last executing test programs: 2m40.081264729s ago: executing program 0 (id=28): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x22400, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "7db246620e7e31376b6476381bbd4e69"}) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000080)={r0, 0x0, 0x6, 0x85e, 0x8000000000000001, 0x4}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f00000000c0)) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000640)={0x0, &(0x7f0000000100)=[@nested_amd_vmsave={0x183, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x6, 0x9}}, @wr_drn={0x68, 0x20, {0x7, 0x4}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x94, 0x0, 0x0, 0x3}}, @nested_amd_invlpga={0x17d, 0x20, {0x8080000, 0x1c36}}, @enable_nested={0x12c, 0x18}, @code={0xa, 0x57, {"b8010000000f01d9660f1549076664410f23530f009a00000000c401256b5f4966ba2100ed64f32e420f06b9e50900000f3266b812018ed8b9800000c00f3235002000000f30"}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_invlpga={0x17d, 0x20, {0x4000, 0xe625}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18}, @rdmsr={0x66, 0x18, {0x410}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x5f1, 0x80000000, 0x7, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest_nat=0x6820, 0x800, 0x40, 0x8}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x2c, 0xb6, 0x5}}, @wrmsr={0x65, 0x20, {0x2af, 0x2}}, @nested_load_code={0x12e, 0x73, {0x1, "65490fc76a40652e64f30fc7b5000000000f21f3c4a37d39c4030fa047d37955c7442400559910c8c74424029f060000c7442406000000000f011424b8010000000f01d966b80d010f00d866baf80cb88819f989ef66bafc0c66ed"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x2006, 0x4, 0xfffffffffffffff4, 0x6}}, @nested_amd_stgi={0x17e, 0x10}, @set_irq_handler={0xc8, 0x20, {0xc8, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x10, 0x3e, 0x8000, 0x3}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x2, 0x80}}, @code={0xa, 0x60, {"903e67216b0566baf80cb8f45c3a82ef66bafc0c66edb980000040b800300000ba000000000f30f3450f218945863a0fc76ea166baf80cb8282f7f82ef66bafc0cb000eeb9a40800000f32f30fa6d0"}}, @cpuid={0x64, 0x18, {0x7, 0x1}}, @out_dx={0x6a, 0x28, {0xf895, 0x0, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_load_syzos={0x136, 0x50, {0x3, 0x100000000, [@nested_amd_vmload={0x182, 0x18}, @nested_vmresume={0x130, 0x18, 0x1}]}}, @in_dx={0x69, 0x20, {0xc309, 0x1}}], 0x52a}) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000680)=0x3) r3 = socket$inet(0x2, 0x80002, 0x6) r4 = getpid() r5 = syz_open_procfs(r4, &(0x7f00000006c0)='net/ip6_mr_vif\x00') ioctl$BSG_SET_COMMAND_Q(r5, 0x2271, &(0x7f0000000700)=0x1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000740)={'filter\x00', 0x2, [{}, {}]}, 0x48) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f00000007c0)) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000800)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@map=r5, 0xc6c39c55fcd7fd07, 0x1, 0x10000, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000880)=[0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], &(0x7f0000000900)=[0x0, 0x0]}, 0x40) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r3, 0x40086e81, &(0x7f0000000980)=0x4) ioctl$VIDIOC_ENUMAUDIO(r5, 0xc0345641, &(0x7f00000009c0)={0xfffffe9d, "b0a59a89a49ff814bec7ab4814177dee2babaaccdfcf4efca0afa72b83048d35", 0x3, 0x1}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000a00)=0x1cb34bc0, 0x4) ioctl$XFS_IOC_FSINUMBERS(r2, 0xc0205867, &(0x7f0000001000)={&(0x7f0000000a40)=0x9, 0x5, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000fc0)}) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000001080)=[@text16={0x10, &(0x7f0000001040)="0f20e06635000004000f22e0f30f1ecb6764360f01cbdb14660f3a17ee9565819900500200ba4300b01beef30fa6c8c3360f2df6", 0x34}], 0x1, 0x0, &(0x7f00000010c0)=[@dstype0={0x6, 0xa}, @efer={0x2, 0x100}], 0x2) ioctl$FIONCLEX(r3, 0x5450) r6 = socket$inet(0x2, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000001100)={0x387a, 0xfffffffa, 0x1000}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000001180)={0x2, 'team_slave_1\x00', 0x3}, 0x18) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0xd4, 0x13, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0xc0, 0x8, "66da30bad093081a8cb58de9b11cecf2bd3f5c71effac82fc3bfb88d48b7f982608f2150cd64b2f06ff3f79337aa2900cc1e0e4426f02bcd283616cbe8e8f5fd6908437ec10ef6553ccabc55c0f5400050682b6984496bfffd9b64ce093c0293e46ffa79afb1dff51fcd0ce3abf2838925fde05f00251d8b8ad051e0106185a2ea6f5aac60c2b6743a2c85e437ab0fddb9e7bb391dd02d66b82d35d75b5bc3fc14e8c1f58d7f4db0700628236c0b40f963b15cd0454a3b40a5f916db"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8080}, 0xc0) connect$vsock_stream(r5, &(0x7f0000001380)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f00000013c0)={0x2, 'batadv0\x00', 0x2}, 0x18) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r7, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x4c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4005}, 0xc000) 2m39.8782816s ago: executing program 0 (id=34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r3 = socket$inet(0x2, 0x4, 0x4) getsockname$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r5, &(0x7f0000000a80)=[{{&(0x7f0000000140)=@rc, 0x80, &(0x7f0000000980)=[{&(0x7f0000000240)=""/29, 0x1d}, {&(0x7f0000000280)=""/48, 0x30}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000680)=""/227, 0xe3}, {&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=""/13, 0xd}, {&(0x7f0000000840)=""/33, 0x21}, {&(0x7f0000000880)=""/24, 0x18}, {&(0x7f00000008c0)=""/169, 0xa9}], 0xa, &(0x7f0000000a40)=""/37, 0x25}, 0x8}], 0x1, 0x10020, &(0x7f0000000ac0)={0x77359400}) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbba2d6"], 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) close(0x3) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000100)={r10, 0x7}, 0x8) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x24000000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x40000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd6, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 2m39.617254595s ago: executing program 0 (id=37): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x7fffffff) (async) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20042, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x82) pwritev2(r4, &(0x7f0000000140)=[{&(0x7f0000000000)='_', 0x1}], 0x1, 0x81, 0x0, 0x82) (async) r5 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x369, 0xcff, 0x6, 0x8d6a, 0x5, 0x48, 0x6b30, 0x8, 0x6, 0x6, 0xfffffffffffffffa, 0x7, 0x6, 0x3, 0x8000], 0x6000, 0x11110}) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) (async) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0x2}}, './file1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) 2m39.447581152s ago: executing program 0 (id=38): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x300b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x800, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb0100180000000000000007000000000000000000000000000000010a0004000000000100000000000000000000000008"], 0x0, 0x32}, 0x28) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = inotify_init() r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x2000010, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x7, &(0x7f0000000340)=@raw=[@generic={0x81, 0x9, 0x8, 0x3, 0x14}, @exit, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5d}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000380)='syzkaller\x00', 0x5, 0x76, &(0x7f0000000480)=""/118, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xe, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000740)={r5, r6}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x2, 0x80000}, 0x20) close_range(r0, r3, 0x2) r9 = socket(0xb, 0x3, 0x40) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x10000006, @remote}}}, 0x108) r10 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xfffffffffffffe8d, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000640)={0xc, 0x0, &(0x7f0000000140)=[@dead_binder_done], 0x0, 0x0, 0x0}) 2m39.308160065s ago: executing program 0 (id=40): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x1, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x14, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @enum={0x6, 0x0, 0x0, 0x6, 0x4, [{0xc, 0x5}, {0x9, 0x506}]}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x20) 2m38.248338105s ago: executing program 0 (id=50): lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) (async) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) timer_create(0x3, &(0x7f0000000100)={0x0, 0x3a, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000140)) (async, rerun: 64) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r3, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xa) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2m38.230153688s ago: executing program 32 (id=50): lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) (async) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) timer_create(0x3, &(0x7f0000000100)={0x0, 0x3a, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000140)) (async, rerun: 64) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r3, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xa) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1m35.007937034s ago: executing program 3 (id=664): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x8000000004) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m34.949669213s ago: executing program 3 (id=666): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) close(0x3) r3 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$DVB_DEMUX_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000180)={0x5, 0x0, r3}) write$cgroup_freezer_state(r4, &(0x7f0000000340)='FREEZING\x00', 0x9) write(r0, 0x0, 0x0) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x4) fstat(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RFSYNC(r4, &(0x7f0000000480)={0x7, 0x33, 0x2}, 0x7) setreuid(r6, r6) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f00000000c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000380)={'trans=virtio,', {[{@nodevmap}, {@dfltgid={'dfltgid', 0x3d, r8}}, {@loose}, {@cache_none}, {@cache_mmap}, {@aname={'aname', 0x3d, '!\x14'}}], [{@measure}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@euid_gt={'euid>', r6}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_eq={'fowner', 0x3d, r7}}]}}) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r9, &(0x7f0000002540)={0x2020}, 0x2020) 1m34.821447635s ago: executing program 3 (id=669): keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x54, r1, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91, 0x4}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}}, 0x0) 1m34.817670404s ago: executing program 3 (id=671): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x100) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x402) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000740)={0x0, r3, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000007c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r5, 0x5, 0x3, 0x0, 0x3, [0x0], [0x4, 0x7, 0x7b], [0x7, 0xffff, 0x2, 0x10000], [0x0, 0x0, 0x1, 0xfff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000280)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x18f887, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000001280)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001240)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="5c040000", @ANYRES16=r0, @ANYBLOB="000027bd7000ffdbdf253a00000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x45c}, 0x1, 0x0, 0x0, 0x40004}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r14 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) chdir(&(0x7f00000003c0)='./file0/../file0\x00') ioctl$VIDIOC_S_HW_FREQ_SEEK(r14, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0xe98, 0x3}) sendmsg$FOU_CMD_ADD(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010026bd7000fcdbdf250100000006000a004e24000014000900fa880000000000000060000000000100050002000a"], 0x38}, 0x1, 0x0, 0x0, 0x8000000}, 0x800) sendmsg$FOU_CMD_DEL(r9, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000af77a645328e639cd3405288467bf3007e2cafa3f6e7", @ANYRES16=r13, @ANYBLOB="00042abd7000fcdbdf250200000008000600ac14141508000600e000000214000700fe8000000000000000000000000000aa14000700fe88000000000000000000000000000114000900fe8000000000000000000000000000bb14000900fe80000000000000000000000000002f08000800ac1414bb06000a004e20000008000800ac1e0101"], 0x8c}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="070000000000000000dbcb4b080000000000000000282b0000", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x24008090) 1m34.651500233s ago: executing program 3 (id=672): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x40810) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@wrmsr={0x65, 0x20, {0x1b, 0xfffff000}}, @rdmsr={0x66, 0x18, {0x1b}}], 0x38}) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r6, 0x6) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x1}) syz_kvm_assert_syzos_uexit$x86(r4, r6, 0xffffffffffffffff) 1m34.507500907s ago: executing program 3 (id=673): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000666e1ef404f2f67ee65f414508361277e6ddd5dfe5b9628f3b4150537ef71940a1fb5d36de0b0ba9c6734d21545f918ad7f1af05d5d3b49832966e842b6815ec0f2d2e786048c12b4c40d47b2a85b0f958ed1c326730bfea481ce95c2e47ca5061e48fb0e97271729976bb1698c35de30a05f69fd150ed7d11b656fc7f050d475ae9e6a419efd45f41c2f7ad0c22a520e4daa6bea3bbc521807acb3b8ded7f1f54e37f5bc801b3218208dc67235db690f96e1811b6328eb9905259465039890a", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x150, 0x0, 0x3, [{{0x4, 0x4, 0x28000, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0xb, 0x6, 0x0, 0x6, 0x1, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x1, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x2, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x6, 0x5, 0x2, 0x2, 0x6, 0x7, 0x8000, 0x0, r5, r6, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000140), 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=@allocspi={0x10c, 0x16, 0x4, 0x70bd2c, 0x25dfdbfb, {{{@in=@loopback, @in6=@mcast1, 0x4e24, 0x0, 0x4e23, 0x1, 0xa, 0x0, 0x0, 0x2b, r2, r5}, {@in=@local, 0x4d2, 0x32}, @in6=@loopback, {0x85, 0x9, 0xdc, 0x175, 0x4fe, 0x8, 0xed, 0x4f}, {0xffffffff, 0x5, 0x9, 0x2}, {0x8, 0x5, 0x8}, 0x70bd25, 0x3507, 0xa, 0x2, 0x3, 0x2}, 0x200, 0xfffff27a}, [@replay_thresh={0x8, 0xb, 0x2}, @mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x42800}, 0x4040) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r8, 0x80106f53, &(0x7f0000000040)={0x34, &(0x7f0000000240)=[{0x46, '\x00', @st={0x4, [{0x1, @uvalue=0x6}, {0x3, @svalue}, {0x2, @uvalue=0x3}, {0x2, @uvalue=0x2}]}, 0xfffffffe}]}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x800, 0x0, 0x7c, {0x0, 0x0, 0x0, 0x0, 0x4010, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1m34.488038035s ago: executing program 33 (id=673): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000666e1ef404f2f67ee65f414508361277e6ddd5dfe5b9628f3b4150537ef71940a1fb5d36de0b0ba9c6734d21545f918ad7f1af05d5d3b49832966e842b6815ec0f2d2e786048c12b4c40d47b2a85b0f958ed1c326730bfea481ce95c2e47ca5061e48fb0e97271729976bb1698c35de30a05f69fd150ed7d11b656fc7f050d475ae9e6a419efd45f41c2f7ad0c22a520e4daa6bea3bbc521807acb3b8ded7f1f54e37f5bc801b3218208dc67235db690f96e1811b6328eb9905259465039890a", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000083c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0777b28daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcf5283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0b999a21014b573ba3996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e891832aa25d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d0faa38ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4485d3bb6b5f4e14c7764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc122d13c6559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad754f9e7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06e3df580d372318b3d203503c6e968206d7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52ab80910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4c8fd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd685c5f32120b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa586015914c116db114aa82c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e5320a4b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2428edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392e34b7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf42dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5bb453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a670a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c3", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x150, 0x0, 0x3, [{{0x4, 0x4, 0x28000, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0xb, 0x6, 0x0, 0x6, 0x1, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x1, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x2, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x6, 0x5, 0x2, 0x2, 0x6, 0x7, 0x8000, 0x0, r5, r6, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000140), 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=@allocspi={0x10c, 0x16, 0x4, 0x70bd2c, 0x25dfdbfb, {{{@in=@loopback, @in6=@mcast1, 0x4e24, 0x0, 0x4e23, 0x1, 0xa, 0x0, 0x0, 0x2b, r2, r5}, {@in=@local, 0x4d2, 0x32}, @in6=@loopback, {0x85, 0x9, 0xdc, 0x175, 0x4fe, 0x8, 0xed, 0x4f}, {0xffffffff, 0x5, 0x9, 0x2}, {0x8, 0x5, 0x8}, 0x70bd25, 0x3507, 0xa, 0x2, 0x3, 0x2}, 0x200, 0xfffff27a}, [@replay_thresh={0x8, 0xb, 0x2}, @mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x42800}, 0x4040) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r8, 0x80106f53, &(0x7f0000000040)={0x34, &(0x7f0000000240)=[{0x46, '\x00', @st={0x4, [{0x1, @uvalue=0x6}, {0x3, @svalue}, {0x2, @uvalue=0x3}, {0x2, @uvalue=0x2}]}, 0xfffffffe}]}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x800, 0x0, 0x7c, {0x0, 0x0, 0x0, 0x0, 0x4010, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 30.586069575s ago: executing program 5 (id=1338): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) (async) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'load '}, 0x1a, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) r4 = io_uring_setup(0x6508, &(0x7f0000000240)={0x0, 0x2c3f, 0x1000, 0x21, 0x190}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x80001) (async) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_POISON(r5, 0xc020aa08, &(0x7f0000000000)={{&(0x7f00001f8000/0x4000)=nil, 0x4000}, 0x1}) (async) ioctl$UFFDIO_POISON(r5, 0xc020aa08, &(0x7f0000000000)={{&(0x7f00001f8000/0x4000)=nil, 0x4000}, 0x1}) socket(0x28, 0x5, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x7f343dd74644d465, 0x4, 0x25dfdbfe, {0x2}, [@NDTA_NAME={0x8, 0x1, 'GPL\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c040}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) (async) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/2:0:0:0\x00', 0x1, 0x0) (async) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/2:0:0:0\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r9, 0x5382, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 30.374309497s ago: executing program 5 (id=1340): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000000d]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 30.157096757s ago: executing program 5 (id=1341): semctl$SETVAL(0xffffffffffffffff, 0x3, 0x10, &(0x7f00000001c0)=0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc97a, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x6, 0x3}, 0x10) bind$tipc(r2, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) r6 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x6f) r8 = add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)=ANY=[@ANYBLOB="02000000000000006161616161616161616161616161616161616161616161616161616161616161313131313131313a063394578efa1631313131313131313131313131"], 0x48, r6) keyctl$KEYCTL_MOVE(0x1e, r8, r6, 0xfffffffffffffffb, 0x1) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000040), 0x0, 0x0, 0x0) llistxattr(&(0x7f00000003c0)='./file1\x00', &(0x7f00000004c0)=""/24, 0x18) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r10], 0x2c}, 0x1, 0x0, 0x0, 0x400a0c4}, 0x4000000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a0500000000000000000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021640000000c0a010300dd000000000000070000090900020073797a310000000009010073797a30000000003800038034000080080003400000000228000b8024000180090001006d65746100000000140002800800034000b2eed77b7e238991450000090800024000000005140000001000010000000000000000000084000a00671009ea3dfc79f8d83a9b4af4e0e8c5ba347b643c3a558ea31f03ab88cb5325cf544c5097f45e0057bcf9151556ddfd1d46b7198921374b4ff8d9967e785408"], 0xe8}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x7, 0xfffffffffffffffe, r12}) syz_usb_connect(0x0, 0x992, &(0x7f0000001180)={{0x12, 0x1, 0x200, 0x10, 0x4f, 0xb3, 0x10, 0x4576, 0xb0ef, 0xeb7e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x980, 0x4, 0x3, 0xd9, 0x0, 0x52, "", [{{0x9, 0x4, 0x39, 0x8, 0x9, 0x8, 0x2, 0x50, 0x2, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x1000, 0x0, 0x2}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x3, 0x4, "ae3186c31b51"}]}], [{{0x9, 