64] sysfs_create_dir_ns+0x24b/0x2b0 [ 240.009793][ T64] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 240.009808][ T64] ? find_held_lock+0x2b/0x80 [ 240.009824][ T64] ? do_raw_spin_unlock+0x172/0x230 [ 240.009838][ T64] kobject_add_internal+0x2c4/0x9b0 [ 240.009854][ T64] kobject_add+0x16e/0x240 [ 240.009865][ T64] ? __pfx_kobject_add+0x10/0x10 [ 240.009878][ T64] ? do_raw_spin_unlock+0x172/0x230 [ 240.009890][ T64] ? kobject_put+0xab/0x5a0 [ 240.009909][ T64] device_add+0x288/0x1aa0 [ 240.009928][ T64] ? __pfx_dev_set_name+0x10/0x10 [ 240.009944][ T64] ? __pfx_device_add+0x10/0x10 [ 240.009958][ T64] ? mgmt_send_event_skb+0x2fb/0x460 [ 240.009979][ T64] hci_conn_add_sysfs+0x17e/0x230 [ 240.009991][ T64] le_conn_complete_evt+0x1260/0x2150 [ 240.010012][ T64] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 240.010027][ T64] ? hci_event_packet+0x459/0x11c0 [ 240.010046][ T64] hci_le_conn_complete_evt+0x23c/0x370 [ 240.010065][ T64] hci_le_meta_evt+0x357/0x5e0 [ 240.010074][ T64] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 240.010091][ T64] hci_event_packet+0x685/0x11c0 [ 240.010106][ T64] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 240.010116][ T64] ? __pfx_hci_event_packet+0x10/0x10 [ 240.010133][ T64] ? kcov_remote_start+0x3c9/0x6d0 [ 240.010146][ T64] ? lockdep_hardirqs_on+0x7c/0x110 [ 240.010159][ T64] hci_rx_work+0x2c5/0x16b0 [ 240.010170][ T64] ? rcu_is_watching+0x12/0xc0 [ 240.010185][ T64] process_one_work+0x9cf/0x1b70 [ 240.010203][ T64] ? __pfx_process_one_work+0x10/0x10 [ 240.010219][ T64] ? assign_work+0x1a0/0x250 [ 240.010230][ T64] worker_thread+0x6c8/0xf10 [ 240.010247][ T64] ? __pfx_worker_thread+0x10/0x10 [ 240.010259][ T64] kthread+0x3c5/0x780 [ 240.010269][ T64] ? __pfx_kthread+0x10/0x10 [ 240.010280][ T64] ? rcu_is_watching+0x12/0xc0 [ 240.010293][ T64] ? __pfx_kthread+0x10/0x10 [ 240.010304][ T64] ret_from_fork+0x675/0x7d0 [ 240.010314][ T64] ? __pfx_kthread+0x10/0x10 [ 240.010324][ T64] ret_from_fork_asm+0x1a/0x30 [ 240.010364][ T64] [ 240.010668][ T64] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 240.040876][ T842] usb 10-1: config 0 has no interfaces? [ 240.042576][ T64] Bluetooth: hci2: failed to register connection device [ 240.051739][ T842] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 240.076356][T23831] binder: 23830:23831 ioctl c018620c 2000000000c0 returned -22 [ 240.077239][ T842] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 240.113879][T23831] netlink: 'syz.2.2014': attribute type 12 has an invalid length. [ 240.116602][ T842] usb 10-1: Product: syz [ 240.120126][T23831] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2014'. [ 240.121498][ T842] usb 10-1: Manufacturer: syz [ 240.132944][ T842] usb 10-1: config 0 descriptor?? [ 240.224585][T23850] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 240.227206][T23850] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 240.232852][T23850] vhci_hcd vhci_hcd.0: Device attached [ 240.269459][T23852] vhci_hcd: connection closed [ 240.270389][ T12] vhci_hcd: stop threads [ 240.278892][ T12] vhci_hcd: release socket [ 240.280449][ T12] vhci_hcd: disconnect device [ 240.539126][T23792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.543175][T23792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.560799][T23792] netlink: 19 bytes leftover after parsing attributes in process `syz.5.2006'. [ 240.564550][ T10] usb 10-1: USB disconnect, device number 3 [ 240.885859][T23888] ntfs3(sr0): try to read out of volume at offset 0x0 [ 240.914029][ T40] audit: type=1400 audit(2000000023.169:791): avc: denied { create } for pid=23890 comm="syz.6.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 240.941028][ T40] audit: type=1400 audit(2000000023.199:792): avc: denied { read write } for pid=22012 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.953375][ T40] audit: type=1400 audit(2000000023.199:793): avc: denied { open } for pid=22012 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.963523][ T40] audit: type=1400 audit(2000000023.199:794): avc: denied { ioctl } for pid=22012 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.981265][ T40] audit: type=1400 audit(2000000023.239:795): avc: denied { connect } for pid=23892 comm="syz.6.2025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 240.981900][T23894] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2025'. [ 241.107697][T23901] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 242.022559][T23953] netlink: 'syz.5.2038': attribute type 4 has an invalid length. [ 242.076021][T23959] netlink: 'syz.6.2041': attribute type 10 has an invalid length. [ 242.089422][T23959] team0: Port device geneve1 added [ 242.136372][ T40] audit: type=1400 audit(2000000024.389:796): avc: denied { allowed } for pid=23962 comm="syz.6.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 242.154492][ T40] audit: type=1400 audit(2000000024.409:797): avc: denied { read } for pid=23962 comm="syz.6.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 242.184711][T23968] i2c i2c-1: Invalid block write size 34 [ 242.243250][T23975] binder: BINDER_SET_CONTEXT_MGR already set [ 242.245872][T23975] binder: 23974:23975 ioctl 4018620d 200000004a80 returned -16 [ 242.318241][ T40] audit: type=1400 audit(2000000024.569:798): avc: denied { mounton } for pid=23986 comm="syz.5.2049" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.332805][T23989] pimreg: entered allmulticast mode [ 242.391826][T23987] netfs: Couldn't get user pages (rc=-14) [ 242.645245][T24025] binder: BINDER_SET_CONTEXT_MGR already set [ 242.647348][T24025] binder: 24023:24025 ioctl 4018620d 200000004a80 returned -16 [ 242.652405][T24027] autofs4:pid:24027:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 242.789605][ T939] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 242.881651][T24065] netlink: 'syz.5.2066': attribute type 11 has an invalid length. [ 242.896536][T24069] netlink: 'syz.5.2066': attribute type 11 has an invalid length. [ 242.919252][ T939] usb 7-1: device descriptor read/64, error -71 [ 242.947172][T24076] binder: 24075:24076 ioctl c0306201 0 returned -14 [ 242.986923][T24078] binder: 24077:24078 ioctl c00c620f 