0x5, 0x3, 0x10, 0x200, 0x6, 0xc6, 0x1}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0x5, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x3ff}, @generic={0x48, 0x26, "b4bd19973053d407201f8c3d6458f76524ec66c28f4f4bdb5a9fde8806d1050fc2948d3edcc0cbcfbe407b65dd9d77fce607be9148b258f964f27c8fc578effdd5d78cd1b97c"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x400, 0x4, 0x1, 0x25}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x3, 0x4, 0x9}}, {{0x9, 0x5, 0x9, 0xc, 0x10, 0x2, 0x6, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x32, 0x4}]}}, {{0x9, 0x5, 0xe, 0x0, 0x220, 0x9, 0x4, 0x72, [@generic={0x8d, 0x7, "fc9e23cf29e4f90bc1dfd52ea3bb01064e8dd7c4db14bb82c7613c8d7b785c2b40dfe8067d7b98f461bc8b745d1d6982c01da051ac3dc879774d1394d61d005d59e2cc0778fb10adb8bae85fa3982bf2943c885d8efe24d7eb6a3cf90683e9bfa49225db86ac70d1e2c1d64e3c7a31b04175695bf66751ddf39d73bf1c3d9fd312d5345d9b3f8d7d868e67"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0x10, 0x1, 0x4, [@generic={0x2c, 0x24, "f39b8c9c14c5acb72dd7be37845b41042a581fefd17521cb9b5b62026b819d9a2c94a3d00c5aaa76db39"}, @generic={0x28, 0xa, "bdd1daa886011318efe16d4f699439bbcf58e431c291d7467c5659e77cb413e8ce550eb08a26"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x6, 0x2, 0xdb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x9}]}}, {{0x9, 0x5, 0xa, 0x3, 0x400, 0x73, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x7ff}, @generic={0xa5, 0xf, "15dfb6e0902de919c6aaaca51b536be1f73ec66214b4492dc63baa256a7424f047c63c5c2c11762e2cc2c02cf44016deb32f525042f051afe5a697a7c09915daf8d5b66f53a915aafb6bffc96c57dfb24e70414b2f31f1f0312eadf1806c4519592504403e28be2f924a45429e0e840f065b668de7f6af9147372bb9936f124da3608c3306baa89de23f266ed0be7efb5df6ff8f9eb28f9e2e2db151f5dc240bb270ac"}]}}]}}, {{0x9, 0x4, 0xbd, 0xa, 0xb, 0xa4, 0x26, 0xbf, 0x7f, [@uac_as={[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x2, 0xa3, 0xd, "", 'x'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x4, 0xba, 0x7, "d7", "cc"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9e, 0x3, 0x9, 0x1, "ef", "a006"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7a, 0x1, 0x9, 0xe}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x4c, 0x40, 0x5}]}], [{{0x9, 0x5, 0x3, 0x4, 0x8, 0xb, 0x5, 0xf1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x5}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x2, 0x8, 0x87}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0xff, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa6, 0x88a}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x5, 0x7f, 0xb}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x4, 0x81, 0xff}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x41, 0xff, 0x7, [@generic={0x31, 0x8, "38b68c3a880c10789648f46f7f611c6decc5a55035e01a2774974cbeb814c2674996866827be2569f5e6009ca648b2"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x48}]}}, {{0x9, 0x5, 0x63d5804cde1f5356, 0x3, 0x200, 0xb6, 0xbf, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x3}, @generic={0x52, 0xa, "8896edfa428b7981be3983b56d5a43e38101661901d8d2ae0826ee2438a1b923ab4b10bca9dcaca2f7eba23e9db79504f65b2844e8cfd2248f07d71dfd7036a44ca72bdff0fef213b2e8a49abc2c7aec"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x9, 0x5e, 0x18, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x200}, @generic={0x6d, 0x2, "c1075358d5afeda1975a74aaa8b797d4999deb19aca80b7c01dd400940860cf798084b9ab5527be82f1a87e5a9810621968c2fff332c3a731a420ed658ed009417aa2b7103922d7ded91782a797cbfb8ed95d8dd7d53cf01f74e3915ff4de7fb70ac648cb55ba287c2d58e"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x7f7, 0x6, 0x2, 0x8}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x6, 0x0, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0xfffd}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0xa, 0x1, 0x7, [@generic={0xc9, 0x1, "6d96f6cfef5a1eda3e3b55af27c791490518610525995fd22330c60bdd8e180397433555af1443987d6784d904492e4f1500195aae4d4d70459e8ac34b4983cd29e13d464901cb0d3fdb9825d6d7029c1fb9376bd52827f6413c72af4c0f1050f8d8c1d0c2a887c20a7510a47ab271fe331a8e701194098e580e08c7cf5df4bd675d8d1950525aacd867dcfc032a5869bada0951f9477f4aa4ea7af76a499f8926818a117784c690f6e006016efb135470de0dcc2d56aa2f98957d26f5beb2644ecd84817f58ad"}]}}]}}, {{0x9, 0x4, 0x6a, 0x7, 0xf, 0xa3, 0x37, 0x73, 0xc4, [], [{{0x9, 0x5, 0xf, 0x0, 0x40, 0x8, 0x6, 0x9, [@generic={0x84, 0xe, "48d7a53d60794e6ec3d12c1c3810f54dc047ff0c64905a5939346ca7ef22d09a639a98f69ab5d80df07f0396cf031fcb5ca6fbdb802cb57fe8cf11dc8f2f7e6b2371e8339c4386c15a4b69665e12433030bfcee65dc3cb9db811e53deb3a85931b8342211d7a0ce2020938a8478c698f22c95d3aa1f011ff2b1aa57195285965eaba"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x7, 0x5, 0x3, [@generic={0x20, 0x3c, "f365e6f85050574934a0d1adfc140ab1447d8859317bebbbcb4105b7eb49"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0xfff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x1, 0x6, 0x2}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x9b, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x1}]}}, {{0x9, 0x5, 0xc, 0x6, 0x3ff, 0x4, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xd, 0x18}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4b, 0x8}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x0, 0x6, 0x17}}, {{0x9, 0x5, 0x5, 0x8, 0x200, 0x7, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x6}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x80, 0x62, 0xf6}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x10, 0x3, 0x82}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x40}]}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0xda, 0xdb, 0x7, [@generic={0x98, 0x10, "0720a0fc941b557c6d1655d8c880b94eee3085a49c3015d4359f3af75ae6b6222e333640ea887939855252a2f47f0151b941377c47e13ac42721a44979052d3381beec79928220da9fb40942b5f45a06557db38ce32630d562c68b8845dae230e9cb261ef46216b94f501365c66bd8c932603b4ae087486c0a41f3478cd50ddba8d5084ad6f989fb69f5a1c63c32b4436e04cd0af688"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x9dccac9a9f3afccd, 0x7, 0xff, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x9}, @generic={0x90, 0xc, "2cacdb5625b771222134c329aa11a0b610de72165a4b7bd92ceeca88f911c4966d37907b2bc58e3d4fda9c85d63bd475c7ebcdb63e3c9cb65085ca84a8b09d2e10a048404a10e27d422e50d9b59d1a5ee38104e4f6b5ed52f969bc3a84009512ab30ec4d54055f944df5868c7a33e9a06ffcac06feb8aea39d4018edd3e935a6b67ed73cf4d6de4f21edfb336420"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x10, 0x8fac}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x868}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x31, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x7}]}}]}}, {{0x9, 0x4, 0xa3, 0x3, 0xc, 0x3f, 0xc0, 0x35, 0xb1, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xa18, 0x0, 0xb, 0x9}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0xc, 0x4, 0x1}, @obex={0x5, 0x24, 0x15, 0x1}, @dmm={0x7, 0x24, 0x14, 0xd22, 0x3}]}], [{{0x9, 0x5, 0x1, 0x0, 0x10, 0xf, 0x83, 0x2}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x2, 0x4, 0x1}}, {{0x9, 0x5, 0x13, 0x1, 0x40, 0x7, 0x2, 0x62, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8c, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x4}]}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0xb, 0x1, 0x9, [@generic={0xd0, 0x3, "4a2fe4d7002cc1e2d326980870d1f08d97a6bcb81f16f6bf577d2b6b9ee50ce78dbddd8507d177545c31f90cf12d7fa47fb1f949b995c737ae84c18f979cab0a091231e1dbeeda2d4e32d02d84ddaa6b5ac0c6e033a0f3f144d846a28f766f30e784d22459c2ece87645a6f1795162a5aaf09be38f6c77eb96eab772f75a05c1b83783335ae5743a5b45a461537389c98190f769897bb856b90be1fdeedb38b6bc889e721e0c9d1dbfac106786b2c5c680f844e992aed2b91a8ec4459402fdcdf120bc7879779581845f2fdd52e5"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x28}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ef, 0x5a, 0x6, 0xc}}, {{0x9, 0x5, 0xa, 0x2, 0x10, 0xf5, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x89, 0x5bf}, @generic={0x2e, 0x23, "48eaab6f1b46d3bea9d347a9d5cedab32398090a75df9017e6896239c8203a8a24ed5daf0da746328a597a7c"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xff, 0x8, 0xfb}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0x0, 0x4, 0xaa}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x6, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xfffe}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9}]}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0x81, 0x7, 0xef, [@uac_iso={0x7, 0x25, 0x1, 0x8}]}}, {{0x9, 0x5, 0x8, 0xade4b463504bbe5a, 0x10, 0x7, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xf}]}}, {{0x9, 0x5, 0x0, 0x0, 0x7dcfa7bdf6f78f2, 0x80, 0x4, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x3}]}}]}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x200, 0x39, 0x1, 0x88, 0x30, 0x9}, 0x10, &(0x7f0000000240)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x2, 0x5, 0x4, 0x7}]}, 0x3, [{0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x439}}, {0xa1, &(0x7f0000001040)=ANY=[@ANYBLOB="a10345b90a9e91715631073f1266904e63432701340bf1a88a0ffc1c29713813ddb25b3d8e6003639fcced106b2da8bcbc324d0bba14d6f5504762583ead80dfd4a3eea1a39ed922f6f9bf1b417ddbd959562f554b93d2706e8650a1815fe84635ea65c2694211141afe39a091d7abae128d7fa6ea0d08322f4817ef0c4278083989377e180097b890733f5fa835ef5b16320b7b038559323d402cced723dd57b4"]}, {0xab, &(0x7f0000000640)=@string={0xab, 0x3, "96d742e3a6512a24d4c37c529f4b67080e9adedc3ad103c4ca3ec065e614fb35f5a0b5efb47b638cd5d9449fb3a9d0f5c6316608fc788c7f39ad254d049300a989883224c0d4f737189749aa0518c1681d5882e167edbb598adb87c19356cc0a3485785e55fa2369b0a39750b434646f12429d14506491a2d95de05cf53476dcd2048ba2ab392130d399025cc0eb65a408b8ae2db47e64abb48387330ec48665275b1fc17ebe466faf"}}]}) 29.583395386s ago: executing program 5 (id=1347): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) mkdirat(r1, &(0x7f0000000500)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') chown(&(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x166) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') close(0x3) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000180)={[{}]}) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0x5, 0x3, 0x9, 0x7}) r4 = syz_clone(0x100980, &(0x7f0000000d00)="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", 0xc00, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000004180)=[{&(0x7f0000003cc0)=""/115, 0x73}], 0x1, &(0x7f0000004240)=[{&(0x7f0000004200)=""/12, 0xc}], 0x1, 0x0) r5 = epoll_create1(0x80000) epoll_pwait(r5, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x1, &(0x7f0000000080)={[0x2]}, 0x8) ioperm(0x0, 0x7fff, 0x15f9) 29.514428523s ago: executing program 5 (id=1349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}, 0x1, 0x0, 0x0, 0x44800}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x128}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="8e34"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.995728513s ago: executing program 5 (id=1356): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000280)="7800000018002507b9409b14ffff00000214ae04020206050a02040c430009003f000405100000000d0085a168d0bf46d389516a9069921a4b0005000a00000049935ade4a460c89b6ec0cff3959547f5000000000c902007a00004a324004001600040000d5808bd3e30a37e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='gfs2\x00', 0x21000d, 0x0) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xd1, "ed23e0e19b065342e4679acec96c5c1b28be7eb077346f7c42a8a95e463717294b94e68eb6fb6663ba1b990480d07e9944145983a9a553478d8444784d85ef0ff8bce5b8ca40affa573b14c8ddbdbc0b8e33c6db63a50f72d9004c35e24ceaadeabe23d63cfd258e257a6572086d420a78292885c56c961cabd1b0040c39913cbbd2979c1d49776c27dd3e88a3fa0815d13b38dc0b1ca3530a62c5ba45d6b75092690f10be0366221f2e3fc8b0a0909218b2a534864275b2b4207acbc52ff9d97215349c363133650b122898ad619f405d"}, &(0x7f0000000100)=0xd9) (async) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r8 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r9 = syz_open_dev$video4linux(&(0x7f0000000300), 0x1, 0x802) ioctl$VIDIOC_SUBDEV_S_CROP(r9, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x3, 0xfffffffc, 0x4, 0x6}}) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r10) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000ffdbdf250700000005001300810000001400080000"], 0x38}}, 0x2) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0xffff8001}, &(0x7f0000000180)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x40020, &(0x7f00000003c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0]) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r1, 0x51, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x101, @loopback, 0xb}]}, &(0x7f0000000180)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, 0x90) 28.897376721s ago: executing program 34 (id=1356): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000280)="7800000018002507b9409b14ffff00000214ae04020206050a02040c430009003f000405100000000d0085a168d0bf46d389516a9069921a4b0005000a00000049935ade4a460c89b6ec0cff3959547f5000000000c902007a00004a324004001600040000d5808bd3e30a37e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='gfs2\x00', 0x21000d, 0x0) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xd1, "ed23e0e19b065342e4679acec96c5c1b28be7eb077346f7c42a8a95e463717294b94e68eb6fb6663ba1b990480d07e9944145983a9a553478d8444784d85ef0ff8bce5b8ca40affa573b14c8ddbdbc0b8e33c6db63a50f72d9004c35e24ceaadeabe23d63cfd258e257a6572086d420a78292885c56c961cabd1b0040c39913cbbd2979c1d49776c27dd3e88a3fa0815d13b38dc0b1ca3530a62c5ba45d6b75092690f10be0366221f2e3fc8b0a0909218b2a534864275b2b4207acbc52ff9d97215349c363133650b122898ad619f405d"}, &(0x7f0000000100)=0xd9) (async) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r8 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r9 = syz_open_dev$video4linux(&(0x7f0000000300), 0x1, 0x802) ioctl$VIDIOC_SUBDEV_S_CROP(r9, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x3, 0xfffffffc, 0x4, 0x6}}) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r10) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000ffdbdf250700000005001300810000001400080000"], 0x38}}, 0x2) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0xffff8001}, &(0x7f0000000180)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x40020, &(0x7f00000003c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0]) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r1, 0x51, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x101, @loopback, 0xb}]}, &(0x7f0000000180)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, 0x90) 18.252690223s ago: executing program 2 (id=1499): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d00000000060000000100000000000000000000000000000000000000090000000000000000000000000001000000"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cpuacct.usage_all\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) setuid(0xee00) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@loopback, @in6=@private2, 0x4e21, 0x0, 0x4e22, 0x101, 0x0, 0x80, 0x80, 0x3a, 0x0, 0xee01}, {0x35ae, 0x8000000000000001, 0x7f11, 0x1, 0xc, 0xcd13, 0x1ff, 0x9}, {0x0, 0x101, 0x44, 0x9}, 0x6, 0x0, 0x2, 0x1, 0x1, 0x2}, {{@in6=@private0, 0x4d5, 0x33}, 0x2, @in6=@local, 0x3504, 0x2, 0x1, 0x8, 0x8, 0x4, 0x81}}, 0xe8) setpriority(0x1, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffd, @loopback, 0x7ffffffe}, 0x1c) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x328, 0x20a, 0x278, 0x328, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {0xff}, 0x3c, 0x0, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x8638, [0x6, 0x4], 0x4, 0x0, 0xa, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, @private0, @remote, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}], 0x8}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x1, 0x4}, {0xfffd, 0x2, 0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @loopback}, 0x1c) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@deltclass={0x58, 0x29, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff3, 0xf}, {0x7, 0xfff1}, {0xfff3, 0x10}}, [@tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0xd}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x90) sendmsg$802154_raw(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000180)={&(0x7f00000000c0)="54e59da18a6fbb6cda336a92d5dabcf23c047fde9341e76c91f77e9f522b2173e81755baa73c7d1bf3f1bf9f6ab3baa172877ee15542b29d30144e4834420e6998f7ce8fa5bb820ddbdc4658be50b9ba0dbc7f02d90096e08ec2dec8f675ec6470d5393594d5e9a0a70b6fe3cd5ae9d4c79d63fbabd0e1603f96f4131c301e3076451fbaa8064d9480baa46b4b1c21755239edfb4ff282815084bb497d2c3e316b24547d1f16e4e7953a4855b812d2cf40c3ccbac365dfcc8b0a9f362c40d469", 0xc0}, 0x1, 0x0, 0x0, 0x11}, 0x48005) 18.182438979s ago: executing program 2 (id=1502): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000080)=0x3, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff7f", 0x6}, {&(0x7f0000000140)="ebe3a0", 0x3}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x40800) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000000c0)={{0xfffffff9, 0xc}, 0x2}, 0x10) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) sendfile(r5, r5, &(0x7f0000000100)=0x6, 0x1) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000280)={r0, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491e44e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd4131e7744b74aaa2317f2b2cb2fea7e7d63f26e8cfd1d6c6eaab2b99d845fb", [0x61, 0x4]}}) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x10002, 0x3, 0x15, 0xc, "e1c5be584875f9a3a8c3d21d4aed0888fd5bbc6482d20f77cd7c69344687c22d97bae414bddadaa37277c798331a9beae5f95599c89e8c9e4abd843f22651d53", "1de095496130c0f2d7e3adec074fcc6ef189d2e859a4a31a9afd00", [0x4, 0x3]}) 17.976471233s ago: executing program 2 (id=1505): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x5, 0x240, 0x401, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a000008001100", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="040002"], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r3, 0x26, 0x0, 0x7fffffff, &(0x7f0000000100)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000340), 0x2000011a) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) 17.816031188s ago: executing program 2 (id=1509): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000901000000000000000000000000010800054046ac9c05cb6d69a073797a31000000000c000480080001400051"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) mbind(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000200)=0x1000, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@newtfilter={0x94, 0x2c, 0x4, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0xfff1}, {0x0, 0xb}, {0x0, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xb, 0x4}}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x6}]}}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xff}]}}, @TCA_RATE={0x6, 0x5, {0x40, 0xde}}, @TCA_RATE={0x6, 0x5, {0x81, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0xfc}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x94}}, 0x4000800) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xd}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000080)={0x201800000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x3fff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4800000010003b15000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="4848060000000000140012800a000100767816a56e000000000006000000000000006d36726567310000000000000000"], 0x48}}, 0x840) 17.585742608s ago: executing program 2 (id=1510): keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x8000) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$setstatus(r5, 0x4, 0x2400) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x9) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) r7 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x101940) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, &(0x7f0000000280)={{0xa, 0x0, 0xb, 0x8}, 0x3, 0x1, 0xfffffff8, 0x0, 0x0, 0x3, 'syz1\x00', 0x0}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @loopback, 0x2}, r4}}, 0x30) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) socket(0x14, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)) 17.066022201s ago: executing program 4 (id=1515): syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) (async, rerun: 64) sendmsg$802154_dgram(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14, &(0x7f0000000400)={0x0}}, 0x0) (rerun: 64) 16.968960249s ago: executing program 4 (id=1516): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000f80)='timerslack_ns\x00') write$cgroup_pid(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x801) ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(r2, 0xc0186449, &(0x7f00000004c0)={0x0, 0x0, {0x28, 0x0, 0x0}}) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffffe}) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000000)=0x4) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x10, r2, 0xa62af000) fcntl$lock(r0, 0x7, &(0x7f0000000200)={0x0, 0x2, 0x8}) 202.074007ms ago: executing program 4 (id=1517): signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r1, 0x29, 0xc8, 0x0, &(0x7f00000003c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f00000000c0)={0x3, 0x0, {[0x10400001, 0x100000000, 0x1, 0x6, 0x6, 0x0, 0x7, 0xfffffffffffffffe]}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xbd}, 'port1\x00', 0x72, 0x30cfa, 0x0, 0x8000008, 0x3, 0x2, 0x1000001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x8, 0xfffffff7, 0x40000005, 0x0, 0x4, 0x6}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x80010, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000000)=""/111, 0x6f) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$bpf(0x0, &(0x7f0000000380)='./cgroup\x00', &(0x7f0000000040), 0x40, &(0x7f0000000400)=ANY=[@ANYRESOCT=r6]) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000090a01040000000000000000fe188edd140000001100010000000000000000000100000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x3) r9 = landlock_create_ruleset(&(0x7f0000000480)={0x10000, 0x2, 0x2}, 0x18, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x111080, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000340)={0x2000, r10}, 0x0) landlock_restrict_self(r9, 0x0) renameat2(r5, &(0x7f0000000140)='./file1/file3\x00', r5, &(0x7f0000000300)='./file1/file3\x00', 0x0) 199.910611ms ago: executing program 1 (id=1518): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\\\\xf8\x838\x9d<\f\x91\a\xd4$\xae$\xd6\xf1\xea\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fe\xdc\x8b\x18rBl{\x82=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xb1\xd5\xc4\xf6\x81I\xa7\xd6T\xff^\xc4\x03m\x92\x8b\x86D\xdcJ\xb2\xc3l\xe7o\x97_x\xe4\x91\x10\v%\x1b0\x8d\xa3L\xf9\x835\x85\x7f\xb4K\xb5\xfe(\x02h\xf3\xec\xec\x1aiMo\x80f\x1f\xf1\xd5\xac\x05\xd1z\xc8\x9b\x1c\a\x00\x00\x00\xee]\xf8:\xf4\x83\\\xac\x89\xac\x810\x0e}k\x82\xedG\xc4\xfbZ\xab\x89\x06u\x02y\x7f.\xd2\n\xda\x8d\xeb\n\x9e:S\xcd\xb1\x90\xda\x9fX\xc8Ft\x19\xac\\\x1b\x06\xf27\xedo\xe8\xd8\x82\x98\x93ZW\x1d\xe0\x82\xbb\xfb\xd0\xd8r\x17\xf4\xa6\xf01\xefm\v\xbex\xd4xI\xdb\xbeAA\xd4\x8c\xbd\xf2\x90\x9bR\xae6k\xcf\xbby\xe1\xe3\xde/\f\x05Cq@\xf9^-\xfc\xee\x99\xc7x\t\x10;R\x16\xf4\xd0\xa5', 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x44, 0x11cfe, 0x10000000, 0x8000008, 0x3, 0x4, 0x80000001}) (async) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r2, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) (async) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2000) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x4, 0xe1d9, 0x1101, 0x101}) 199.129787ms ago: executing program 1 (id=1519): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "b6acd7b8f7f0a0ae8c5d910c3378"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket(0x10, 0x3, 0x0) fremovexattr(r1, &(0x7f0000000180)=@known='security.apparmor\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010030bd7000fbdbdf2501000000000000000b00000000141b742d6c"], 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1000}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = fsopen(&(0x7f0000000140)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) 197.869365ms ago: executing program 1 (id=1520): bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) (async) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000780)={"d1ed39d8de344002b9e581a3a3bb0d5d5f307e5600", r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xa, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRES16=r0], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f00009f3000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000a91000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000916000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x3, 0x241}) (async) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x3, 0x241}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x200a, 0xd}) (async) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x200a, 0xd}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00') io_uring_enter(r2, 0x5a31, 0x6240, 0x30, 0x0, 0x0) (async) io_uring_enter(r2, 0x5a31, 0x6240, 0x30, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="d4820000", @ANYRES16, @ANYBLOB="080027bd7000fbdbdf25210000000c00990003000000440000000500f600040000000600980000000000a0028480040000800c0000800800020002000000680000800a00050008021100000100000a00050050505050505000002c00068008000300ff"], 0x2d4}, 0x1, 0x0, 0x0, 0xc000}, 0x20040000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001c00010029bd700000dcdf2507000000", @ANYRES32=r4, @ANYBLOB="80007f0a08000f00070000000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x2400c001}, 0x4040004) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x20000, 0x4) socket$netlink(0x10, 0x3, 0x400000000000004) (async) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) (async) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r7 = socket$kcm(0x10, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, 0x0, &(0x7f0000000a00)) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0), 0x10800, 0x0) write$P9_RLINK(r8, &(0x7f0000000380)={0x7, 0x47, 0x2}, 0x7) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10) setsockopt$inet_buf(r10, 0x0, 0x2e, &(0x7f00000000c0)="03ca320c6697beaa1b9cea91ed3468b6cf8a0266e455bb66e754ba1bfad2b5b4c4ba5b2699d02227e22a46ab9d3bf21be93e5c1c6e5f780232088090e83619a91d296f546dfc0bf12f", 0x49) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x4c}}, 0x20008080) (async) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x4c}}, 0x20008080) 197.569275ms ago: executing program 1 (id=1521): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004021600080008", 0x65, 0x0, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000340)={0x3e8, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x3cc, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "80ebaf43e3ee94d7a655fc22ebf027d0f36026c600cb2ae6dc6ef67d1596595b"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}, {0x27c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80}}, @WGPEER_A_ALLOWEDIPS={0x210, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3, @private0, 0x1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "306d554282f110cff311597c049e4889db670579656f8c7ebb587d7b7a2c764d"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010100}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b2c82fa0e58e0224d419d6b7f2dc95a7b0411c7f1a65908865d51c6adcf86904"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x48001}, 0x1) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r6, 0x0, 0x4ffe6, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004021600080008", 0x65, 0x0, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000340)={0x3e8, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x3cc, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "80ebaf43e3ee94d7a655fc22ebf027d0f36026c600cb2ae6dc6ef67d1596595b"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}, {0x27c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80}}, @WGPEER_A_ALLOWEDIPS={0x210, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3, @private0, 0x1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "306d554282f110cff311597c049e4889db670579656f8c7ebb587d7b7a2c764d"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010100}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b2c82fa0e58e0224d419d6b7f2dc95a7b0411c7f1a65908865d51c6adcf86904"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x48001}, 0x1) (async) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) (async) pipe(&(0x7f0000000080)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) (async) splice(r3, 0x0, r6, 0x0, 0x4ffe6, 0x0) (async) 197.471558ms ago: executing program 6 (id=1522): syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000140)={{0x47, 0x8000}, 0x8}, 0x10) 197.042368ms ago: executing program 6 (id=1523): r0 = fsmount(0xffffffffffffffff, 0x0, 0x80) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000d, 0x110, r0, 0xb4c45000) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x4000010, r0, 0xb5475000) fcntl$setlease(r0, 0x400, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000040)=""/38, &(0x7f0000000080)=0x26) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000180)={0x5, 0x8a, &(0x7f00000000c0)="35d43a651f217efb67d991622f52cfcccad55d8256d82a857bc8c2e0820036cfa9463130f85234a78cf17d8871f305f48d24acd2301c640362f5047f7b79ed19e09ebf1cf6595f19938d35448fa6365efbb1f581a5617eb41046fdde5fa68121046cff5607c92f9ed2c280a236adb0d940c1480e3718e04471d6156c0b767ad192cc9eac7394dbe8d12d"}) r1 = accept$alg(r0, 0x0, 0x0) mprotect(&(0x7f0000d09000/0x1000)=nil, 0x1000, 0x3000000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000d84000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/58, 0x3a, 0x1, &(0x7f0000000200)=""/103, 0x67}, &(0x7f00000002c0)=0x40) getsockopt$MRT6(r0, 0x29, 0xcf, &(0x7f0000000300), &(0x7f0000000340)=0x4) io_uring_enter(r0, 0x56d4, 0xbf2e, 0x31, &(0x7f0000000380)={[0x400]}, 0x8) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000003c0)={0x0, 0x3, 0x0, [0x4, 0x9, 0x2, 0x2, 0x20000], [0x1, 0x6, 0x7f, 0x1, 0x6, 0xdb0e, 0x100, 0xfffffffffffffff8, 0x0, 0x4, 0xfffffffffffffe01, 0xb, 0xfffffffffffffca1, 0x9, 0x7fffffffffffffff, 0x0, 0x9, 0xa, 0x5, 0x5, 0x0, 0xfffffffffffffffd, 0xc4, 0x35c8, 0x6cc6, 0x100, 0xe3, 0x3, 0x4, 0xc8, 0xfffffffffffffff7, 0x5, 0x7, 0x79, 0x671, 0x7, 0x2, 0x9, 0x3, 0xfffffffffffffff9, 0x0, 0x18, 0x4, 0x100000000, 0xac, 0x5, 0x10, 0x0, 0x8, 0x7, 0x833, 0x2, 0x4, 0x1, 0x1ff, 0x6, 0x1000, 0x5, 0x8, 0x3, 0x7, 0x400, 0x7fff, 0x8, 0x8000000000000001, 0x1b31, 0x3, 0x80, 0x0, 0x3, 0xadc, 0x200, 0x1, 0x8, 0x8, 0x7, 0x7, 0x7984, 0x1, 0x3, 0x3ff, 0x9, 0x81, 0x3, 0x3, 0x7, 0x5, 0x2, 0x8, 0x4, 0x7, 0x7, 0xd69, 0x6, 0x2, 0x1, 0xf755, 0x1, 0xfc, 0xaa18, 0x4, 0x5, 0x400, 0x7fff, 0x6, 0x53ee, 0x8, 0x8, 0x6, 0xfff, 0x2, 0xffff, 0x7, 0x3, 0xffff, 0x5be1, 0x1, 0x2, 0x6a3a, 0x7, 0x5]}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000800)={{&(0x7f0000d7d000/0x3000)=nil, 0x3000}}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), r0) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x68}, 0x1, 0x0, 0x0, 0xca024c45a52a6772}, 0x4000000) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="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", 0xfd) fsopen(&(0x7f0000000ac0)='bdev\x00', 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$NFT_BATCH(r0, &(0x7f00000017c0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001780)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6d86ba746b122c3d}}, [@NFT_MSG_DELFLOWTABLE={0xa0, 0x18, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffa}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0xb03, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x148, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_OBJ_USERDATA={0x6d, 0x8, "b754d5720882e7a433b28cd87d33524f85b289feabe55f25f437deb57a98eb305d3a91761f5ccb5f751cdaa539eac521fa26cf968117a4ca3a204afb8a4f5e58a4f716488c536ac0cda8bd6d9f5b6b19355427b7bf019166867deaaad825c53503a2039eb242c05c2e"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x97, 0x8, "a78d730f891b4234bc0380122cc9d32841385334908cf44a955e74e98ffc56b157450364ab4dd1d21cd7b6aa6c8925fe5d0d4924540ea7698f0c66bb687ac8f341a69c02fd76599d0202cccb55830c0cc79950f93bd9fbee7427c99b39d1747a3aaa4879f768dbeab957139b94747090cc7393eba87f0c1881cdc3971fe0ad12dd576d76374f549044583e243545f411cd60b5"}, @NFTA_OBJ_USERDATA={0x6, 0x8, "3cf5"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xbc382ac8563b1bf3}]}, @NFT_MSG_NEWSETELEM={0x4b8, 0xc, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x440, 0x3, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xbc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x6f, 0x1, "872c11594d82578c0b8e87fab308d1d472540c233b04d5faf025d9578cee440f2456b40fba875daace5ebc50b759eff68afe47ab9f04bcbd14d57965bb2bb5990b2c462c331243e67435b090ab6d868124d33566e7ee6ae29e551e7acfbc5ae6f28e34c834b382ddd2d6ba"}]}]}, {0x1e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1d4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4f, 0x1, "8ec39f138ac12b94a3022d5ee76974da483faad5823fb9c0ead93aff9e84b1a4cdf6478c4d1762025bfef200a234129c0bb4239a13c1956161e7bf200df83974e94b39aad63eed6f700cc9"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xf7, 0x1, "3519b9a802bbfad4c60b2f962afd703d4059a60d4a6186f4021acf44102a2e9a8ef22263340d30ac636dffaff49ac1aa478f37837ee2e3c895fe02ef484401ee4d6b748d4401515b02c07980c6378e478d4fb599d051316f5130998abe3815fd93e8e03bb02fdb30117fa05395d46cbf5cb2bee3b7d5417b1c2ecc11931017b396cede3726fc2ce9281dd043f79f8acde2d5c6281873bd2a5bfd5f82c84cc257500350dfcb864dddf5f228db1d4ad7d1a6568638a1f203cd02ea19c4fed93f7838fe8ae732b6cd1dd6a2125603bd9119f46728b48c07f2da473a2f51629616063d73268dc39a50c7560dc0f11c94b98dcf54f1"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x198, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0xd0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x50, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x5c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x38000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @limit={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x1c4, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_DESC={0xdc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xc0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x4}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x66}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff17}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x101}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPRESSIONS={0xc8, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0x30, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x1}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_OSF_TTL={0x5, 0x2, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0x60, 0xc, "9a4b727e0054bb2b2057a91f57f0a098ebbdfe368a218266772dea7d018c8de39481ae6f2b825a3dd9b4e9f1b3ac154ce030429be95d19eef874c615b4f63069ec7baf47cc7bf639187ebb9a6ba83fbed3f6eb2378e915ce4b7cc7c8"}]}, @NFT_MSG_DELSET={0x154, 0xb, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_EXPRESSIONS={0x11c, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_REDIR_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x3c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc}, @NFTA_QUOTA_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x81}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}]}], {0x14}}, 0xaa8}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001840), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x2c, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000080) bind$l2tp(r3, &(0x7f0000001940)={0x2, 0x0, @empty, 0x1}, 0x10) syz_open_dev$sg(&(0x7f0000001980), 0xb27, 0x81) 196.424507ms ago: executing program 4 (id=1524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bf7000fddbdf250a00000008000300", @ANYRES32=r8, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4008811}, 0x8000) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x10c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x9, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x4}, {0xfffffff9, 0x1, 0x1, 0x7}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x8, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1804004, 0xfffffff8, 0x400}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xd, 0x1, 0x2, {0x3, 0x2, 0x3, 0x2, 0x6}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0xc040) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f00000001c0)=0x1) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001940)={{0xffffffffffffffff, &(0x7f0000000180)='\']\x00', 0x8100, 0x0, 0x9, 0x0, 0x0}, 0x0, 0x0}) r12 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000112d40)={{0x0, 0x4, 0x9, 0x100000001, 0xb, 0x3915, 0x6, 0x10001, 0x36, 0x3823, 0x6, 0x4, 0x9, 0x1, 0x40}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r11, 0xd000943d, &(0x7f0000112e00)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xb, "b9eb17cedfee55"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000113e00)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13, r14}], 0xc0, "a8fffbd74c3d89"}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r12, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) 195.813266ms ago: executing program 1 (id=1525): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffe0}, {}, {0xffe0, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x40, 0x2, [@TCA_MATCHALL_ACT={0x3c, 0x2, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @remote}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xb3}]}, 0x7c}}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r4, 0x0, 0x0, 0x24048084) r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0xe) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c090000000101040000170a3393b5319a00000000002002000000000001801400018008000100e0d9321641"], 0x2c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="24000000700039022abd7000fbdbdf2507060000", @ANYRES8, @ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000deffffff6a0a00ff00000000850000002b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c5c77f0979b34e1ad837ff0d10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d26b5069f8a98f7dc8f772fd0e17c9b9101644f8c06b74635fc9f9de9ca3c0ec0cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583f76e412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19002cc93c1c13ca67fdc6c238342033070000004a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000140eb2e9c15b6c8f6198282df27badac8500bc7d202e099009ca515007e5f009735200040000001896d46cdac0abb841d9f96e2e6a19b7bf661c01800000d77d6165f253683cd8dc926518c699a2b14fb2bb40425dee631368340711a8c47318d5d13085938c3ec5c39b540b34157b0330aa16bd0998607f0ecea84919712d36"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) write(r0, &(0x7f0000000040), 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x13, &(0x7f0000000300)=0x3fa, 0x4) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r8, 0x50) 194.683236ms ago: executing program 2 (id=1526): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000280)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x62, {"6436460f01c866b8ce000f00d82e400f0013450f01c88f89b89721410f01c266baf80cb88450828cef66bafc0c66b8000066ef65f347d9f30fc75cd52d66baf80cb8c4504884ef66bafc0cb81c000000ef"}}], 0x62}) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000000c0)={0xaaaac71}) (async) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000000c0)={0xaaaac71}) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x48}) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x48}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) ioctl$NILFS_IOCTL_SET_SUINFO(r4, 0x40186e8d, &(0x7f0000000400)={&(0x7f0000000340)=[{0x4, 0x1, 0x0, {0x9, 0x6, 0x1}}, {0x7, 0x1, 0x0, {0x5, 0xaf2, 0x1}}, {0x8, 0x1, 0x0, {0xb26, 0x5}}, {0xff, 0x1, 0x0, {0x13f, 0x6, 0x2}}, {0x17c, 0x2, 0x0, {0x5, 0x7}}, {0x1, 0x3dc83dacc35616c6, 0x0, {0xf74, 0xf, 0x2}}], 0x6, 0x20, 0x6, 0x5b}) 193.416994ms ago: executing program 6 (id=1527): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x8, 0xd}, 0x50) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000008c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000cc0)={0x18, 0x110, 0xfa00, {r3, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {&(0x7f0000000440), r4, r2}}, 0xfab9d863a17468d9) sendmmsg$inet(r1, &(0x7f0000004940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000200)='\'', 0x1}], 0x1}}], 0x2, 0xe000) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x5, 0x0}, 0x8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x42031, 0xffffffffffffffff, 0x0) r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000840)={'gretap0\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x10, 0x700, 0xb, 0xffff, {{0x30, 0x4, 0x1, 0xe, 0xc0, 0x65, 0x0, 0xc3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x27, 0xa8, [@rand_addr=0x64010101, @multicast2, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @lsrr={0x83, 0x7, 0x16, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x54, 0x7c, 0x3, 0xf, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x42}}, {@broadcast, 0x6ae}, {@remote, 0x10000}, {@rand_addr=0x64010101, 0x2}, {@remote}, {@loopback, 0x800}, {@multicast2, 0x7bb}, {@private=0xa010101, 0x1}, {@dev={0xac, 0x14, 0x14, 0x19}, 0xe}]}, @ssrr={0x89, 0xb, 0x66, [@remote, @multicast1]}, @lsrr={0x83, 0x17, 0xa9, [@local, @empty, @local, @loopback, @local]}, @ssrr={0x89, 0x7, 0x80, [@loopback]}, @noop]}}}}}) sendto$packet(r6, &(0x7f0000000600)="e9f1dfe3515318dd1b7a1a998e945354578d09450be788110de72af86d304d5d100a13877f9463f130def0fffdbf7d3e4208a148f0f02a3536dc27c43a4c1bc2db49a62046e87023b6e30277ba607f38848e0f552fdd2e9c7c83b7a3b3f37ba3c407befbec1b104949c5b58d3e8367d64ff5a43b9b7f632070c2d6eb1e2c45ba25474b", 0x83, 0x4, &(0x7f0000000880)={0x11, 0x16, r7, 0x1, 0xfe, 0x6, @random="ed5d61b2a0f0"}, 0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x8000}}, './file0\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r8, &(0x7f00000004c0)={0x8, 0x120, 0xfa00, {0x3, {0x40, 0x8, "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", 0x1, 0x40, 0x2e, 0xaa, 0x2e, 0x9d, 0x10, 0x1}, r3}}, 0x128) r9 = accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) bind$unix(r9, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r5, 0xfffffff7, 0x10}, 0xc) r10 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000080000005a140a", @ANYRES32]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 64.465411ms ago: executing program 6 (id=1528): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x5ffffffffffffffd, 0x2a0080) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) close(0x3) 64.260906ms ago: executing program 6 (id=1529): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@t={0x81, 0x6, 0x14, 