200000000000 returned -22 [ 243.159172][ T939] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 243.161167][T24096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=24096 comm=syz.5.2072 [ 243.261752][T24103] BIDI support in bsg has been removed. [ 243.267468][T24103] netlink: 'syz.5.2075': attribute type 29 has an invalid length. [ 243.272380][T24103] netlink: 'syz.5.2075': attribute type 29 has an invalid length. [ 243.288837][ T939] usb 7-1: device descriptor read/64, error -71 [ 243.331949][T24105] overlay: ./file0 is not a directory [ 243.400263][ T939] usb usb7-port1: attempt power cycle [ 243.740176][ T939] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 243.760535][ T939] usb 7-1: device descriptor read/8, error -71 [ 243.834290][T24155] __nla_validate_parse: 15 callbacks suppressed [ 243.834309][T24155] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2089'. [ 243.904426][T24165] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2093'. [ 243.977708][T24180] netlink: 'syz.4.2098': attribute type 10 has an invalid length. [ 243.980964][T24183] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2100'. [ 243.986966][T24184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2099'. [ 243.993860][T24184] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2099'. [ 243.999194][ T939] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 244.029766][ T939] usb 7-1: device descriptor read/8, error -71 [ 244.139582][ T939] usb usb7-port1: unable to enumerate USB device [ 244.154535][T24205] netlink: 'syz.6.2106': attribute type 23 has an invalid length. [ 244.155472][T24195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2103'. [ 244.165239][T24205] program syz.6.2106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.168419][T24205] ata1.00: non-matching transfer count (0/2304) [ 244.169391][T24195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2103'. [ 244.169422][T10040] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.169468][T10040] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.169501][T10040] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.169533][T10040] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.313192][T24258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2113'. [ 244.338576][T24258] bridge3: port 1(gretap0) entered blocking state [ 244.341327][T24258] bridge3: port 1(gretap0) entered disabled state [ 244.343473][T24258] gretap0: entered allmulticast mode [ 244.346009][T24258] gretap0: entered promiscuous mode [ 244.356405][T24258] vlan2: entered allmulticast mode [ 244.358512][T24258] veth0_to_bond: entered allmulticast mode [ 244.362634][T24258] bridge3: port 2(vlan2) entered blocking state [ 244.364658][T24258] bridge3: port 2(vlan2) entered disabled state [ 244.367496][T24258] vlan2: entered promiscuous mode [ 244.369455][T24258] veth0_to_bond: entered promiscuous mode [ 244.402560][T24273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2116'. [ 244.431471][T24273] netlink: 'syz.4.2116': attribute type 10 has an invalid length. [ 244.434441][T24274] netlink: 'syz.4.2116': attribute type 10 has an invalid length. [ 244.479246][T24339] PID 24339 killed due to inadequate hugepage pool [ 244.550524][ T842] hid_parser_main: 22 callbacks suppressed [ 244.550537][ T842] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.556490][ T842] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.559410][ T842] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.561839][ T842] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.564183][ T842] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.566525][ T842] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.569593][ T842] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.572005][ T842] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.574524][ T842] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.576987][ T842] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.582181][ T842] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 244.611596][T24351] fido_id[24351]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 244.625688][T24357] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2120'. [ 244.693802][ T5941] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 244.771233][T24377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24377 comm=syz.4.2128 [ 244.817191][T24389] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 244.880022][T24401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=24401 comm=syz.4.2134 [ 244.903769][T24405] dvmrp6: entered allmulticast mode [ 244.912327][T24405] netlink: 'syz.6.2135': attribute type 21 has an invalid length. [ 244.936501][T24405] xt_l2tp: v2 doesn't support IP mode [ 245.044047][T24415] veth1_to_hsr: entered promiscuous mode [ 245.046443][T24415] macvlan2: entered allmulticast mode [ 245.048172][T24415] veth1_to_hsr: entered allmulticast mode [ 245.200627][T24439] sctp: [Deprecated]: syz.6.2142 (pid 24439) Use of int in max_burst socket option deprecated. [ 245.200627][T24439] Use struct sctp_assoc_value instead [ 245.255879][T24449] binder_alloc: 24447: binder_alloc_buf, no vma [ 245.290450][T24453] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 245.293564][T24453] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 245.297562][T24453] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 245.300560][T24453] UDF-fs: Scanning with blocksize 512 failed [ 245.303009][T24453] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 245.303474][T24454] No control pipe specified [ 245.306125][T24453] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 245.306134][T24446] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 245.306177][T24446] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 245.307515][T24446] vhci_hcd vhci_hcd.0: Device attached [ 245.307759][T24455] vhci_hcd: unknown pdu 1 [ 245.310228][ T12] vhci_hcd: stop threads [ 245.312645][T24453] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 245.314368][ T12] vhci_hcd: release socket [ 245.316152][T24453] UDF-fs: Scanning with blocksize 1024 failed [ 245.316519][T24453] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 245.318061][ T12] vhci_hcd: disconnect device [ 245.320096][T24453] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 245.336304][T24453] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 245.338585][T24453] UDF-fs: Scanning with blocksize 2048 failed [ 245.341623][T24453] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 245.345121][T24453] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 245.350622][T24453] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 245.352062][ T5998] IPVS: starting estimator thread 0... [ 245.353714][T24453] UDF-fs: Scanning with blocksize 4096 failed [ 245.358149][T24453] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 245.409329][T24521] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 245.414334][T24453] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 245.418100][T24453] cgroup2: Unknown parameter 'posix!cl' [ 245.439140][T24518] IPVS: using max 43 ests per chain, 103200 per kthread [ 245.534657][T24536] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 245.539369][T24537] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 245.689744][ T40] kauditd_printk_skb: 79 callbacks suppressed [ 245.689755][ T40] audit: type=1400 audit(2000000027.949:878): avc: denied { accept } for pid=24556 comm="syz.4.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 245.773420][T24568] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 245.776131][T24568] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 245.812730][T24570] geneve3: entered promiscuous mode [ 245.814458][T24570] geneve3: entered allmulticast mode [ 245.846604][T24574] kvm: pic: non byte read [ 246.041787][T24611] ipt_rpfilter: unknown options [ 246.232440][T24639] bond4: Unable to set up delay as MII monitoring is disabled [ 246.236509][T24639] bond4 (unregistering): Released all slaves [ 246.274612][T24711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=24711 comm=syz.4.2177 [ 246.367430][ T40] audit: type=1400 audit(2000000028.619:879): avc: denied { listen } for pid=24724 comm="syz.6.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 246.376020][ T40] audit: type=1400 audit(2000000028.629:880): avc: denied { getopt } for pid=24724 comm="syz.6.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 246.536551][T24753] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 246.755540][T24761] No control pipe specified [ 246.864704][ T40] audit: type=1400 audit(2000000029.119:881): avc: denied { map } for pid=24776 comm="syz.2.2195" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 247.225368][T24796] tipc: Started in network mode [ 247.227499][T24796] tipc: Node identity ac14140f, cluster identity 4711 [ 247.231020][T24796] tipc: New replicast peer: 255.255.255.255 [ 247.234138][T24796] tipc: Enabled bearer , priority 10 [ 247.276742][T24798] nbd: illegal input index 1879048192 [ 247.532260][T24812] netlink: 'syz.5.2206': attribute type 28 has an invalid length. [ 247.534881][T24812] netlink: 'syz.5.2206': attribute type 3 has an invalid length. [ 247.593220][ T842] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.03 Device [syz1] on syz1 [ 247.637726][T24821] fido_id[24821]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 247.669927][ T40] audit: type=1400 audit(2000000029.929:882): avc: denied { map } for pid=24816 comm="syz.5.2207" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 247.677574][ T40] audit: type=1400 audit(2000000029.929:883): avc: denied { execute } for pid=24816 comm="syz.5.2207" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 247.840747][T24853] efs: cannot read volume header [ 248.258856][T10071] tipc: Node number set to 2886997007 [ 248.845812][T24878] __nla_validate_parse: 23 callbacks suppressed [ 248.845828][T24878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2217'. [ 248.897917][T24888] binder: 24886:24888 ioctl 4018620d 0 returned -22 [ 248.925851][ T29] IPVS: starting estimator thread 0... [ 248.935343][T24895] netlink: 360 bytes leftover after parsing attributes in process `syz.2.2222'. [ 249.028863][T24893] IPVS: using max 43 ests per chain, 103200 per kthread [ 249.122136][T24925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2228'. [ 249.122970][T24924] netlink: 'syz.2.2228': attribute type 9 has an invalid length. [ 249.153510][T24931] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.2229'. [ 249.404933][T25014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25014 comm=syz.5.2234 [ 249.447928][T25021] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2235'. [ 249.548855][T25034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.566295][T25035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.663453][T25119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2242'. [ 249.932444][T25143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2250'. [ 249.937418][ T40] audit: type=1400 audit(2000000032.189:884): avc: denied { accept } for pid=25142 comm="syz.5.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 250.016620][ T64] Bluetooth: hci0: ACL packet too small [ 250.033848][T25164] xt_HMARK: spi-set and port-set can't be combined [ 250.102526][T25174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2256'. [ 250.228344][T25196] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2263'. [ 250.228361][T25196] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2263'. [ 250.229012][ T40] audit: type=1400 audit(2000000032.479:885): avc: denied { name_bind 0x1000000 } for pid=25195 comm="syz.2.2263" path="socket:[70002]" dev="sockfs" ino=70002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 250.407652][ T40] audit: type=1400 audit(2000000032.659:886): avc: denied { getattr } for pid=25208 comm="syz.6.2265" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 250.458202][T25213] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 250.464717][T25213] fuse: Bad value for 'user_id' [ 250.464744][T25213] fuse: Bad value for 'user_id' [ 250.472531][T25213] syz.2.2266 (25213) used greatest stack depth: 19672 bytes left [ 250.529827][T25222] trusted_key: encrypted_key: master key parameter is missing [ 250.635670][ T40] audit: type=1400 audit(2000000032.889:887): avc: denied { accept } for pid=25232 comm="syz.6.