0xfe}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4080040) 6.033551ms ago: executing program 1 (id=1530): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom(r0, &(0x7f0000000080)=""/11, 0xb, 0x2021, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) (async) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) mount$9p_fd(0x0, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000040), 0x1004014, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5.153324ms ago: executing program 4 (id=1531): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x8, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) r2 = io_uring_setup(0x3c91, &(0x7f0000000900)={0x0, 0x36e4, 0x80, 0x1, 0x60}) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) close_range(r2, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="c086010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x24044810}, 0x4054) 4.598983ms ago: executing program 6 (id=1532): openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x15, 0x5, 0x0) socket$inet(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = userfaultfd(0x80801) pipe2(&(0x7f0000000000), 0x80000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044001}, 0x10) socket$l2tp(0x2, 0x2, 0x73) r5 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000340)={@multicast1, 0x1, 0x0, 0xc0, 0x0, [{@initdev}, {@private}, {@empty}, {@empty}, {@remote}, {@dev}, {@initdev}, {}, {}, {@loopback}, {@empty}, {@multicast1}]}}) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000140)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) 0s ago: executing program 4 (id=1533): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r2, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f00000000c0)={0x28, 0x4, r2, r2, 0x4, 0x1, 0x2}) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) 0s ago: executing program 4 (id=1534): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x8000, @local, 0x2}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e23, 0xa5, @mcast2, 0x57b1}, @in={0x2, 0x4e21, @loopback}], 0x58) setsockopt(r0, 0xa, 0x0, &(0x7f0000000080)="7ccf294dcae0eda3b8a2889a22f809b9c8fc9b8864d4c667f49dd454a76570ee863e835ba8f71a2aec0629d988ab5156bcfa36fbd4043c0f51d3cc3de52d47c608eee7d1856e6e5481a25e7b02b766daaa2f14d90ee92dc0bdbc082cc8e401193a86d0a3fe0751842da90d3fd4990a12a5194b8cc3cd83e8c41ba9d6f03ac9feaf629dd748380b0abe7d2e84a144c8a91e48774cb398f43f543cdcf867e4265d50a893c8e846b3c7944743135eb31849e4a2b1cf41647827253cbe38b2ea8d766681c0104324a1ff5a54797031b753dd7b6979a3a9aef2138f", 0xd9) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, &(0x7f0000000180)="8446c97444e2605528e7aa7a85ed2a23392a785fcc560800a43a6bfc1a8a5be7d8ed752c6330b1863399c61567685ad7937f41463e3b98118f8b137bfe4a0ad81afdd87f23d92060c7e0c0a952d0f71d6351c973be3fabce4238228448324a5338a245c9c21a96c674302d46", 0x6c, 0x14, &(0x7f0000000200)={0xa, 0x4e24, 0x8, @remote, 0x61a42ce6}, 0x1c) r2 = dup(r1) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xf3a}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x4) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000380)={0x1, 0xfffffffffffffff8}) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xac}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x19}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket(0x9, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000004c0)={0x0, 0xcd, "e4d0b35eac0ad3ffcac78d956a57c5d10a268d54b96eccd0060119062f3cd25655913d58d0345356009e6775bd24ee0dacf372f80a5ce12bebbb1c3339dbac19049bdfc6a272a2be148866d9f33282f4a2aa601d658de50a55300d6e573ea29bc736b8a8ebf0380404dc08a7cefd758c991f93c96500177ff6fe674b427ea7a1c01c6a905f8a4a67cea7589c6391171396a758ed2c75bb3f39e1363ece054d179c24ff43a11d60065674ade774f1c049243b1667b2ae2916458d8a4ccefeb6864b3e77ff76d27e59d90de2a183"}, &(0x7f00000005c0)=0xd5) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000600)={r4, 0x8}, 0x8) close_range(r2, r0, 0x0) r5 = creat(&(0x7f0000000640)='./file0\x00', 0x1af) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000680)={r4, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000006c0), &(0x7f0000000700)=0x4) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe0000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0xc00c804) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r5) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x4) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r6, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x62}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x20008811) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000b00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000ac0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000b40)={0x4, 0x8, 0xfa00, {r7, 0x3}}, 0x10) syz_80211_inject_frame(&(0x7f0000000b80)=@broadcast, &(0x7f0000000bc0)=@mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_b, @random="94e94ae47a46", {0xd, 0x6}, @value=@ver_80211n={0x0, 0x1, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x34, @val={0x8c, 0x10, {0x6f0, "2c2fc544232b", @short="ae4a04ed57225118"}}}, 0x30) ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c40), r5) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_TID={0xc}, @GTPA_MS_ADDR6={0x14, 0xc, @private1}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x40004) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000d40)) sendmsg$NL80211_CMD_LEAVE_IBSS(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r6, 0xc01, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008810}, 0x20000040) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001ec0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000e80)=""/4096, 0x1000, 0x1, &(0x7f0000001e80)=""/53, 0x35}, &(0x7f0000001f00)=0x40) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000002780)={0x2c, &(0x7f0000002580)={0x0, 0xb, 0x8e, {0x8e, 0xc, "28e124f33c34c98bbd0e209bb89751104984fac209e73c3da3ce8024ee19a0baf3fa0debdcb6984c40547c6b425df12db6b7ee62719fb8087002a5e9cd2893c485782b2291a6fff7f80de645df709a22b61de9593daaad9b38fcee47d1560e360af438680f2211934b846bf453ce26699e04232da6832db6ced3c815cfa468605b0ef1295217588698c8affb"}}, &(0x7f0000002640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}, &(0x7f0000002680)={0x0, 0xf, 0x46, {0x5, 0xf, 0x46, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x2, 0x9f, 0x3b8d}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0xfc, 0xbf, 0xced5, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x6, 0x5, 0x6, 0x31}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0x3, 0xfff8}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xa7, "896b47fa950a6bb1f957f12e4939e210"}]}}, &(0x7f0000002700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x80, 0x3, 0x2, "d0406f9a", "a68d23da"}}, &(0x7f0000002740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x4, 0x8, 0x2, 0x4, 0x7, 0x10}}}, &(0x7f0000002c40)={0x84, &(0x7f00000027c0)={0x20, 0xc, 0xa5, "3a6e871213d53c7fe522951a4255b9a671c4d5c1784e019c924271dc4186cbf727f8ec5bdf9b688f6ca4c1a826f63eeda392dfc61a00f198acf56f221c223b1122eeb27e84515d88fca9dc15ef9e7ee2f9c65ef32dad9cacc74e5c66b5db00cd72f5a92827844000d4d99524c74e0e811cddc4de6a1ba1aa5595eb6a27facf88b5fe477dbaafd03ec935d29c8e3317fabf79e59075b1759fe34d91fcc888d52cd1a4b2fd36"}, &(0x7f0000002880)={0x0, 0xa, 0x1, 0x5f}, &(0x7f00000028c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002900)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000002940)={0x20, 0x0, 0x8, {0x0, 0x20, [0x0]}}, &(0x7f0000002980)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000029c0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000002a00)={0x40, 0xb, 0x2, "cb86"}, &(0x7f0000002a40)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000002a80)={0x40, 0x13, 0x6, @local}, &(0x7f0000002ac0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000002b00)={0x40, 0x19, 0x2, "fe28"}, &(0x7f0000002b40)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000002b80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000002bc0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000002c00)={0x40, 0x21, 0x1, 0x3}}) kernel console output (not intermixed with test programs): enied { map } for pid=8835 comm="syz.2.780" path="socket:[29287]" dev="sockfs" ino=29287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.395605][ T40] audit: type=1400 audit(2000000029.479:616): avc: denied { read } for pid=8835 comm="syz.2.780" path="socket:[29287]" dev="sockfs" ino=29287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.587106][ T8851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.611542][ T8853] cgroup: No subsys list or none specified [ 145.669630][ T8867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.791'. [ 145.693524][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'. [ 145.774038][ T10] IPVS: starting estimator thread 0... [ 145.892429][ T8883] IPVS: using max 45 ests per chain, 108000 per kthread [ 146.941730][ T8891] netem: change failed [ 146.945491][ T8894] wg1: entered promiscuous mode [ 146.947447][ T8894] wg1: entered allmulticast mode [ 147.065667][ T40] audit: type=1400 audit(2000000031.159:617): avc: denied { write } for pid=8912 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.126927][ T40] audit: type=1400 audit(2000000031.219:618): avc: denied { write } for pid=8924 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.137522][ T8930] cgroup: Invalid name [ 147.139005][ T8930] cgroup: Invalid name [ 147.146333][ T8930] cgroup: Invalid name [ 147.147731][ T8930] cgroup: Invalid name [ 147.150731][ T8930] cgroup: Invalid name [ 147.152564][ T8930] cgroup: Invalid name [ 147.154146][ T8930] cgroup: Invalid name [ 147.155978][ T8930] cgroup: Invalid name [ 147.157543][ T8930] cgroup: Invalid name [ 147.159303][ T8930] cgroup: Invalid name [ 147.166685][ T8930] cgroup: Invalid name [ 147.168079][ T8930] cgroup: Invalid name [ 147.169688][ T8930] cgroup: Invalid name [ 147.171661][ T8930] cgroup: Invalid name [ 147.173329][ T8930] cgroup: Invalid name [ 147.174742][ T8930] cgroup: Invalid name [ 147.176175][ T8930] cgroup: Invalid name [ 147.177706][ T8930] cgroup: Invalid name [ 147.179091][ T8930] cgroup: Invalid name [ 147.182456][ T8930] cgroup: Invalid name [ 147.183911][ T8930] cgroup: Invalid name [ 147.185387][ T8930] cgroup: Invalid name [ 147.186784][ T8930] cgroup: Invalid name [ 147.188220][ T8930] cgroup: Invalid name [ 147.189661][ T8930] cgroup: Invalid name [ 147.191563][ T8930] cgroup: Invalid name [ 147.193035][ T8930] cgroup: Invalid name [ 147.194496][ T8930] cgroup: Invalid name [ 147.195985][ T8930] cgroup: Invalid name [ 147.197539][ T8930] cgroup: Invalid name [ 147.198984][ T8930] cgroup: Invalid name [ 147.200192][ T8941] netlink: 20 bytes leftover after parsing attributes in process `syz.5.808'. [ 147.202388][ T8930] cgroup: Invalid name [ 147.206739][ T8930] cgroup: Invalid name [ 147.209299][ T8930] cgroup: Invalid name [ 147.211167][ T8930] cgroup: Invalid name [ 147.212934][ T8930] cgroup: Invalid name [ 147.214510][ T8930] cgroup: Invalid name [ 147.216033][ T8930] cgroup: Invalid name [ 147.217502][ T8930] cgroup: Invalid name [ 147.219265][ T8930] cgroup: Invalid name [ 147.221385][ T8930] cgroup: Invalid name [ 147.222791][ T8930] cgroup: Invalid name [ 147.224227][ T8930] cgroup: Invalid name [ 147.225730][ T8930] cgroup: Invalid name [ 147.227157][ T8930] cgroup: Invalid name [ 147.228601][ T8930] cgroup: Invalid name [ 147.230596][ T8930] cgroup: Invalid name [ 147.232213][ T8930] cgroup: Invalid name [ 147.233941][ T8930] cgroup: Invalid name [ 147.235609][ T8930] cgroup: Invalid name [ 147.237053][ T8930] cgroup: Invalid name [ 147.240305][ T8930] cgroup: Invalid name [ 147.242091][ T8930] cgroup: Invalid name [ 147.243511][ T8930] cgroup: Invalid name [ 147.245065][ T8930] cgroup: Invalid name [ 147.247417][ T8945] loop5: detected capacity change from 0 to 2640 [ 147.248773][ T8930] cgroup: Invalid name [ 147.252445][ T8945] buffer_io_error: 10 callbacks suppressed [ 147.252459][ T8945] Buffer I/O error on dev loop5, logical block 0, async page read [ 147.254538][ T8930] cgroup: Invalid name [ 147.255162][ T8945] Buffer I/O error on dev loop5, logical block 0, async page read [ 147.258889][ T8930] cgroup: Invalid name [ 147.259516][ T8945] Buffer I/O error on dev loop5, logical block 0, async page read [ 147.265543][ T8930] cgroup: Invalid name [ 147.269203][ T8930] cgroup: Invalid name [ 147.269750][ T8945] Buffer I/O error on dev loop5, logical block 0, async page read [ 147.270966][ T8930] cgroup: Invalid name [ 147.271071][ T8930] cgroup: Invalid name [ 147.271168][ T8930] cgroup: Invalid name [ 147.271297][ T8930] cgroup: Invalid name [ 147.271399][ T8930] cgroup: Invalid name [ 147.276243][ T8947] openvswitch: netlink: Duplicate or invalid key (type 0). [ 147.277043][ T8945] Buffer I/O error on dev loop5, logical block 0, async page read [ 147.281917][ T8947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.283355][ T8945] Buffer I/O error on dev loop5, logical block 0, async page read [ 147.301845][ T8945] Buffer I/O error on dev loop5, logical block 0, async page read [ 147.304388][ T8945] Buffer I/O error on dev loop5, logical block 0, async page read [ 147.306770][ T8945] ldm_validate_partition_table(): Disk read failed. [ 147.308802][ T8945] Buffer I/O error on dev loop5, logical block 0, async page read [ 147.355058][ T8945] Buffer I/O error on dev loop5, logical block 0, async page read [ 147.358449][ T8945] Dev loop5: unable to read RDB block 0 [ 147.361962][ T8945] loop5: unable to read partition table [ 147.368974][ T8945] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 147.407542][ T8961] netlink: 'syz.4.815': attribute type 4 has an invalid length. [ 147.506383][ T40] audit: type=1400 audit(2000000031.599:619): avc: denied { write } for pid=8970 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.577983][ T8986] cgroup: Unknown subsys name 'cpuset' [ 147.595751][ T40] audit: type=1400 audit(2000000031.689:620): avc: denied { write } for pid=8984 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.612878][ T8980] team0 (unregistering): Port device team_slave_0 removed [ 147.618981][ T8980] team0 (unregistering): Port device team_slave_1 removed [ 147.626715][ T8980] team0 (unregistering): Port device vlan0 removed [ 147.709360][ T40] audit: type=1400 audit(2000000031.799:621): avc: denied { write } for pid=8990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.714263][ T8994] xt_hashlimit: size too large, truncated to 1048576 [ 147.720548][ T40] audit: type=1400 audit(2000000031.799:622): avc: denied { write } for pid=8993 comm="syz.4.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 147.947893][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'. [ 148.462742][ T9031] netlink: 80 bytes leftover after parsing attributes in process `syz.2.834'. [ 148.566009][ T9034] openvswitch: netlink: EtherType 50a is less than min 600 [ 148.576749][ T9036] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 149.362186][ T9059] netlink: 'syz.2.843': attribute type 12 has an invalid length. [ 149.410597][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 149.410610][ T40] audit: type=1400 audit(2000000033.509:633): avc: denied { getopt } for pid=9058 comm="syz.2.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.418617][ T40] audit: type=1400 audit(2000000033.509:634): avc: denied { setcurrent } for pid=9058 comm="syz.2.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 149.424681][ T40] audit: type=1401 audit(2000000033.509:635): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 149.498597][ T9067] netlink: 6392 bytes leftover after parsing attributes in process `syz.2.844'. [ 149.519862][ T9069] netlink: 28 bytes leftover after parsing attributes in process `syz.4.847'. [ 149.546235][ T9069] fuse: Unknown parameter 'fV0x000000000000000b' [ 149.750472][ T29] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 149.868195][ T40] audit: type=1800 audit(2000000033.959:636): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.840" name="/" dev="fuse" ino=1 res=0 errno=0 [ 149.905300][ T29] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 149.909345][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.917223][ T29] usb 7-1: Product: syz [ 149.919175][ T29] usb 7-1: Manufacturer: syz [ 149.923613][ T29] usb 7-1: SerialNumber: syz [ 149.933604][ T40] audit: type=1400 audit(2000000034.029:637): avc: denied { append } for pid=9078 comm="syz.5.849" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 149.945730][ T29] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 149.962931][ T1477] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 150.083895][ T9089] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 150.086353][ T9089] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 150.089266][ T9089] vhci_hcd vhci_hcd.0: Device attached [ 150.092377][ T9092] vhci_hcd: cannot find a urb of seqnum 2146388617 max seqnum 0 [ 150.096568][ T8488] vhci_hcd vhci_hcd.5: stop threads [ 150.098728][ T8488] vhci_hcd vhci_hcd.5: release socket [ 150.101015][ T8488] vhci_hcd vhci_hcd.5: disconnect device [ 150.191509][ T9096] syzkaller1: entered promiscuous mode [ 150.193293][ T9096] syzkaller1: entered allmulticast mode [ 150.341411][ T40] audit: type=1400 audit(2000000034.439:638): avc: denied { append } for pid=9097 comm="syz.1.855" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 150.480486][ T9103] can0: slcan on ttyS3. [ 150.553670][ T9103] can0 (unregistered): slcan off ttyS3. [ 150.671124][ T9112] input: syz0 as /devices/virtual/input/input12 [ 150.695007][ T9112] Cannot find set identified by id 0 to match [ 150.734220][ T40] audit: type=1400 audit(2000000034.829:639): avc: denied { write } for pid=9118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.754921][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz.5.860'. [ 150.757558][ T8490] bond0: (slave bond_slave_0): interface is now down [ 150.768977][ T8490] bond0: (slave bond_slave_1): interface is now down [ 150.779417][ T9122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.788707][ T40] audit: type=1400 audit(2000000034.879:640): avc: denied { create } for pid=9121 comm="syz.5.