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 251.134457][T25339] program syz.6.2288 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.160191][T25341] IPVS: length: 80 != 24 [ 251.176300][T25347] netlink: 'syz.6.2291': attribute type 15 has an invalid length. [ 251.187461][T25349] binder: 25348:25349 ioctl c0306201 200000000080 returned -14 [ 251.192517][T25349] binder: 25348:25349 ioctl 80089418 200000000140 returned -22 [ 251.225260][T25355] fuse: Unknown parameter 'f0x0000000000000005' [ 251.325338][T25400] nbd: socks must be embedded in a SOCK_ITEM attr [ 251.411505][T25409] binder: 25408:25409 ioctl c0306201 0 returned -14 [ 251.611398][T25429] mkiss: ax0: crc mode is auto. [ 251.735648][T25462] netlink: 'syz.6.2311': attribute type 2 has an invalid length. [ 251.770522][ T40] audit: type=1400 audit(2000000034.029:888): avc: denied { name_connect } for pid=25466 comm="syz.2.2314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 251.793484][ T40] audit: type=1400 audit(2000000034.049:889): avc: denied { remove_name } for pid=25470 comm="syz.6.2315" name="file0" dev="9p" ino=71827613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 251.801957][ T40] audit: type=1400 audit(2000000034.049:890): avc: denied { unlink } for pid=25470 comm="syz.6.2315" name="file0" dev="9p" ino=71827613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 251.831907][T25476] overlay: filesystem on ./bus not supported as upperdir [ 251.965309][T25490] netlink: 'syz.5.2320': attribute type 11 has an invalid length. [ 251.986306][T25494] tipc: Started in network mode [ 251.989716][T25494] tipc: Node identity 4, cluster identity 4711 [ 251.991941][T25494] tipc: Node number set to 4 [ 252.085852][T25500] input input46: cannot allocate more than FF_MAX_EFFECTS effects [ 252.228375][T25513] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 252.275596][ T40] audit: type=1400 audit(2000000034.529:891): avc: denied { getopt } for pid=25519 comm="syz.6.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 252.285251][ T40] audit: type=1400 audit(2000000034.539:892): avc: denied { setopt } for pid=25519 comm="syz.6.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 252.308599][T25523] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 252.308599][T25523] program syz.6.2328 not setting count and/or reply_len properly [ 252.316368][T25523] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 252.420125][ T40] audit: type=1400 audit(2000000034.679:893): avc: denied { listen } for pid=25521 comm="syz.6.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 253.182203][T25584] netlink: 'syz.5.2340': attribute type 5 has an invalid length. [ 253.186233][T25584] program syz.5.2340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.214741][ T40] audit: type=1400 audit(2000000035.469:894): avc: denied { map } for pid=25586 comm="syz.6.2341" path="socket:[71351]" dev="sockfs" ino=71351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 253.268465][T25594] FAULT_INJECTION: forcing a failure. [ 253.268465][T25594] name failslab, interval 1, probability 0, space 0, times 0 [ 253.274668][T25594] CPU: 2 UID: 0 PID: 25594 Comm: syz.5.2343 Not tainted syzkaller #0 PREEMPT(full) [ 253.274694][T25594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 253.274705][T25594] Call Trace: [ 253.274724][T25594] [ 253.274738][T25594] dump_stack_lvl+0x16c/0x1f0 [ 253.274772][T25594] should_fail_ex+0x512/0x640 [ 253.274797][T25594] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 253.274826][T25594] should_failslab+0xc2/0x120 [ 253.274847][T25594] kmem_cache_alloc_node_noprof+0x78/0x770 [ 253.274872][T25594] ? __alloc_skb+0x2b2/0x380 [ 253.274899][T25594] ? __alloc_skb+0x2b2/0x380 [ 253.274917][T25594] ? __pfx_netlink_insert+0x10/0x10 [ 253.274941][T25594] __alloc_skb+0x2b2/0x380 [ 253.274962][T25594] ? __pfx___alloc_skb+0x10/0x10 [ 253.274983][T25594] ? netlink_autobind.isra.0+0x158/0x370 [ 253.275013][T25594] netlink_alloc_large_skb+0x69/0x140 [ 253.275040][T25594] netlink_sendmsg+0x698/0xdd0 [ 253.275068][T25594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.275102][T25594] ____sys_sendmsg+0xa98/0xc70 [ 253.275121][T25594] ? copy_msghdr_from_user+0x10a/0x160 [ 253.275144][T25594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.275173][T25594] ___sys_sendmsg+0x134/0x1d0 [ 253.275197][T25594] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.275218][T25594] ? __lock_acquire+0x622/0x1c90 [ 253.275264][T25594] __sys_sendmsg+0x16d/0x220 [ 253.275287][T25594] ? __pfx___sys_sendmsg+0x10/0x10 [ 253.275327][T25594] do_syscall_64+0xcd/0xfa0 [ 253.275345][T25594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.275363][T25594] RIP: 0033:0x7f34ad98f749 [ 253.275377][T25594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.275393][T25594] RSP: 002b:00007f34ae7a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.275408][T25594] RAX: ffffffffffffffda RBX: 00007f34adbe5fa0 RCX: 00007f34ad98f749 [ 253.275419][T25594] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 253.275428][T25594] RBP: 00007f34ae7a3090 R08: 0000000000000000 R09: 0000000000000000 [ 253.275438][T25594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.275447][T25594] R13: 00007f34adbe6038 R14: 00007f34adbe5fa0 R15: 00007ffd6bae14e8 [ 253.275472][T25594] [ 253.468014][T25598] : renamed from bridge_slave_0 (while UP) [ 253.468861][ T10] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 253.631101][ T10] usb 11-1: unable to get BOS descriptor or descriptor too short [ 253.634333][ T10] usb 11-1: not running at top speed; connect to a high speed hub [ 253.638378][ T10] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 253.641268][ T10] usb 11-1: can't read configurations, error -61 [ 253.768887][ T10] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 253.768904][ T5962] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 253.918856][ T5962] usb 10-1: Using ep0 maxpacket: 16 [ 253.921185][ T10] usb 11-1: unable to get BOS descriptor or descriptor too short [ 253.923253][ T5962] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 253.924297][ T10] usb 11-1: not running at top speed; connect to a high speed hub [ 253.927488][ T5962] usb 10-1: config 0 has no interface number 0 [ 253.929957][ T5962] usb 10-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 253.931596][ T10] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 253.932869][ T5962] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.936201][ T10] usb 11-1: can't read configurations, error -61 [ 253.939732][ T5962] usb 10-1: Product: syz [ 253.943194][ T10] usb usb11-port1: attempt power cycle [ 253.945561][ T5962] usb 10-1: Manufacturer: syz [ 253.951886][ T5962] usb 10-1: SerialNumber: syz [ 253.956142][ T5962] usb 10-1: config 0 descriptor?? [ 253.962061][ T5962] hub 10-1:0.132: bad descriptor, ignoring hub [ 253.964809][ T5962] hub 10-1:0.132: probe with driver hub failed with error -5 [ 253.971982][ T5962] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.132/input/input47 [ 254.278894][ T10] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 254.301929][ T10] usb 11-1: unable to get BOS descriptor or descriptor too short [ 254.305242][ T10] usb 11-1: not running at top speed; connect to a high speed hub [ 254.309434][ T10] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 254.312140][ T10] usb 11-1: can't read configurations, error -61 [ 254.448949][ T10] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 254.470435][ T5998] usb 10-1: USB disconnect, device number 4 [ 254.471858][ T10] usb 11-1: unable to get BOS descriptor or descriptor too short [ 254.476066][ T10] usb 11-1: not running at top speed; connect to a high speed hub [ 254.480642][ T10] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 254.483333][ T10] usb 11-1: can't read configurations, error -61 [ 254.485769][ T10] usb usb11-port1: unable to enumerate USB device [ 254.747966][T25621] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 254.753620][T25621] SET target dimension over the limit! [ 254.934419][T25627] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 255.011418][ T40] audit: type=1400 audit(2000000037.269:895): avc: denied { append } for pid=25634 comm="syz.4.2351" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 255.056451][T25646] __nla_validate_parse: 16 callbacks suppressed [ 255.056468][T25646] netlink: 596 bytes leftover after parsing attributes in process `syz.5.2354'. [ 255.089235][T25651] binder: 25650:25651 ioctl c0306201 0 returned -14 [ 255.373520][T25664] 9pnet: Could not find request transport: irtio [ 255.405433][T25671] FAULT_INJECTION: forcing a failure. [ 255.405433][T25671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.410194][T25671] CPU: 2 UID: 0 PID: 25671 Comm: syz.5.2362 Not tainted syzkaller #0 PREEMPT(full) [ 255.410209][T25671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 255.410215][T25671] Call Trace: [ 255.410219][T25671] [ 255.410223][T25671] dump_stack_lvl+0x16c/0x1f0 [ 255.410236][T25671] should_fail_ex+0x512/0x640 [ 255.410251][T25671] _copy_from_iter+0x29f/0x1720 [ 255.410266][T25671] ? __alloc_skb+0x200/0x380 [ 255.410280][T25671] ? __pfx__copy_from_iter+0x10/0x10 [ 255.410293][T25671] ? netlink_autobind.isra.0+0x158/0x370 [ 255.410314][T25671] netlink_sendmsg+0x820/0xdd0 [ 255.410331][T25671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.410351][T25671] ____sys_sendmsg+0xa98/0xc70 [ 255.410362][T25671] ? copy_msghdr_from_user+0x10a/0x160 [ 255.410376][T25671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.410392][T25671] ___sys_sendmsg+0x134/0x1d0 [ 255.410406][T25671] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.410419][T25671] ? __lock_acquire+0x622/0x1c90 [ 255.410444][T25671] __sys_sendmsg+0x16d/0x220 [ 255.410458][T25671] ? __pfx___sys_sendmsg+0x10/0x10 [ 255.410479][T25671] do_syscall_64+0xcd/0xfa0 [ 255.410491][T25671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.410501][T25671] RIP: 0033:0x7f34ad98f749 [ 255.410511][T25671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.410521][T25671] RSP: 002b:00007f34ae7a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.410531][T25671] RAX: ffffffffffffffda RBX: 00007f34adbe5fa0 RCX: 00007f34ad98f749 [ 255.410538][T25671] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 255.410544][T25671] RBP: 00007f34ae7a3090 R08: 0000000000000000 R09: 0000000000000000 [ 255.410549][T25671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.410555][T25671] R13: 00007f34adbe6038 R14: 00007f34adbe5fa0 R15: 00007ffd6bae14e8 [ 255.410568][T25671] [ 255.423426][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.467907][T25673] tap0: tun_chr_ioctl cmd 1074025675 [ 255.469581][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.497629][T25673] tap0: persist disabled [ 255.505990][T25678] sp0: Synchronizing with TNC [ 255.515055][T25676] [U] [ 255.652376][ T40] audit: type=1400 audit(2000000037.909:896): avc: denied { remount } for pid=25696 comm="syz.5.2368" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 255.660734][ T40] audit: type=1400 audit(2000000037.909:897): avc: denied { remount } for pid=25696 comm="syz.5.2368" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 255.999157][ T939] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 256.170159][ T939] usb 7-1: Using ep0 maxpacket: 16 [ 256.178902][ T939] usb 7-1: unable to get BOS descriptor or descriptor too short [ 256.182265][ T939] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 256.184838][ T939] usb 7-1: can't read configurations, error -71 [ 256.219202][ T64] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 256.222718][ T64] Bluetooth: hci0: Injecting HCI hardware error event [ 256.227061][ T64] Bluetooth: hci0: hardware error 0x00 [ 256.287778][T25725] sp0: Synchronizing with TNC [ 256.835359][T25795] tipc: Enabling of bearer rejected, media not registered [ 256.914038][T25806] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 257.017115][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 257.017126][ T40] audit: type=1400 audit(2000000039.269:901): avc: denied { lock } for pid=25811 comm="syz.2.2391" path="socket:[72357]" dev="sockfs" ino=72357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 257.035415][T25816] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 257.044528][T25815] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2388'. [ 257.077584][T25821] openvswitch: netlink: Message has 592 unknown bytes. [ 257.080307][T25821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.185495][ T40] audit: type=1400 audit(2000000039.439:902): avc: denied { execheap } for pid=25825 comm="syz.6.