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 150.800954][ T8482] bond0: (slave bond_slave_0): interface is now down [ 150.806194][ T40] audit: type=1400 audit(2000000034.899:641): avc: denied { write } for pid=9124 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.807980][ T8482] bond0: (slave bond_slave_1): interface is now down [ 150.834142][ T8482] bond0: now running without any active interface! [ 150.852521][ T9122] netlink: 44 bytes leftover after parsing attributes in process `syz.5.860'. [ 150.877494][ T9128] vivid-009: kernel_thread() failed [ 150.881319][ T9122] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 150.887138][ T9122] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 150.935281][ T40] audit: type=1400 audit(2000000035.029:642): avc: denied { write } for pid=9133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.042215][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.864'. [ 151.045126][ T9147] netlink: 'syz.5.864': attribute type 14 has an invalid length. [ 151.047962][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.864'. [ 151.050897][ T9147] netlink: 'syz.5.864': attribute type 14 has an invalid length. [ 151.193123][ T1477] usb 7-1: Service connection timeout for: 256 [ 151.195143][ T1477] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 151.228931][ T1477] ath9k_htc: Failed to initialize the device [ 151.241658][ T1477] usb 7-1: ath9k_htc: USB layer deinitialized [ 151.357435][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 151.370397][ T9183] netlink: 9 bytes leftover after parsing attributes in process `syz.4.871'. [ 151.400623][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 151.403541][ T9193] netlink: 9 bytes leftover after parsing attributes in process `syz.4.871'. [ 151.599593][ T9214] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9214 comm=syz.1.876 [ 151.644738][ T9218] nbd: socks must be embedded in a SOCK_ITEM attr [ 151.693283][ T9220] binder: BINDER_SET_CONTEXT_MGR already set [ 151.695287][ T9220] binder: 9219:9220 ioctl 4018620d 200000000100 returned -16 [ 151.698467][ T9220] binder: BINDER_SET_CONTEXT_MGR already set [ 151.701210][ T9220] binder: 9219:9220 ioctl 4018620d 200000000180 returned -16 [ 151.893381][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 152.020478][ T10] usb 6-1: device descriptor read/64, error -71 [ 152.189101][ T9237] openvswitch: netlink: Missing key (keys=40, expected=100) [ 152.270820][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 152.296415][ T9241] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 152.383535][ T5834] hid_parser_main: 7 callbacks suppressed [ 152.383551][ T5834] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 152.387549][ T5834] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 152.389776][ T5834] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 152.392446][ T5834] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 152.394650][ T5834] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 152.396859][ T5834] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 152.399100][ T5834] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 152.402053][ T5834] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 152.404389][ T5834] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 152.407060][ T5834] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 152.412357][ T10] usb 6-1: device descriptor read/64, error -71 [ 152.413545][ T5834] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [sy] on syz0 [ 152.479219][ T9256] tc action pedit offset must be on 32 bit boundaries [ 152.483399][ T9256] tc action pedit offset must be on 32 bit boundaries [ 152.486122][ T9256] tc action pedit offset must be on 32 bit boundaries [ 152.488308][ T9256] tc action pedit offset must be on 32 bit boundaries [ 152.490465][ T9256] tc action pedit offset must be on 32 bit boundaries [ 152.492737][ T9256] tc action pedit offset must be on 32 bit boundaries [ 152.495082][ T9256] tc action pedit offset must be on 32 bit boundaries [ 152.497904][ T9256] tc action pedit offset must be on 32 bit boundaries [ 152.500784][ T9256] tc action pedit offset must be on 32 bit boundaries [ 152.502219][ T9253] fido_id[9253]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 152.503545][ T9256] tc action pedit offset must be on 32 bit boundaries [ 152.503617][ T9256] 0: reclassify loop, rule prio 0, protocol 800 [ 152.535312][ T6129] usb 7-1: USB disconnect, device number 10 [ 152.552319][ T10] usb usb6-port1: attempt power cycle [ 152.636843][ T9259] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=39401 sclass=netlink_xfrm_socket pid=9259 comm=syz.2.892 [ 152.689923][ T9264] input: syz0 as /devices/virtual/input/input13 [ 152.792054][ T29] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 152.792707][ T5741] Bluetooth: hci1: command 0x0406 tx timeout [ 152.795365][ T29] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 152.910673][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 152.912494][ T9273] pim6reg1: entered promiscuous mode [ 152.916075][ T9273] pim6reg1: entered allmulticast mode [ 152.931783][ T10] usb 6-1: device descriptor read/8, error -71 [ 153.180445][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 153.200970][ T10] usb 6-1: device descriptor read/8, error -71 [ 153.310717][ T10] usb usb6-port1: unable to enumerate USB device [ 153.390510][ T39] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 153.555148][ T39] usb 9-1: config index 0 descriptor too short (expected 8192, got 441) [ 153.558931][ T39] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.563495][ T39] usb 9-1: config 0 has no interfaces? [ 153.565899][ T39] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 153.569670][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.576215][ T39] usb 9-1: config 0 descriptor?? [ 153.679016][ T9292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.710872][ T9292] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 153.793611][ T39] usb 9-1: string descriptor 0 read error: -71 [ 153.797753][ T39] usb 9-1: USB disconnect, device number 5 [ 153.927709][ T9307] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 153.938938][ T9307] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 154.086894][ T9319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.588080][ T9335] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 154.754101][ T9344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.808937][ T9344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.870501][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.873956][ T29] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 154.876628][ T29] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 154.882450][ T40] kauditd_printk_skb: 758 callbacks suppressed [ 154.882460][ T40] audit: type=1326 audit(2000000038.979:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.4.923" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd209d9ce59 code=0x0 [ 155.411415][ T9361] __nla_validate_parse: 5 callbacks suppressed [ 155.411429][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'. [ 155.637287][ T9379] syzkaller0: entered promiscuous mode [ 155.642070][ T9379] syzkaller0: entered allmulticast mode [ 155.770452][ T39] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 155.920459][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 155.924603][ T39] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 155.933989][ T39] usb 6-1: New USB device found, idVendor=07cf, idProduct=6802, bcdDevice= 0.40 [ 155.938118][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.941820][ T39] usb 6-1: Product: syz [ 155.943654][ T39] usb 6-1: Manufacturer: syz [ 155.945717][ T39] usb 6-1: SerialNumber: syz [ 155.970517][ T5525] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 156.120456][ T5525] usb 10-1: Using ep0 maxpacket: 32 [ 156.124556][ T5525] usb 10-1: config 4 has an invalid interface number: 188 but max is 1 [ 156.128302][ T5525] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 156.132804][ T5525] usb 10-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 156.136680][ T5525] usb 10-1: config 4 has no interface number 0 [ 156.139422][ T5525] usb 10-1: config 4 interface 188 altsetting 6 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 156.144352][ T5525] usb 10-1: config 4 interface 188 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 156.149103][ T5525] usb 10-1: config 4 interface 188 altsetting 6 endpoint 0xD has an invalid bInterval 255, changing to 11 [ 156.154169][ T5525] usb 10-1: config 4 interface 188 altsetting 6 has 5 endpoint descriptors, different from the interface descriptor's value: 8 [ 156.159599][ T5525] usb 10-1: config 4 interface 188 has no altsetting 0 [ 156.164896][ T5525] usb 10-1: New USB device found, idVendor=2019, idProduct=ab2b, bcdDevice=db.4d [ 156.166764][ T39] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 156.169048][ T5525] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.172405][ T39] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 156.175339][ T5525] usb 10-1: Product: 쒌㷾ë盓㉊庫鋌详è¨îµä¿­ç²ªê‘Šë—Œîº˜ï›’ℾ媄䵑댫㛎ʗ⻊䷗譓φ洞婙⭀挱㭮ફ슻྽詒溄뗔㦱듼釶빔꼫嗱羙œì…ﮔ눸埿䘊뜣ᵳ쓥ۛ剓◃ä°å‡ç™´åŸ˜è ±ì†œá…µî“–꾨쉇é닂뻤æï•æ–¬ê¢ ê›ã–ˆè§°ç¥¶ì–뾃죚䎹⦩휣ⅳឡ譳 [ 156.187719][ T39] usb 6-1: USB disconnect, device number 17 [ 156.195772][ T5525] usb 10-1: Manufacturer: а [ 156.581252][ T9389] netlink: 'syz.2.933': attribute type 21 has an invalid length. [ 156.584744][ T9389] netlink: 152 bytes leftover after parsing attributes in process `syz.2.933'. [ 156.638879][ T9399] overlayfs: failed to resolve './file1': -2 [ 156.643021][ T9399] input: syz1 as /devices/virtual/input/input14 [ 156.706286][ T9400] CIFS mount error: No usable UNC path provided in device string! [ 156.706286][ T9400] [ 156.709842][ T9400] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 156.711100][ T9407] CIFS mount error: No usable UNC path provided in device string! [ 156.711100][ T9407] [ 156.719269][ T9407] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 156.913182][ T9412] overlayfs: missing 'lowerdir' [ 156.950557][ T5741] Bluetooth: hci3: command 0x0c1a tx timeout [ 156.951028][ T29] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 156.955755][ T29] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 157.529195][ T40] audit: type=1400 audit(2000000041.619:1402): avc: denied { bind } for pid=9421 comm="syz.2.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 157.579420][ T9416] overlayfs: statfs failed on './file0' [ 157.727669][ T40] audit: type=1400 audit(2000000041.819:1403): avc: denied { read } for pid=9433 comm="syz.2.945" path="socket:[34966]" dev="sockfs" ino=34966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.761071][ T40] audit: type=1400 audit(2000000041.859:1404): avc: denied { watch } for pid=9425 comm="syz.1.942" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 157.987143][ T40] audit: type=1400 audit(2000000042.079:1405): avc: denied { ioctl } for pid=9445 comm="syz.2.948" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 158.313739][ T9450] netlink: 60 bytes leftover after parsing attributes in process `syz.2.949'. [ 158.453451][ T9467] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 158.455534][ T9467] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.464084][ T9467] vhci_hcd vhci_hcd.0: Device attached [ 158.469625][ T9468] vhci_hcd: unknown pdu 1 [ 158.475267][ T8488] vhci_hcd vhci_hcd.2: stop threads [ 158.477430][ T9467] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 158.479552][ T9467] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 158.480080][ T8488] vhci_hcd vhci_hcd.2: release socket [ 158.483916][ T9467] vhci_hcd vhci_hcd.0: Device attached [ 158.484528][ T8488] vhci_hcd vhci_hcd.2: disconnect device [ 158.493894][ T40] audit: type=1400 audit(2000000042.589:1406): avc: denied { execute } for pid=9461 comm="syz.2.952" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 158.533457][ T9473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.954'. [ 158.609703][ T9479] CUSE: unknown device info "" [ 158.612088][ T9479] CUSE: zero length info key specified [ 158.708173][ T9486] /dev/sg0: Can't lookup blockdev [ 158.761708][ T9488] Bluetooth: MGMT ver 1.23 [ 158.761783][ T9470] vhci_hcd: connection closed [ 158.763932][ T116] vhci_hcd vhci_hcd.2: stop threads [ 158.773218][ T116] vhci_hcd vhci_hcd.2: release socket [ 158.776654][ T116] vhci_hcd vhci_hcd.2: disconnect device [ 158.871649][ T9490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.960'. [ 158.977787][ T9493] netlink: 44 bytes leftover after parsing attributes in process `syz.1.961'. [ 159.030780][ T29] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 159.033607][ T29] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 159.043714][ T5741] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.181550][ T8479] Bluetooth: hci4: Frame reassembly failed (-84) [ 159.181882][ T9497] binder: 9496:9497 ioctl c0306201 200000000680 returned -14 [ 159.190171][ T8490] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 159.241664][ T5525] usb 10-1: USB disconnect, device number 2 [ 159.434481][ T9507] netlink: 112 bytes leftover after parsing attributes in process `syz.4.965'. [ 159.581869][ T9522] fuse: Bad value for 'fd' [ 159.749779][ T9533] netlink: 40 bytes leftover after parsing attributes in process `syz.5.971'. [ 159.788894][ T40] audit: type=1400 audit(2000000043.879:1407): avc: denied { setopt } for pid=9534 comm="syz.4.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 159.845648][ T40] audit: type=1400 audit(2000000043.939:1408): avc: denied { lock } for pid=9539 comm="syz.4.975" path="/dev/video37" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 159.877797][ T9547] netlink: 'syz.4.976': attribute type 21 has an invalid length. [ 159.889647][ T40] audit: type=1400 audit(2000000043.979:1409): avc: denied { write } for pid=9542 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.953877][ T40] audit: type=1400 audit(2000000044.049:1410): avc: denied { write } for pid=9551 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.977767][ T9556] netlink: 'syz.5.979': attribute type 1 has an invalid length. [ 159.987170][ T9556] netlink: 'syz.5.979': attribute type 1 has an invalid length. [ 159.988620][ T9560] netlink: 'syz.4.978': attribute type 1 has an invalid length. [ 159.995225][ T9560] netlink: 244 bytes leftover after parsing attributes in process `syz.4.978'. [ 160.004008][ T40] audit: type=1400 audit(2000000044.099:1411): avc: denied { mounton } for pid=9558 comm="syz.4.978" path="/proc/553/task" dev="proc" ino=32559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 160.036396][ T40] audit: type=1400 audit(2000000044.129:1412): avc: denied { write } for pid=9565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.045628][ T40] audit: type=1400 audit(2000000044.139:1413): avc: denied { read } for pid=9567 comm="syz.4.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 160.045792][ T9568] netlink: 72 bytes leftover after parsing attributes in process `syz.4.980'. [ 160.108515][ T40] audit: type=1400 audit(2000000044.199:1414): avc: denied { write } for pid=9570 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.197299][ T9583] openvswitch: netlink: Flow key attr not present in new flow. [ 160.211277][ T9582] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9582 comm=syz.5.983 [ 160.219396][ T9582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9582 comm=syz.5.983 [ 160.356013][ T40] audit: type=1400 audit(2000000044.449:1415): avc: denied { getopt } for pid=9600 comm="syz.2.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 160.541103][ T59] e1000 0000:00:06.0 eth0: Reset adapter [ 160.599057][ T9615] Bluetooth: (null): Invalid header checksum [ 160.617625][ T116] Bluetooth: (null): Invalid header checksum [ 160.626360][ T9599] overlayfs: statfs failed on './file0' [ 160.660784][ T59] e1000 0000:00:06.0 eth0: Reset adapter [ 160.772013][ T59] e1000 0000:00:06.0 eth0: Reset adapter [ 161.151372][ T40] audit: type=1400 audit(2000000045.249:1416): avc: denied { write } for pid=9636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.191012][ T5741] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 161.191906][ T5745] Bluetooth: hci4: command 0x1003 tx timeout [ 161.213948][ T40] audit: type=1400 audit(2000000045.309:1417): avc: denied { write } for pid=9639 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.329162][ T40] audit: type=1400 audit(2000000045.419:1418): avc: denied { write } for pid=9641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.388306][ T40] audit: type=1400 audit(2000000045.479:1419): avc: denied { write } for pid=9644 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.951388][ T59] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 168.027769][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 168.027783][ T40] audit: type=1400 audit(2000000052.119:1422): avc: denied { write } for pid=9659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.076867][ T40] audit: type=1400 audit(2000000052.169:1423): avc: denied { write } for pid=9662 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.394971][ T40] audit: type=1400 audit(2000000053.489:1424): avc: denied { write } for pid=9664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.451810][ T40] audit: type=1400 audit(2000000053.549:1425): avc: denied { write } for pid=9667 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.536312][ T9671] 9pnet_fd: p9_fd_create_tcp (9671): problem connecting socket to 127.0.0.1 [ 170.538234][ T9674] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 170.538554][ T40] audit: type=1400 audit(2000000054.629:1426): avc: denied { getopt } for pid=9672 comm="syz.5.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 170.542971][ T40] audit: type=1400 audit(2000000054.639:1427): avc: denied { write } for pid=9675 comm="syz.1.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 170.950499][ T1043] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 171.003957][ T40] audit: type=1400 audit(2000000055.099:1428): avc: denied { accept } for pid=9698 comm="syz.5.1008" path="socket:[34252]" dev="sockfs" ino=34252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 171.012092][ T40] audit: type=1400 audit(2000000055.099:1429): avc: denied { write } for pid=9698 comm="syz.5.1008" dev="sockfs" ino=34252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 171.078782][ T9717] __nla_validate_parse: 3 callbacks suppressed [ 171.078801][ T9717] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1011'. [ 171.086493][ T9717] netlink: 'syz.4.1011': attribute type 7 has an invalid length. [ 171.089742][ T9717] netlink: 'syz.4.1011': attribute type 8 has an invalid length. [ 171.093295][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 171.101142][ T1043] usb 6-1: Using ep0 maxpacket: 32 [ 171.109451][ T1043] usb 6-1: config 1 interface 0 has no altsetting 0 [ 171.116909][ T1043] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 171.121181][ T1043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.126348][ T1043] usb 6-1: Product: 怱䌭鴜嗸黿갢혠㶟ç¥à°¶â™•â«¯î‡ ê¥ªêƒáŽªä¥«á¨ºë¤¹î±²á™¥íž©êœ‹î¤²í›Ÿä‚¿ì‘‰ïª¼ì•‚뾂㘈鱮ᒽê훳蟺剗뫺㟙ꖮ接퓜⩅≵禴瘱 [ 171.140101][ T1043] usb 6-1: Manufacturer: Л [ 171.144644][ T1043] usb 6-1: SerialNumber: ⾹鄜䵓壘髋똠巴╬虰懥Ⴒ枇鱌Оᴠϰ⡆䴒険옑娈橘綞䫚ê¾ã‚ºãª€ëµœïœºÊ›ì¡âª†ã’¾ç½›ïž¥ä­ê½žæ‰åŠ”ëªë”•ë²–僶Ι枺곲黩볟⊅뷎Ã⑸㓡尢á¼â¨ë›Žå§»æ‰§çƒ§á’¾è¢˜ã²…攃⒩ä¦ç›¨ÍŸî¯±î¼¶á¤ªî ä¯½ä’è˜â‚‡å²‹Å¯ë‘´é“Œá‹‰ã¥¤Ñ¦å´•æ—¢äŒ†ê¯«ë£°ã¹®ã»­ä“‘辰鉨㸉ࣵ郺ë‚铒⚬ꩽ鉫渼떜椑蒭䲘 [ 171.345312][ T9727] binder: BINDER_SET_CONTEXT_MGR already set [ 171.348110][ T9727] binder: 9726:9727 ioctl 4018620d 200000000100 returned -16 [ 171.403508][ T9728] binder: 9726:9728 ioctl c0306201 200000000640 returned -22 [ 171.508698][ T9734] SELinux: ebitmap: truncated map [ 171.533751][ T9734] SELinux: failed to load policy [ 171.616467][ T40] audit: type=1400 audit(2000000055.709:1430): avc: denied { bind } for pid=9741 comm="syz.4.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 171.727923][ T5745] Bluetooth: hci4: sending frame failed (-49) [ 171.732842][ T5741] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 171.777234][ T9748] futex_wake_op: syz.4.1020 tries to shift op by -1; fix this program [ 171.804736][ T9751] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1021'. [ 171.810030][ T9751] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1021'. [ 171.847114][ T40] audit: type=1400 audit(2000000055.939:1431): avc: denied { connect } for pid=9752 comm="syz.5.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 172.282548][ T3266] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 172.430398][ T3266] usb 9-1: Using ep0 maxpacket: 8 [ 172.433293][ T3266] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 172.435895][ T3266] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.439025][ T3266] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.442183][ T3266] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.445345][ T3266] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.449366][ T3266] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 172.452338][ T3266] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.874854][ T39] usb 9-1: USB disconnect, device number 6 [ 173.671405][ T1043] usbhid 6-1:1.0: can't add hid device: -71 [ 173.673417][ T1043] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 173.689574][ T1043] usb 6-1: USB disconnect, device number 18 [ 173.694245][ T9795] exFAT-fs (nbd1): unable to read boot sector [ 173.698988][ T9795] exFAT-fs (nbd1): failed to read boot sector [ 173.702200][ T9795] exFAT-fs (nbd1): failed to recognize exfat type [ 173.853653][ T9803] tmpfs: User quota block hardlimit too large. [ 173.874570][ T40] audit: type=1400 audit(2000000057.969:1432): avc: denied { lock } for pid=9799 comm="syz.1.1033" path="socket:[32755]" dev="sockfs" ino=32755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 173.888781][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1035'. [ 173.908311][ T9806] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1035'. [ 173.972284][ T9808] netlink: 'syz.5.1036': attribute type 4 has an invalid length. [ 174.005259][ T9811] kvm: emulating exchange as write [ 174.013354][ T40] audit: type=1326 audit(2000000058.109:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9810 comm="syz.1.1037" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbcca79ce59 code=0x0 [ 174.264665][ T9837] netlink: 'syz.5.1043': attribute type 1 has an invalid length. [ 174.272889][ T9837] netlink: 'syz.5.1043': attribute type 2 has an invalid length. [ 174.418500][ T9840] hsr0: entered allmulticast mode [ 174.420920][ T9840] hsr_slave_0: entered allmulticast mode [ 174.422786][ T9840] hsr_slave_1: entered allmulticast mode [ 174.897640][ T40] audit: type=1400 audit(2000000058.989:1434): avc: denied { ioctl } for pid=9843 comm="syz.1.1045" path="socket:[36297]" dev="sockfs" ino=36297 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 174.907081][ T40] audit: type=1400 audit(2000000058.989:1435): avc: denied { write } for pid=9843 comm="syz.1.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 174.910777][ T9844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=9844 comm=syz.1.1045 [ 175.035153][ T9847] overlayfs: failed to set uuid (203/file1, err=-1); falling back to uuid=null. [ 175.039228][ T9847] overlayfs: failed to verify upper root origin [ 175.046999][ T9847] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 175.050827][ T9847] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 175.256195][ T40] audit: type=1400 audit(2000000059.349:1436): avc: denied { remount } for pid=9869 comm="syz.1.1054" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 175.695764][ T40] audit: type=1400 audit(2000000059.789:1437): avc: denied { mounton } for pid=9897 comm="syz.1.1062" path="/264/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 175.818764][ T40] audit: type=1400 audit(2000000059.909:1438): avc: denied { mounton } for pid=9904 comm="syz.4.1064" path="/210/file0" dev="tmpfs" ino=1181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 175.916322][ T9913] xt_l2tp: wrong L2TP version: 0 [ 175.936578][ T40] audit: type=1400 audit(2000000060.029:1439): avc: denied { read } for pid=9904 comm="syz.4.1064" name="file1" dev="tmpfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 175.939313][ T9905] fuse: Bad value for 'fd' [ 175.943505][ T40] audit: type=1400 audit(2000000060.029:1440): avc: denied { watch watch_reads } for pid=9904 comm="syz.4.1064" path="/210/file1" dev="tmpfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 176.370423][ T1490] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 176.531668][ T1490] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.535402][ T1490] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 30768, setting to 64 [ 176.540321][ T1490] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 176.543210][ T1490] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.545694][ T1490] usb 10-1: Product: syz [ 176.547010][ T1490] usb 10-1: Manufacturer: syz [ 176.548441][ T1490] usb 10-1: SerialNumber: syz [ 176.551648][ T1490] usb 10-1: config 0 descriptor?? [ 176.590631][ T1490] rc_core: IR keymap rc-streamzap not found [ 176.592578][ T1490] Registered IR keymap rc-empty [ 176.594751][ T1490] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 176.599127][ T1490] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input15 [ 176.715677][ T40] audit: type=1400 audit(2000000060.809:1441): avc: denied { read } for pid=9934 comm="syz.4.