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 257.210958][T25841] netlink: 'syz.2.2397': attribute type 11 has an invalid length. [ 257.216337][ T40] audit: type=1400 audit(2000000039.469:903): avc: denied { read } for pid=25840 comm="syz.2.2397" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 257.227471][ T40] audit: type=1400 audit(2000000039.479:904): avc: denied { accept } for pid=25844 comm="syz.6.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 257.438189][ T40] audit: type=1400 audit(2000000039.689:905): avc: denied { write } for pid=25864 comm="syz.6.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 257.445961][ T40] audit: type=1326 audit(2000000039.689:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25864 comm="syz.6.2401" exe="/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f26e778f749 code=0x0 [ 257.658168][T25893] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2407'. [ 257.701166][T25902] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=25902 comm=syz.5.2408 [ 257.705853][T25902] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=52 sclass=netlink_xfrm_socket pid=25902 comm=syz.5.2408 [ 257.710267][T25902] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=66 sclass=netlink_xfrm_socket pid=25902 comm=syz.5.2408 [ 257.714703][T25902] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=49 sclass=netlink_xfrm_socket pid=25902 comm=syz.5.2408 [ 257.719290][T25902] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=50 sclass=netlink_xfrm_socket pid=25902 comm=syz.5.2408 [ 258.092865][T25921] ip6gretap1: entered promiscuous mode [ 258.095196][T25921] ip6gretap1: entered allmulticast mode [ 258.118163][T25921] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 258.308927][ T64] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 258.398903][T10071] usb 11-1: new full-speed USB device number 6 using dummy_hcd [ 258.443112][ T5998] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 258.550785][T10071] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 258.554094][T10071] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 258.557773][T10071] usb 11-1: config 0 interface 0 has no altsetting 0 [ 258.561957][T10071] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 258.565446][T10071] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 258.568288][T10071] usb 11-1: Product: syz [ 258.569865][T10071] usb 11-1: Manufacturer: syz [ 258.571356][T10071] usb 11-1: SerialNumber: syz [ 258.574042][T10071] usb 11-1: config 0 descriptor?? [ 258.577178][T10071] hub 11-1:0.0: bad descriptor, ignoring hub [ 258.579204][T10071] hub 11-1:0.0: probe with driver hub failed with error -5 [ 258.582835][T10071] usb 11-1: selecting invalid altsetting 0 [ 258.591128][ T5998] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 258.593770][ T5998] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 258.597428][ T5998] usb 7-1: config 0 interface 0 has no altsetting 0 [ 258.601832][ T5998] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 258.604709][ T5998] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 258.610659][ T5998] usb 7-1: Product: syz [ 258.612301][ T5998] usb 7-1: Manufacturer: syz [ 258.614145][ T5998] usb 7-1: SerialNumber: syz [ 258.618477][ T5998] usb 7-1: config 0 descriptor?? [ 258.623125][ T5998] hub 7-1:0.0: bad descriptor, ignoring hub [ 258.625543][ T5998] hub 7-1:0.0: probe with driver hub failed with error -5 [ 258.629679][ T5998] usb 7-1: selecting invalid altsetting 0 [ 258.871857][T25982] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2420'. [ 258.879052][ T6016] usb 11-1: USB disconnect, device number 6 [ 258.987601][ T2297] usb 7-1: USB disconnect, device number 37 [ 259.400299][T26013] fuse: Bad value for 'user_id' [ 259.401906][T26013] fuse: Bad value for 'user_id' [ 259.485328][T26029] trusted_key: encrypted_key: insufficient parameters specified [ 259.493595][T26029] trusted_key: encrypted_key: insufficient parameters specified [ 259.496599][T26029] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 259.529427][ T40] audit: type=1400 audit(2000000041.789:908): avc: denied { setopt } for pid=26038 comm="syz.2.2427" lport=33567 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 259.536916][ T40] audit: type=1400 audit(2000000041.789:907): avc: denied { setopt } for pid=26038 comm="syz.2.2427" lport=33567 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 259.742571][T26059] FAULT_INJECTION: forcing a failure. [ 259.742571][T26059] name failslab, interval 1, probability 0, space 0, times 0 [ 259.748652][T26059] CPU: 2 UID: 0 PID: 26059 Comm: syz.6.2431 Not tainted syzkaller #0 PREEMPT(full) [ 259.748677][T26059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 259.748687][T26059] Call Trace: [ 259.748693][T26059] [ 259.748699][T26059] dump_stack_lvl+0x16c/0x1f0 [ 259.748737][T26059] should_fail_ex+0x512/0x640 [ 259.748757][T26059] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 259.748777][T26059] should_failslab+0xc2/0x120 [ 259.748796][T26059] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 259.748813][T26059] ? ethnl_default_set_doit+0x2bb/0x9d0 [ 259.748834][T26059] ? pause_parse_request+0xea/0x170 [ 259.748855][T26059] ? kmemdup_noprof+0x29/0x60 [ 259.748868][T26059] kmemdup_noprof+0x29/0x60 [ 259.748882][T26059] ethnl_default_set_doit+0x2bb/0x9d0 [ 259.748908][T26059] genl_family_rcv_msg_doit+0x209/0x2f0 [ 259.748926][T26059] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 259.748949][T26059] ? bpf_lsm_capable+0x9/0x10 [ 259.748967][T26059] ? security_capable+0x7e/0x260 [ 259.748999][T26059] ? ns_capable+0xd7/0x110 [ 259.749020][T26059] genl_rcv_msg+0x55c/0x800 [ 259.749038][T26059] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.749055][T26059] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 259.749085][T26059] netlink_rcv_skb+0x158/0x420 [ 259.749110][T26059] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.749125][T26059] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.749161][T26059] ? netlink_deliver_tap+0x1ae/0xd30 [ 259.749184][T26059] genl_rcv+0x28/0x40 [ 259.749197][T26059] netlink_unicast+0x5aa/0x870 [ 259.749221][T26059] ? __pfx_netlink_unicast+0x10/0x10 [ 259.749251][T26059] netlink_sendmsg+0x8c8/0xdd0 [ 259.749276][T26059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.749307][T26059] ____sys_sendmsg+0xa98/0xc70 [ 259.749324][T26059] ? copy_msghdr_from_user+0x10a/0x160 [ 259.749345][T26059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.749371][T26059] ___sys_sendmsg+0x134/0x1d0 [ 259.749393][T26059] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.749411][T26059] ? __lock_acquire+0x622/0x1c90 [ 259.749454][T26059] __sys_sendmsg+0x16d/0x220 [ 259.749474][T26059] ? __pfx___sys_sendmsg+0x10/0x10 [ 259.749506][T26059] do_syscall_64+0xcd/0xfa0 [ 259.749523][T26059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.749539][T26059] RIP: 0033:0x7f26e778f749 [ 259.749552][T26059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.749567][T26059] RSP: 002b:00007f26e85a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.749583][T26059] RAX: ffffffffffffffda RBX: 00007f26e79e5fa0 RCX: 00007f26e778f749 [ 259.749593][T26059] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 259.749602][T26059] RBP: 00007f26e85a8090 R08: 0000000000000000 R09: 0000000000000000 [ 259.749611][T26059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.749620][T26059] R13: 00007f26e79e6038 R14: 00007f26e79e5fa0 R15: 00007ffd19d59518 [ 259.749642][T26059] [ 259.867725][T26057] netlink: 'syz.5.2430': attribute type 10 has an invalid length. [ 259.877188][T26057] team0: Cannot enslave team device to itself [ 259.895255][T26063] netlink: 'syz.6.2432': attribute type 11 has an invalid length. [ 259.897908][T26063] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2432'. [ 259.975143][ T40] audit: type=1400 audit(2000000042.229:909): avc: denied { write } for pid=26075 comm="syz.6.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 260.128240][T26122] [U] v3f"S/4:XTzWtlW= [ 260.131423][T26122] [U] J"e:" [ 260.189297][T26128] netlink: 'syz.5.2441': attribute type 2 has an invalid length. [ 260.192682][T26128] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2441'. [ 260.211993][ T40] audit: type=1400 audit(2000000042.469:910): avc: denied { view } for pid=26125 comm="syz.6.2440" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 260.258618][T26140] hpfs: Bad magic ... probably not HPFS [ 260.301129][ T2297] hid_parser_main: 156 callbacks suppressed [ 260.301147][ T2297] hid-generic 000C:0007:000C.0008: unknown main item tag 0x0 [ 260.309692][ T2297] hid-generic 000C:0007:000C.0008: unknown main item tag 0x0 [ 260.312876][ T2297] hid-generic 000C:0007:000C.0008: unknown main item tag 0x0 [ 260.316101][ T2297] hid-generic 000C:0007:000C.0008: unknown main item tag 0x0 [ 260.319725][T26139] mmap: syz.5.2443 (26139): VmData 37859328 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 260.320792][T26145] hpfs: Bad magic ... probably not HPFS [ 260.327163][ T2297] hid-generic 000C:0007:000C.0008: unknown main item tag 0x0 [ 260.329991][ T2297] hid-generic 000C:0007:000C.0008: unknown main item tag 0x0 [ 260.332432][ T2297] hid-generic 000C:0007:000C.0008: unknown main item tag 0x0 [ 260.334806][ T2297] hid-generic 000C:0007:000C.0008: unknown main item tag 0x0 [ 260.337193][ T2297] hid-generic 000C:0007:000C.0008: unknown main item tag 0x0 [ 260.339837][ T2297] hid-generic 000C:0007:000C.0008: unknown main item tag 0x0 [ 260.345162][ T2297] hid-generic 000C:0007:000C.0008: hidraw1: HID v14.24 Device [syz1] on syz0 [ 260.374220][T26151] input: syz0 as /devices/virtual/input/input49 [ 260.547519][T26171] tmpfs: Bad value for 'mpol' [ 260.625265][T26185] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2450'. [ 260.653019][T26186] netlink: 'syz.5.2449': attribute type 10 has an invalid length. [ 260.755011][T26193] QAT: Device 2 not found [ 261.042448][T26200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13840 sclass=netlink_route_socket pid=26200 comm=syz.5.2453 [ 261.470616][T26249] program syz.2.2462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.655851][T26296] binder: 26295:26296 ioctl c0306201 0 returned -14 [ 262.713143][T26307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2475'. [ 262.715914][T26307] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2475'. [ 262.785041][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 262.785056][ T40] audit: type=1400 audit(2000000045.039:914): avc: denied { lock } for pid=26312 comm="syz.2.2477" path="socket:[80562]" dev="sockfs" ino=80562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 262.837891][T26315] veth1_to_team: entered promiscuous mode [ 263.584153][T26310] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 263.587247][T26310] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 263.598213][T26310] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 263.602718][T26310] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 263.607822][T26310] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 263.610951][T26310] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 263.631842][T25157] ------------[ cut here ]------------ [ 263.634636][T25157] refcount_t: underflow; use-after-free. [ 263.637034][T25157] WARNING: CPU: 0 PID: 25157 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 263.640955][T25157] Modules linked in: [ 263.643407][T25157] CPU: 0 UID: 0 PID: 25157 Comm: kbnepd  Not tainted syzkaller #0 PREEMPT(full) [ 263.646344][T25157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 263.649823][T25157] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 263.652075][T25157] Code: ff 89 de e8 a8 1f 18 fd 84 db 0f 85 66 ff ff ff e8 bb 24 18 fd c6 05 9f dd c5 0b 01 90 48 c7 c7 80 c1 ef 8b e8 07 58 d6 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 98 24 18 fd 0f b6 1d 7a dd c5 0b 31 [ 263.659361][T25157] RSP: 0018:ffffc9000306f988 EFLAGS: 00010286 [ 