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.724196][ T9936] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9936 comm=syz.4.1071 [ 176.750916][ T9938] netlink: 488 bytes leftover after parsing attributes in process `syz.4.1072'. [ 176.753802][ T9938] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1072'. [ 176.757810][ T9926] netlink: 'syz.5.1069': attribute type 11 has an invalid length. [ 176.764432][ T5525] usb 10-1: USB disconnect, device number 3 [ 177.038279][ T9950] netlink: 'syz.4.1076': attribute type 27 has an invalid length. [ 177.101928][ T9950] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.105158][ T9950] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.116333][ T9950] team0: left promiscuous mode [ 177.118394][ T9950] team_slave_0: left promiscuous mode [ 177.120233][ T9950] team_slave_1: left promiscuous mode [ 177.144990][ T9950] wg1: left promiscuous mode [ 177.148770][ T9950] wg1: left allmulticast mode [ 177.184475][ T9950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.305505][ T9950] ip6gre1: left promiscuous mode [ 177.307164][ T9950] ip6gre1: left allmulticast mode [ 177.342498][ T9952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.346332][ T9952] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.353707][ T9952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.372434][ T9952] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.376104][ T9952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.381053][ T9952] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.383824][ T9952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.395307][ T9952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.407964][ T9952] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 177.425181][ T8476] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.428731][ T8476] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.432651][ T8476] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.435909][ T8476] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.442062][ T8476] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.445701][ T8476] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.449305][ T8476] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.453145][ T8476] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.436638][ T9981] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 178.485228][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1084'. [ 178.488909][ T9986] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1084'. [ 178.495258][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1084'. [ 178.498080][ T9986] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1084'. [ 178.753246][ T9990] 0x000000007fff-0x000100007ffe : "" [ 178.756500][ T9990] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x18001 [ 178.779070][ T9990] ftl_cs: FTL header corrupt! [ 178.922011][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 178.922069][ T40] audit: type=1400 audit(2000000063.019:1445): avc: denied { shutdown } for pid=10000 comm="syz.1.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 178.931226][T10001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1087'. [ 178.936172][T10002] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1087'. [ 179.120298][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.123807][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.126618][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.129528][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.133706][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.136471][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.139150][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.142012][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.145895][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.148660][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.152508][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.155307][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.158136][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.161326][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.164053][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.166757][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.169357][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.172318][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.175008][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.177720][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.180306][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.183150][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.185947][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.188751][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.191554][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.194283][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.196799][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.199433][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.205395][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.209684][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.213153][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.215833][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.218450][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.221146][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.223757][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.226766][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.229464][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.232174][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.234802][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.237562][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.240226][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.242998][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.245634][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.248335][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.251070][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.253845][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.257025][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.259713][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.262600][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.265494][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.268187][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.271061][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.273681][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.276402][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.279035][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.281776][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.284469][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.287161][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.289812][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.292600][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.295272][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.298065][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.300773][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.303466][T10015] overlay: filesystem on ./file0 not supported as upperdir [ 179.422621][ T40] audit: type=1400 audit(2000000063.519:1446): avc: denied { listen } for pid=10021 comm="syz.4.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.431564][ T40] audit: type=1400 audit(2000000063.519:1447): avc: denied { write } for pid=10021 comm="syz.4.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.577560][ T40] audit: type=1400 audit(2000000063.669:1448): avc: denied { append } for pid=10031 comm="syz.4.1096" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 179.583940][T10032] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 179.794705][ T40] audit: type=1400 audit(2000000063.889:1449): avc: denied { write } for pid=10046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.865561][ T40] audit: type=1400 audit(2000000063.959:1450): avc: denied { write } for pid=10050 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.940445][ T40] audit: type=1400 audit(2000000064.029:1451): avc: denied { write } for pid=10053 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.008011][ T40] audit: type=1400 audit(2000000064.099:1452): avc: denied { write } for pid=10060 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.408646][T10079] input: syz0 as /devices/virtual/input/input16 [ 180.425432][T10086] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1106'. [ 180.640835][ T5834] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 180.880438][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 180.897018][ T40] audit: type=1400 audit(2000000064.989:1453): avc: denied { accept } for pid=10106 comm="syz.5.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 181.031652][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 181.035412][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 181.038988][ T9] usb 7-1: config 8 has an invalid interface number: 188 but max is 0 [ 181.042058][ T9] usb 7-1: config 8 has no interface number 0 [ 181.044042][ T9] usb 7-1: config 8 interface 188 has no altsetting 0 [ 181.050985][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 181.055742][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.060732][ T9] usb 7-1: Product: syz [ 181.062139][ T9] usb 7-1: Manufacturer: syz [ 181.065574][ T9] usb 7-1: SerialNumber: syz [ 181.276491][ T9] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 181.281454][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 181.283892][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 181.288427][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.293877][ T9] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 181.298753][ T9] usb 7-1: media controller created [ 181.300519][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 181.302384][ T9] dw2102: i2c transfer failed. [ 181.303889][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 181.305719][ T9] dw2102: i2c transfer failed. [ 181.307219][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 181.309929][ T9] dw2102: i2c transfer failed. [ 181.311576][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 181.313451][ T9] dw2102: i2c transfer failed. [ 181.314978][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 181.316791][ T9] dw2102: i2c transfer failed. [ 181.318297][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 181.320141][ T9] dw2102: i2c transfer failed. [ 181.321730][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 181.328415][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.338969][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 181.340693][ T9] dw2102: command 0x0e transfer failed. [ 181.342690][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 181.344748][ T9] dw2102: command 0x0e transfer failed. [ 181.650617][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 181.652929][ T9] dw2102: command 0x0e transfer failed. [ 181.655250][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 181.657708][ T9] dw2102: command 0x0e transfer failed. [ 181.660037][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 181.665462][ T9] dw2102: command 0x51 transfer failed. [ 181.689389][T10125] devtmpfs: Unknown parameter 'ize' [ 181.693773][ T9] DVB: Unable to find symbol ds3000_attach() [ 181.696374][ T9] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 181.702171][T10125] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1117'. [ 181.734165][T10126] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.736908][T10126] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.751048][ T9] rc_core: IR keymap rc-su3000 not found [ 181.753434][ T9] Registered IR keymap rc-empty [ 181.757977][ T9] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 181.764731][ T9] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input17 [ 181.774306][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 181.776818][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 181.779109][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 181.787928][ T9] usb 7-1: USB disconnect, device number 11 [ 181.820792][T10126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.858824][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 181.870667][ T1043] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 182.030465][ T1043] usb 6-1: Using ep0 maxpacket: 8 [ 182.034470][ T1043] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 182.037910][ T1043] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.042565][ T1043] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.046669][ T1043] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.050820][ T1043] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.056106][ T1043] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 182.059755][ T1043] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.272044][T10122] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 182.283418][ T1043] usb 6-1: usb_control_msg returned -32 [ 182.285749][ T1043] usbtmc 6-1:16.0: can't read capabilities [ 182.560290][T10139] fuse: Bad value for 'user_id' [ 182.562511][T10139] fuse: Bad value for 'user_id' [ 182.643954][ T40] audit: type=1400 audit(2000000066.739:1454): avc: denied { execute } for pid=10148 comm="syz.2.1123" dev="hugetlbfs" ino=40021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 182.699621][T10152] fuse: Bad value for 'fd' [ 182.726818][T10154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24592 sclass=netlink_route_socket pid=10154 comm=syz.4.1124 [ 182.990544][T10167] usbtmc 6-1:16.0: usb_clear_halt returned -32 [ 183.192801][ T24] usb 6-1: USB disconnect, device number 19 [ 183.542319][T10181] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 183.617300][T10189] program syz.2.1133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.624986][T10190] batman_adv: batadv0: Adding interface: gretap2 [ 183.627864][T10190] batman_adv: batadv0: Interface activated: gretap2 [ 183.628405][T10187] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1132'. [ 183.802139][T10211] netlink: 'syz.5.1139': attribute type 1 has an invalid length. [ 183.803349][T10208] ip6erspan0: entered promiscuous mode [ 183.859738][T10215] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1139'. [ 183.873757][T10211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.886001][T10208] batman_adv: batadv0: Adding interface: dummy0 [ 183.888222][T10208] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.899189][T10208] batman_adv: batadv0: Interface activated: dummy0 [ 183.914484][T10210] bond2: (slave veth0_to_bond): making interface the new active one [ 183.918098][T10210] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 183.942061][T10216] batadv0: mtu less than device minimum [ 183.944988][T10216] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.948198][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 183.948208][ T40] audit: type=1400 audit(2000000068.039:1475): avc: denied { create } for pid=10217 comm="syz.5.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.948849][T10216] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.952803][ T40] audit: type=1400 audit(2000000068.049:1476): avc: denied { read } for pid=10217 comm="syz.5.1140" dev="nsfs" ino=4026532913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 183.954633][T10218] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1140'. [ 183.957878][T10216] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.962811][ T40] audit: type=1400 audit(2000000068.049:1477): avc: denied { open } for pid=10217 comm="syz.5.1140" path="net:[4026532913]" dev="nsfs" ino=4026532913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 183.968245][T10216] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.970957][ T40] audit: type=1400 audit(2000000068.049:1478): avc: denied { write } for pid=10217 comm="syz.5.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.974376][T10216] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.985150][ T40] audit: type=1400 audit(2000000068.049:1479): avc: denied { read } for pid=10217 comm="syz.5.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.986994][T10216] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.008677][T10216] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.012335][T10216] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.016122][T10216] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.033854][ T40] audit: type=1400 audit(2000000068.129:1480): avc: denied { accept } for pid=10213 comm="syz.1.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 184.048970][ T40] audit: type=1400 audit(2000000068.139:1481): avc: denied { read } for pid=10213 comm="syz.1.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 184.056975][ T40] audit: type=1400 audit(2000000068.139:1482): avc: denied { create } for pid=10213 comm="syz.1.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.082537][ T40] audit: type=1400 audit(2000000068.139:1483): avc: denied { ioctl } for pid=10213 comm="syz.1.1138" path="socket:[37442]" dev="sockfs" ino=37442 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.095760][ T5741] block nbd0: Receive control failed (result -107) [ 184.097982][ T40] audit: type=1400 audit(2000000068.149:1484): avc: denied { ioctl } for pid=10217 comm="syz.5.1140" path="socket:[37436]" dev="sockfs" ino=37436 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 184.167758][T10218] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1140'. [ 184.206653][T10227] SELinux: Context tunnel_key is not valid (left unmapped). [ 184.319417][T10232] lo speed is unknown, defaulting to 1000 [ 184.322437][T10232] lo speed is unknown, defaulting to 1000 [ 184.327516][T10232] lo speed is unknown, defaulting to 1000 [ 184.340958][T10232] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 184.346551][T10232] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 184.353128][T10232] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 184.361481][T10232] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 184.372322][T10232] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 184.397630][T10234] xt_hashlimit: size too large, truncated to 1048576 [ 184.426268][T10232] lo speed is unknown, defaulting to 1000 [ 184.433648][T10232] lo speed is unknown, defaulting to 1000 [ 184.437717][T10232] lo speed is unknown, defaulting to 1000 [ 184.444418][T10232] lo speed is unknown, defaulting to 1000 [ 184.594928][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 184.688307][T10254] tipc: Started in network mode [ 184.690840][T10254] tipc: Node identity 562b6ebd72e9, cluster identity 4711 [ 184.693994][T10254] tipc: Enabled bearer , priority 0 [ 184.722961][T10254] syzkaller0: entered promiscuous mode [ 184.724721][T10254] syzkaller0: entered allmulticast mode [ 184.726805][T10254] tipc: Resetting bearer [ 184.733257][T10250] tipc: Resetting bearer [ 184.980538][T10282] qrtr: Invalid version 8 [ 185.146467][T10291] SELinux: policydb version 795065887 does not match my version range 15-35 [ 185.149339][T10291] SELinux: failed to load policy [ 185.153064][T10291] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 185.210106][T10295] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 185.214412][T10295] SELinux: failed to load policy [ 186.322586][T10250] tipc: Disabling bearer [ 186.351024][ T5827] tipc: Node number set to 616722109 [ 186.378827][T10300] block nbd2: not configured, cannot reconfigure [ 186.388059][T10300] nbd: nbd2 already in use [ 186.420100][T10301] xt_hashlimit: size too large, truncated to 1048576 [ 186.971679][T10354] netlink: 'syz.5.1181': attribute type 49 has an invalid length. [ 186.976291][T10354] bond0: (slave bond_slave_0): Releasing backup interface [ 187.064948][T10354] bond_slave_0: entered promiscuous mode [ 187.067030][T10354] bond_slave_0: entered allmulticast mode [ 187.125192][T10358] lo speed is unknown, defaulting to 1000 [ 187.271176][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'. [ 187.316593][T10369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1186'. [ 187.346890][T10369] bond3: entered promiscuous mode [ 187.348616][T10369] bond3: entered allmulticast mode [ 187.350780][T10369] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.353516][T10369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1186'. [ 187.394122][T10369] bond4: entered promiscuous mode [ 187.396502][T10369] bond4: entered allmulticast mode [ 187.399934][T10369] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.492293][T10393] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 187.575193][T10401] bond3 (unregistering): Released all slaves [ 187.771830][T10413] input: syz0 as /devices/virtual/input/input18 [ 187.806282][T10413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1195'. [ 187.918943][T10430] usb usb9: check_ctrlrecip: process 10430 (syz.5.1199) requesting ep 01 but needs 81 [ 187.922291][T10430] usb usb9: usbfs: process 10430 (syz.5.1199) did not claim interface 0 before use [ 188.793732][T10501] x_tables: duplicate underflow at hook 1 [ 188.863521][T10510] Cannot find add_set index 0 as target [ 188.993347][ T40] kauditd_printk_skb: 195 callbacks suppressed [ 188.993360][ T40] audit: type=1400 audit(2000000073.089:1680): avc: denied { accept } for pid=10514 comm="syz.5.