263.661763][T25157] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817b1cd8 [ 263.664563][T25157] RDX: ffff8880242a2480 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 263.667442][T25157] RBP: ffff88802aa63478 R08: 0000000000000001 R09: 0000000000000000 [ 263.670207][T25157] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880355b0400 [ 263.672744][T25157] R13: ffff88802aa63478 R14: ffffffff85dae5a0 R15: 0000000000000000 [ 263.675310][T25157] FS: 0000000000000000(0000) GS:ffff8880d6a05000(0000) knlGS:0000000000000000 [ 263.678163][T25157] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.680563][T25157] CR2: 00007f26e8587d58 CR3: 0000000047550000 CR4: 0000000000352ef0 [ 263.683114][T25157] Call Trace: [ 263.684395][T25157] [ 263.685605][T25157] klist_put+0x11b/0x1b0 [ 263.687309][T25157] device_del+0x1d8/0x9f0 [ 263.689117][T25157] ? __pfx_device_del+0x10/0x10 [ 263.690908][T25157] ? netdev_unregister_kobject+0x2da/0x540 [ 263.692974][T25157] unregister_netdevice_many_notify+0x14d6/0x25c0 [ 263.695194][T25157] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 263.697556][T25157] ? __pfx___mutex_lock+0x10/0x10 [ 263.699679][T25157] unregister_netdevice_queue+0x305/0x3f0 [ 263.701946][T25157] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 263.704442][T25157] ? rtnl_net_dev_lock+0x28/0x360 [ 263.706483][T25157] ? rtnl_net_dev_lock+0x146/0x360 [ 263.708534][T25157] ? rtnl_lock+0x9/0x20 [ 263.710253][T25157] ? rtnl_net_dev_lock+0x146/0x360 [ 263.712311][T25157] unregister_netdev+0x1f/0x60 [ 263.714258][T25157] bnep_session+0x224e/0x2d80 [ 263.716181][T25157] ? __pfx_bnep_session+0x10/0x10 [ 263.718025][T25157] ? do_raw_spin_lock+0x12c/0x2b0 [ 263.719744][T25157] ? __pfx_woken_wake_function+0x10/0x10 [ 263.721558][T25157] ? rcu_is_watching+0x12/0xc0 [ 263.723063][T25157] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 263.724935][T25157] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.726656][T25157] ? __kthread_parkme+0x19e/0x250 [ 263.728294][T25157] ? __pfx_bnep_session+0x10/0x10 [ 263.730035][T25157] kthread+0x3c5/0x780 [ 263.731380][T25157] ? __pfx_kthread+0x10/0x10 [ 263.732901][T25157] ? rcu_is_watching+0x12/0xc0 [ 263.734469][T25157] ? __pfx_kthread+0x10/0x10 [ 263.736024][T25157] ret_from_fork+0x675/0x7d0 [ 263.737504][T25157] ? __pfx_kthread+0x10/0x10 [ 263.739008][T25157] ret_from_fork_asm+0x1a/0x30 [ 263.740674][T25157] [ 263.741694][T25157] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 263.744013][T25157] CPU: 0 UID: 0 PID: 25157 Comm: kbnepd  Not tainted syzkaller #0 PREEMPT(full) [ 263.746900][T25157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 263.750324][T25157] Call Trace: [ 263.751409][T25157] [ 263.752378][T25157] dump_stack_lvl+0x3d/0x1f0 [ 263.753863][T25157] vpanic+0x640/0x6f0 [ 263.755151][T25157] ? refcount_warn_saturate+0x14a/0x210 [ 263.756921][T25157] panic+0xca/0xd0 [ 263.758096][T25157] ? __pfx_panic+0x10/0x10 [ 263.759523][T25157] ? check_panic_on_warn+0x1f/0xb0 [ 263.761122][T25157] check_panic_on_warn+0xab/0xb0 [ 263.762686][T25157] __warn+0xf6/0x3c0 [ 263.763954][T25157] ? refcount_warn_saturate+0x14a/0x210 [ 263.765877][T25157] report_bug+0x3c3/0x580 [ 263.767263][T25157] ? refcount_warn_saturate+0x14a/0x210 [ 263.769055][T25157] handle_bug+0x184/0x210 [ 263.770580][T25157] exc_invalid_op+0x17/0x50 [ 263.772088][T25157] asm_exc_invalid_op+0x1a/0x20 [ 263.773650][T25157] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 263.775629][T25157] Code: ff 89 de e8 a8 1f 18 fd 84 db 0f 85 66 ff ff ff e8 bb 24 18 fd c6 05 9f dd c5 0b 01 90 48 c7 c7 80 c1 ef 8b e8 07 58 d6 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 98 24 18 fd 0f b6 1d 7a dd c5 0b 31 [ 263.781752][T25157] RSP: 0018:ffffc9000306f988 EFLAGS: 00010286 [ 263.783670][T25157] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817b1cd8 [ 263.786162][T25157] RDX: ffff8880242a2480 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 263.788661][T25157] RBP: ffff88802aa63478 R08: 0000000000000001 R09: 0000000000000000 [ 263.791103][T25157] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880355b0400 [ 263.793585][T25157] R13: ffff88802aa63478 R14: ffffffff85dae5a0 R15: 0000000000000000 [ 263.796095][T25157] ? __pfx_klist_children_put+0x10/0x10 [ 263.797786][T25157] ? __warn_printk+0x198/0x350 [ 263.799236][T25157] ? __warn_printk+0x1a5/0x350 [ 263.800773][T25157] ? refcount_warn_saturate+0x149/0x210 [ 263.802512][T25157] klist_put+0x11b/0x1b0 [ 263.803880][T25157] device_del+0x1d8/0x9f0 [ 263.805273][T25157] ? __pfx_device_del+0x10/0x10 [ 263.806818][T25157] ? netdev_unregister_kobject+0x2da/0x540 [ 263.808783][T25157] unregister_netdevice_many_notify+0x14d6/0x25c0 [ 263.811111][T25157] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 263.813758][T25157] ? __pfx___mutex_lock+0x10/0x10 [ 263.815479][T25157] unregister_netdevice_queue+0x305/0x3f0 [ 263.817419][T25157] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 263.819442][T25157] ? rtnl_net_dev_lock+0x28/0x360 [ 263.821100][T25157] ? rtnl_net_dev_lock+0x146/0x360 [ 263.822742][T25157] ? rtnl_lock+0x9/0x20 [ 263.824095][T25157] ? rtnl_net_dev_lock+0x146/0x360 [ 263.825762][T25157] unregister_netdev+0x1f/0x60 [ 263.827292][T25157] bnep_session+0x224e/0x2d80 [ 263.828788][T25157] ? __pfx_bnep_session+0x10/0x10 [ 263.830852][T25157] ? do_raw_spin_lock+0x12c/0x2b0 [ 263.832717][T25157] ? __pfx_woken_wake_function+0x10/0x10 [ 263.834515][T25157] ? rcu_is_watching+0x12/0xc0 [ 263.836112][T25157] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 263.837988][T25157] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.839777][T25157] ? __kthread_parkme+0x19e/0x250 [ 263.841442][T25157] ? __pfx_bnep_session+0x10/0x10 [ 263.843066][T25157] kthread+0x3c5/0x780 [ 263.844419][T25157] ? __pfx_kthread+0x10/0x10 [ 263.845888][T25157] ? rcu_is_watching+0x12/0xc0 [ 263.847410][T25157] ? __pfx_kthread+0x10/0x10 [ 263.848903][T25157] ret_from_fork+0x675/0x7d0 [ 263.850396][T25157] ? __pfx_kthread+0x10/0x10 [ 263.851896][T25157] ret_from_fork_asm+0x1a/0x30 [ 263.853456][T25157] [ 264.934487][T25157] Shutting down cpus with NMI [ 264.936719][T25157] Kernel Offset: disabled [ 264.938117][T25157] Rebooting in 86400 seconds..