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 189.002670][ T40] audit: type=1400 audit(2000000073.089:1681): avc: denied { write } for pid=10514 comm="syz.5.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 189.008846][ T40] audit: type=1400 audit(2000000073.089:1682): avc: denied { read } for pid=10514 comm="syz.5.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 189.039870][T10515] tmpfs: User quota block hardlimit too large. [ 189.059264][ T40] audit: type=1400 audit(2000000073.149:1683): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 189.094258][ T40] audit: type=1400 audit(2000000073.189:1684): avc: denied { read } for pid=10519 comm="syz.1.1215" dev="nsfs" ino=4026533313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 189.103122][ T40] audit: type=1400 audit(2000000073.189:1685): avc: denied { open } for pid=10519 comm="syz.1.1215" path="net:[4026533313]" dev="nsfs" ino=4026533313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 189.230896][ T40] audit: type=1400 audit(2000000073.329:1686): avc: denied { write } for pid=10526 comm="syz.5.1216" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 189.233680][T10527] netlink: 'syz.5.1216': attribute type 2 has an invalid length. [ 189.240180][ T40] audit: type=1400 audit(2000000073.329:1687): avc: denied { open } for pid=10526 comm="syz.5.1216" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 189.243230][T10527] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1216'. [ 189.255045][ T40] audit: type=1400 audit(2000000073.329:1688): avc: denied { ioctl } for pid=10526 comm="syz.5.1216" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 189.292308][T10529] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1217'. [ 189.329742][T10529] bridge1: port 1(veth5) entered blocking state [ 189.333837][T10529] bridge1: port 1(veth5) entered disabled state [ 189.336636][T10529] veth5: entered allmulticast mode [ 189.340286][T10529] veth5: entered promiscuous mode [ 189.375019][T10529] bridge1: port 2(veth7) entered blocking state [ 189.377770][T10529] bridge1: port 2(veth7) entered disabled state [ 189.380606][T10529] veth7: entered allmulticast mode [ 189.384092][T10529] veth7: entered promiscuous mode [ 189.422482][ T40] audit: type=1400 audit(2000000073.519:1689): avc: denied { create } for pid=10533 comm="syz.5.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 189.543652][T10536] sctp: [Deprecated]: syz.5.1219 (pid 10536) Use of int in maxseg socket option. [ 189.543652][T10536] Use struct sctp_assoc_value instead [ 189.796894][T10547] Device name not specified. [ 189.796894][T10547] [ 189.843973][T10551] 9pnet_virtio: no channels available for device 127.0.0.1 [ 189.887277][T10553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1224'. [ 189.911108][T10553] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10553 comm=syz.2.1224 [ 189.998327][T10561] lo speed is unknown, defaulting to 1000 [ 190.150986][ T5745] Bluetooth: hci4: command 0x1003 tx timeout [ 190.150986][ T5741] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 190.156646][T10567] netlink: 'syz.2.1229': attribute type 2 has an invalid length. [ 190.256766][T10571] SELinux: security policydb version 18 (MLS) not backwards compatible [ 190.259395][T10571] SELinux: failed to load policy [ 190.272064][T10573] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1230'. [ 190.348892][T10578] loop5: detected capacity change from 0 to 7 [ 190.358973][T10578] Dev loop5: unable to read RDB block 7 [ 190.364771][T10578] loop5: unable to read partition table [ 190.367382][T10578] loop5: partition table beyond EOD, truncated [ 190.370069][T10578] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 190.613621][T10599] usb usb8: usbfs: process 10599 (syz.2.1239) did not claim interface 6 before use [ 190.646104][T10601] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 190.651931][ T8476] Bluetooth: hci4: Frame reassembly failed (-84) [ 190.655802][ T8476] Bluetooth: hci4: Frame reassembly failed (-84) [ 190.693096][T10605] binder: 10598:10605 ioctl 8914 200000000040 returned -22 [ 190.696676][T10605] binder: 10598:10605 unknown command 0 [ 190.699107][T10605] binder: 10598:10605 ioctl c0306201 2000000001c0 returned -22 [ 190.720644][T10607] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.1240'. [ 190.723875][T10607] net_ratelimit: 12 callbacks suppressed [ 190.723886][T10607] openvswitch: netlink: Missing key (keys=40, expected=80) [ 191.579650][T10611] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1242'. [ 191.769097][T10622] overlayfs: failed to resolve './file2': -2 [ 191.796955][T10630] loop2: detected capacity change from 0 to 8 [ 191.852870][T10640] SELinux: syz.1.1250 (10640) wrote to checkreqprot. This is no longer supported. [ 191.919415][T10637] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 191.963127][T10645] xt_hashlimit: overflow, rate too high: 0 [ 192.142260][T10647] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 192.710491][ T5741] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 192.710509][ T5745] Bluetooth: hci4: command 0x1003 tx timeout [ 193.018066][T10670] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1258'. [ 193.035741][T10670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.074552][T10670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.086176][T10670] bond0 (unregistering): Released all slaves qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 193.670157][T10711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.674574][T10711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.901404][ T5827] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 193.955533][T10722] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1275'. [ 194.008907][ T40] kauditd_printk_skb: 79 callbacks suppressed [ 194.008926][ T40] audit: type=1400 audit(2000000078.099:1769): avc: denied { unmount } for pid=7122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 194.078967][ T40] audit: type=1400 audit(2000000078.169:1770): avc: denied { bind } for pid=10730 comm="syz.2.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 194.081683][ T5827] usb 10-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 194.096195][ T5827] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 194.101077][ T5827] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 194.106955][ T5827] usb 10-1: config 0 interface 0 has no altsetting 0 [ 194.113911][ T5827] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 194.116847][ T5827] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 194.119444][ T5827] usb 10-1: Product: syz [ 194.121440][ T5827] usb 10-1: Manufacturer: syz [ 194.122935][ T5827] usb 10-1: SerialNumber: syz [ 194.126902][ T5827] usb 10-1: config 0 descriptor?? [ 194.130489][T10713] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 194.136556][ T5827] usb 10-1: selecting invalid altsetting 0 [ 194.223580][T10731] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.226872][T10731] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.266343][T10735] tipc: Enabling not permitted [ 194.268210][T10735] tipc: Enabling of bearer rejected, failed to enable media [ 194.339118][ T40] audit: type=1326 audit(2000000078.429:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10737 comm="syz.4.1279" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd209d9ce59 code=0x0 [ 194.342221][ T5827] usb 10-1: USB disconnect, device number 4 [ 194.381346][T10731] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.387837][T10731] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.505934][T10731] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.509463][T10731] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.610909][T10731] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.614336][T10731] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.714564][ T8488] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.717450][ T8488] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.725416][ T8488] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.728137][ T8488] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.741085][ T8488] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.743763][ T8488] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.755168][ T8488] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.758419][ T8488] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.772278][ T5827] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 194.847187][ T40] audit: type=1400 audit(2000000078.939:1772): avc: denied { compute_member } for pid=10748 comm="syz.2.1281" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 194.940581][ T5827] usb 10-1: Using ep0 maxpacket: 32 [ 194.945496][ T5827] usb 10-1: unable to get BOS descriptor or descriptor too short [ 194.949786][ T5827] usb 10-1: config 8 has an invalid interface number: 188 but max is 0 [ 194.956944][ T5827] usb 10-1: config 8 has no interface number 0 [ 194.960534][ T5827] usb 10-1: config 8 interface 188 has no altsetting 0 [ 194.967059][ T5827] usb 10-1: string descriptor 0 read error: -22 [ 194.969912][ T5827] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 194.974043][ T5827] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.993586][ T5827] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 194.997148][ T5827] dw2102: su3000_power_ctrl: 1, initialized 0 [ 194.999837][ T5827] dvb-usb: bulk message failed: -22 (2/0) [ 195.009228][ T40] audit: type=1400 audit(2000000079.099:1773): avc: denied { setopt } for pid=10763 comm="syz.2.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 195.014956][ T5827] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 195.021394][ T5827] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 195.024736][ T5827] usb 10-1: media controller created [ 195.026910][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 195.029380][ T5827] dw2102: i2c transfer failed. [ 195.031604][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 195.033997][ T5827] dw2102: i2c transfer failed. [ 195.035962][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 195.038732][ T5827] dw2102: i2c transfer failed. [ 195.041310][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 195.043547][ T5827] dw2102: i2c transfer failed. [ 195.045582][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 195.047997][ T5827] dw2102: i2c transfer failed. [ 195.050061][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 195.053067][ T5827] dw2102: i2c transfer failed. [ 195.055088][ T5827] dvb-usb: MAC address: 02:02:02:02:02:02 [ 195.068155][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.083706][T10773] tmpfs: Bad value for 'mpol' [ 195.088192][T10773] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 195.090230][T10773] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 195.093712][T10773] vhci_hcd vhci_hcd.0: Device attached [ 195.095637][T10774] vhci_hcd: cannot find a urb of seqnum 2146388617 max seqnum 0 [ 195.098292][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1290'. [ 195.102824][ T8488] vhci_hcd vhci_hcd.1: stop threads [ 195.103106][T10773] netlink: 'syz.1.1290': attribute type 6 has an invalid length. [ 195.104613][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 195.104630][ T5827] dw2102: command 0x0e transfer failed. [ 195.104639][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 195.104651][ T5827] dw2102: command 0x0e transfer failed. [ 195.112271][ T8488] vhci_hcd vhci_hcd.1: release socket [ 195.113672][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1290'. [ 195.115831][ T8488] vhci_hcd vhci_hcd.1: disconnect device [ 195.117941][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1290'. [ 195.127173][T10773] netlink: 'syz.1.1290': attribute type 6 has an invalid length. [ 195.129633][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1290'. [ 195.195905][T10782] XFS (loop1): SB validate failed with error -5. [ 195.239830][ T40] audit: type=1400 audit(2000000079.329:1774): avc: denied { map } for pid=10791 comm="syz.2.1294" path="socket:[43559]" dev="sockfs" ino=43559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 195.297984][ T40] audit: type=1400 audit(2000000079.389:1775): avc: denied { ioctl } for pid=10796 comm="syz.4.1296" path="socket:[42670]" dev="sockfs" ino=42670 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 195.324712][T10802] CIFS mount error: No usable UNC path provided in device string! [ 195.324712][T10802] [ 195.328796][T10802] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 195.335024][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'. [ 195.410632][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 195.412589][ T5827] dw2102: command 0x0e transfer failed. [ 195.414463][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 195.416365][ T5827] dw2102: command 0x0e transfer failed. [ 195.418193][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 195.420089][ T5827] dw2102: command 0x51 transfer failed. [ 195.425380][T10711] dvb-usb: bulk message failed: -22 (4/0) [ 195.428081][T10711] dw2102: i2c transfer failed. [ 195.441622][ T5827] DVB: Unable to find symbol ds3000_attach() [ 195.443554][ T5827] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 195.480812][T10809] fuse: Bad value for 'user_id' [ 195.483069][T10809] fuse: Bad value for 'user_id' [ 195.487510][ T40] audit: type=1400 audit(2000000079.579:1776): avc: denied { associate } for pid=10808 comm="syz.1.1298" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 195.495201][ T40] audit: type=1400 audit(2000000079.579:1777): avc: denied { write } for pid=10808 comm="syz.1.1298" name="pfkey" dev="proc" ino=4026533420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 195.502852][ T5827] rc_core: IR keymap rc-su3000 not found [ 195.505081][ T5827] Registered IR keymap rc-empty [ 195.508150][ T5827] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 195.512396][ T5827] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input20 [ 195.518392][ T5827] dvb-usb: schedule remote query interval to 150 msecs. [ 195.520691][ T5827] dw2102: su3000_power_ctrl: 0, initialized 1 [ 195.522594][ T5827] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 195.526836][ T5827] usb 10-1: USB disconnect, device number 5 [ 195.551178][ T5827] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 196.086573][ T40] audit: type=1400 audit(2000000080.179:1778): avc: denied { read } for pid=10818 comm="syz.5.1300" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 196.176668][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 196.182102][T10824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1301'. [ 196.183123][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1303'. [ 196.209102][T10825] macvlan2: entered promiscuous mode [ 196.212473][T10825] bridge0: entered promiscuous mode [ 196.262208][T10827] lo speed is unknown, defaulting to 1000 [ 196.270148][T10828] lo speed is unknown, defaulting to 1000 [ 196.272300][T10830] serio: Serial port ptm0 [ 196.522598][T10850] netlink: 'syz.2.1309': attribute type 1 has an invalid length. [ 196.523926][T10846] gtp0: entered allmulticast mode [ 196.566491][ T5827] libceph: connect (1)[c::]:6789 error -101 [ 196.571177][ T5827] libceph: mon0 (1)[c::]:6789 connect error [ 196.602580][T10843] netlink: 'syz.1.1308': attribute type 2 has an invalid length. [ 196.602691][ T5834] libceph: connect (1)[b::]:6789 error -101 [ 196.605327][T10850] gretap3: entered allmulticast mode [ 196.613061][T10850] bond5: (slave gretap3): making interface the new active one [ 196.613839][ T5834] libceph: mon0 (1)[b::]:6789 connect error [ 196.617936][T10850] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 196.629613][T10851] ceph: No mds server is up or the cluster is laggy [ 196.632597][T10855] ceph: No mds server is up or the cluster is laggy [ 196.734655][T10863] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1309'. [ 196.790995][T10867] tmpfs: Cannot enable quota on remount [ 196.802807][T10873] vlan0: entered promiscuous mode [ 196.931776][T10884] veth0_to_team: entered promiscuous mode [ 196.977918][T10875] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1316'. [ 197.091039][T10875] nbd1: detected capacity change from 0 to 959 [ 197.100643][ T5741] block nbd1: Receive control failed (result -32) [ 197.103109][T10131] block nbd1: Send control failed (result -32) [ 197.109983][T10131] block nbd1: Request send failed, requeueing [ 197.127831][ T25] block nbd1: Dead connection, failed to find a fallback [ 197.133751][ T25] block nbd1: shutting down sockets [ 197.136754][ T25] blk_print_req_error: 11 callbacks suppressed [ 197.136771][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.141140][T10131] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.143966][ T25] buffer_io_error: 11 callbacks suppressed [ 197.143978][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 197.146098][T10131] Buffer I/O error on dev nbd1, logical block 1, async page read [ 197.147959][T10131] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.165629][T10131] Buffer I/O error on dev nbd1, logical block 2, async page read [ 197.183947][T10131] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.187619][T10131] Buffer I/O error on dev nbd1, logical block 3, async page read [ 197.191563][T10131] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.194479][T10131] Buffer I/O error on dev nbd1, logical block 0, async page read [ 197.197001][T10131] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.200261][T10131] Buffer I/O error on dev nbd1, logical block 1, async page read [ 197.203895][T10131] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.208085][T10131] Buffer I/O error on dev nbd1, logical block 2, async page read [ 197.213945][T10131] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.216914][T10131] Buffer I/O error on dev nbd1, logical block 3, async page read [ 197.220229][T10131] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.224474][T10131] Buffer I/O error on dev nbd1, logical block 0, async page read [ 197.227849][T10131] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.231895][T10131] Buffer I/O error on dev nbd1, logical block 1, async page read [ 197.237186][T10131] ldm_validate_partition_table(): Disk read failed. [ 197.241719][T10131] Dev nbd1: unable to read RDB block 0 [ 197.244480][T10131] nbd1: unable to read partition table [ 197.255580][T10131] ldm_validate_partition_table(): Disk read failed. [ 197.259979][T10131] Dev nbd1: unable to read RDB block 0 [ 197.266669][T10131] nbd1: unable to read partition table [ 197.361922][T10928] lo speed is unknown, defaulting to 1000 [ 197.442015][T10928] netlink: 'syz.2.1327': attribute type 4 has an invalid length. [ 197.647973][T10946] Invalid argument reading file caps for ./file0 [ 197.675421][T10950] x_tables: duplicate underflow at hook 3 [ 197.750959][T10956] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 197.858503][T10962] overlayfs: conflicting options: userxattr,metacopy=on [ 197.860862][T10963] overlayfs: conflicting options: userxattr,metacopy=on [ 197.924708][T10972] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 198.519190][T10986] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.099827][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 199.099899][ T40] audit: type=1400 audit(2000000083.189:1818): avc: denied { connect } for pid=11015 comm="syz.1.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 199.173483][T11016] lo speed is unknown, defaulting to 1000 [ 199.202390][T11026] netlink: 'syz.2.1354': attribute type 39 has an invalid length. [ 199.463089][ T40] audit: type=1400 audit(2000000083.559:1819): avc: denied { listen } for pid=11032 comm="syz.4.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.471194][ T40] audit: type=1400 audit(2000000083.559:1820): avc: denied { accept } for pid=11032 comm="syz.4.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.513198][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.631887][ T40] audit: type=1400 audit(2000000083.729:1821): avc: denied { execute } for pid=11042 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 199.639207][ T40] audit: type=1400 audit(2000000083.729:1822): avc: denied { execute_no_trans } for pid=11042 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 199.710987][ T40] audit: type=1400 audit(2000000083.809:1823): avc: denied { ioctl } for pid=11046 comm="syz-executor" path="socket:[42987]" dev="sockfs" ino=42987 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.718542][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.724148][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.727623][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.731963][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.736930][ T5745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.747381][ T5741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.757968][ T5741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.762181][ T5741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.769370][ T5741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.772954][ T5741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.779868][ T40] audit: type=1400 audit(2000000083.869:1824): avc: denied { mounton } for pid=11046 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 199.956467][T11046] lo speed is unknown, defaulting to 1000 [ 199.996054][ T40] audit: type=1400 audit(2000000084.089:1825): avc: denied { getopt } for pid=11062 comm="syz.1.1359" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.043344][ T40] audit: type=1400 audit(2000000084.139:1826): avc: denied { ioctl } for pid=11062 comm="syz.1.1359" path="socket:[45142]" dev="sockfs" ino=45142 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 200.084030][ T40] audit: type=1400 audit(2000000084.179:1827): avc: denied { create } for pid=11072 comm="syz.1.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.100714][T11046] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.103616][T11046] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.106471][T11046] bridge_slave_0: entered allmulticast mode [ 200.110649][T11046] bridge_slave_0: entered promiscuous mode [ 200.115830][T11046] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.118816][T11046] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.122005][T11046] bridge_slave_1: entered allmulticast mode [ 200.125401][T11046] bridge_slave_1: entered promiscuous mode [ 200.143341][T11046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.148423][T11046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.172702][T11046] team0: Port device team_slave_0 added [ 200.177903][T11046] team0: Port device team_slave_1 added [ 200.202069][T11046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.205049][T11046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.215938][T11046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.220852][T11046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.223082][T11046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.231220][T11046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.253338][T11046] hsr_slave_0: entered promiscuous mode [ 200.255627][T11046] hsr_slave_1: entered promiscuous mode [ 200.257866][T11046] debugfs: 'hsr0' already exists in 'hsr' [ 200.259676][T11046] Cannot create hsr debugfs directory [ 200.410269][T11046] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 200.509704][T11046] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 200.513290][T11046] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 200.517491][T11046] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 200.520293][T11046] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 200.524594][T11046] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 200.527348][T11046] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 200.532276][T11046] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.566396][T11046] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.569156][T11046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.571863][T11046] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.574157][T11046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.635526][T11046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.645455][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.648170][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.656808][T11046] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.664705][ T8476] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.667226][ T8476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.672586][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.674943][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.684941][T11100] team0: Cannot enslave team device to itself [ 200.757197][T11110] Invalid source name [ 200.758557][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.758758][T11110] Invalid source name [ 200.763512][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.763690][T11110] Invalid source name [ 200.767450][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.767630][T11110] Invalid source name [ 200.771744][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.771917][T11110] Invalid source name [ 200.775762][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.775951][T11110] Invalid source name [ 200.779850][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.780032][T11110] Invalid source name [ 200.785771][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.785951][T11110] Invalid source name [ 200.790130][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.792653][T11110] Invalid source name [ 200.796483][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.796823][T11110] Invalid source name [ 200.801960][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.802227][T11110] Invalid source name [ 200.806734][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.807415][T11110] Invalid source name [ 200.812886][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.813150][T11110] Invalid source name [ 200.817487][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.817940][T11110] Invalid source name [ 200.822485][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.822663][T11110] Invalid source name [ 200.826221][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.826390][T11110] Invalid source name [ 200.829975][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.830143][T11110] Invalid source name [ 200.833898][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.834079][T11110] Invalid source name [ 200.837624][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.837791][T11110] Invalid source name [ 200.841505][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.841672][T11110] Invalid source name [ 200.845310][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.845467][T11110] Invalid source name [ 200.849009][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.849174][T11110] Invalid source name [ 200.853010][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.853178][T11110] Invalid source name [ 200.856825][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.857008][T11110] Invalid source name [ 200.860668][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.860862][T11110] Invalid source name [ 200.864392][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.864560][T11110] Invalid source name [ 200.868070][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.868224][T11110] Invalid source name [ 200.871872][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.872048][T11110] Invalid source name [ 200.875638][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.875863][T11110] Invalid source name [ 200.879806][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.879972][T11110] Invalid source name [ 200.883719][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.883887][T11110] Invalid source name [ 200.887461][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.887623][T11110] Invalid source name [ 200.891180][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.891393][T11110] Invalid source name [ 200.895007][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.895169][T11110] Invalid source name [ 200.898735][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.898890][T11110] Invalid source name [ 200.902546][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.902718][T11110] Invalid source name [ 200.906233][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.906393][T11110] Invalid source name [ 200.909972][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.910167][T11110] Invalid source name [ 200.913736][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.913907][T11110] Invalid source name [ 200.917478][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.917640][T11110] Invalid source name [ 200.922081][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.922257][T11110] Invalid source name [ 200.925849][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.926011][T11110] Invalid source name [ 200.929507][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.929705][T11110] Invalid source name [ 200.931190][T11046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.932163][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.935616][T11110] Invalid source name [ 200.939366][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.939619][T11110] Invalid source name [ 200.943557][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.943830][T11110] Invalid source name [ 200.947639][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.947806][T11110] Invalid source name [ 200.951539][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.951716][T11110] Invalid source name [ 200.955279][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.955466][T11110] Invalid source name [ 200.959432][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.959692][T11110] Invalid source name [ 200.964206][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.964479][T11110] Invalid source name [ 200.968733][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.969017][T11110] Invalid source name [ 200.973586][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.973857][T11110] Invalid source name [ 200.978286][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.978587][T11110] Invalid source name [ 200.983058][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.983324][T11110] Invalid source name [ 200.987023][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.987190][T11110] Invalid source name [ 200.991211][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.991474][T11110] Invalid source name [ 200.995165][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.995346][T11110] Invalid source name [ 200.998879][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 200.999040][T11110] Invalid source name [ 201.006037][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 201.006266][T11110] Invalid source name [ 201.009918][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 201.010091][T11110] Invalid source name [ 201.013699][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 201.013920][T11110] Invalid source name [ 201.025228][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 201.025484][T11110] Invalid source name [ 201.029655][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 201.029949][T11110] Invalid source name [ 201.035204][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 201.035492][T11110] Invalid source name [ 201.039902][T11110] UBIFS error (pid: 11110): cannot open "./file0", error -22 [ 201.101982][T11046] veth0_vlan: entered promiscuous mode [ 201.118714][T11046] veth1_vlan: entered promiscuous mode [ 201.144053][T11046] veth0_macvtap: entered promiscuous mode [ 201.155337][T11046] veth1_macvtap: entered promiscuous mode [ 201.175680][T11046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.184111][T11046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.191522][ T8476] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.194699][ T8476] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.198644][ T8476] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.202114][ T8476] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.299121][ T8488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.301910][ T8488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.328720][ T8488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.332615][ T8488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.400506][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 201.551786][ T24] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 201.556140][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.559645][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.563672][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.568688][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.573777][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.581738][ T24] usb 7-1: config 0 descriptor?? [ 201.665407][T11163] overlayfs: failed to clone upperpath [ 201.832857][ T5741] Bluetooth: hci0: command tx timeout [ 201.873351][T11182] tipc: Started in network mode [ 201.875052][T11182] tipc: Node identity 84e, cluster identity 4711 [ 201.877090][T11182] tipc: Node number set to 2126 [ 201.888039][T11182] syzkaller1: entered promiscuous mode [ 201.895320][T11182] syzkaller1: entered allmulticast mode [ 201.998607][ T24] hid_parser_main: 22 callbacks suppressed [ 201.998625][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 202.006545][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 202.012397][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x1 [ 202.014829][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 202.017199][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 202.020101][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 202.022912][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 202.025322][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 202.027623][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 202.029967][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 202.065925][ T24] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 202.095967][T11188] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 202.099905][T11188] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 202.103304][T11188] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 202.105769][T11188] UDF-fs: Scanning with blocksize 512 failed [ 202.112166][T11188] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 202.115307][T11188] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 202.118327][T11188] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 202.121611][T11188] UDF-fs: Scanning with blocksize 1024 failed [ 202.124107][T11188] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 202.127080][T11188] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 202.135069][T11188] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 202.145584][T11188] UDF-fs: Scanning with blocksize 2048 failed [ 202.150006][T11188] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 202.154805][T11188] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 202.158811][T11188] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 202.161312][T11188] UDF-fs: Scanning with blocksize 4096 failed [ 202.163287][T11188] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 202.224029][T11193] new mount options do not match the existing superblock, will be ignored [ 202.268148][ T5846] usb 7-1: USB disconnect, device number 12 [ 202.271940][T11195] netlink: 'syz.4.1391': attribute type 10 has an invalid length. [ 202.274538][T11195] __nla_validate_parse: 7 callbacks suppressed [ 202.274548][T11195] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1391'. [ 202.301009][T11195] team0: Port device geneve1 added [ 202.303263][ T8482] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.309327][ T8482] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.317483][ T8482] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.327804][ T8488] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.371488][T11190] netlink: 'syz.6.1388': attribute type 1 has an invalid length. [ 202.579254][T11209] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.1396'. [ 202.585906][T11209] netlink: ct family unspecified [ 202.891750][T11229] fuse: Bad value for 'user_id' [ 202.893930][T11229] fuse: Bad value for 'user_id' [ 203.006030][T11231] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 203.083475][T11233] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 203.224345][T11241] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1405'. [ 203.359102][T11256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57112 sclass=netlink_route_socket pid=11256 comm=syz.2.1410 [ 203.390552][T11254] tmpfs: Unknown parameter 'usrquotae' [ 203.515569][T11264] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1414'. [ 203.519652][T11265] syzkaller0: entered promiscuous mode [ 203.519779][T11264] tmpfs: Bad value for 'mpol' [ 203.526556][T11265] syzkaller0: entered allmulticast mode [ 203.535693][T11264] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1414'. [ 203.552803][ T8482] Bluetooth: hci4: Frame reassembly failed (-84) [ 203.719321][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 203.723248][T11273] syz_tun: entered promiscuous mode [ 203.728094][T11273] syz_tun: refused to change device tx_queue_len [ 203.853900][T11276] loop5: detected capacity change from 0 to 7 [ 203.860481][ T9957] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 203.910532][ T5745] Bluetooth: hci0: command tx timeout [ 204.021030][ T9957] usb 11-1: Using ep0 maxpacket: 32 [ 204.025236][ T9957] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 204.028917][ T9957] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 204.032700][ T9957] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.036930][ T9957] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 204.040917][ T9957] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 204.045083][ T9957] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 204.050092][ T9957] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 204.053860][ T9957] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.058228][ T9957] usb 11-1: config 0 descriptor?? [ 204.323685][T11288] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 204.379959][T11289] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1420'. [ 204.911618][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 204.911632][ T40] audit: type=1400 audit(2000000089.009:1877): avc: denied { getopt } for pid=11268 comm="syz.6.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 205.593597][ T5741] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 205.990951][ T5741] Bluetooth: hci0: command tx timeout [ 206.236870][ T40] audit: type=1400 audit(2000000090.329:1878): avc: denied { setattr } for pid=11294 comm="syz.2.1421" name="NETLINK" dev="sockfs" ino=46687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 206.266624][ T40] audit: type=1400 audit(2000000090.359:1879): avc: denied { mount } for pid=11296 comm="syz.2.1422" name="/" dev="pstore" ino=2801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 206.274585][ T40] audit: type=1400 audit(2000000090.359:1880): avc: denied { mounton } for pid=11296 comm="syz.2.1422" path="/syzcgroup/unified/syz2" dev="pstore" ino=2801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 206.597752][ T6138] usb 11-1: USB disconnect, device number 2 [ 206.721811][T11273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.779599][T11319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.804381][T11323] netlink: 'syz.1.1428': attribute type 10 has an invalid length. [ 206.807060][T11323] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1428'. [ 206.820622][ T40] audit: type=1400 audit(2000000090.909:1881): avc: denied { map } for pid=11325 comm="syz.4.1431" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 206.838978][ T40] audit: type=1400 audit(2000000090.919:1882): avc: denied { wake_alarm } for pid=11325 comm="syz.4.1431" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 206.895037][T11332] ip6gre2: entered allmulticast mode [ 206.897805][T11332] team0: Device ip6gre2 is of different type [ 206.910929][T11338] netlink: 'syz.1.1435': attribute type 5 has an invalid length. [ 206.914410][T11338] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1435'. [ 206.927334][T11338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.929746][T11338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.934018][T11338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.937368][T11338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.049879][ T40] audit: type=1400 audit(2000000091.139:1883): avc: denied { write } for pid=11348 comm="syz.2.1437" path="socket:[45024]" dev="sockfs" ino=45024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 207.109512][ T40] audit: type=1400 audit(2000000091.199:1884): avc: denied { ioctl } for pid=11355 comm="syz.4.1440" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 207.159418][ T40] audit: type=1400 audit(2000000091.249:1885): avc: denied { write } for pid=11359 comm="syz.4.1442" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 207.362611][ T40] audit: type=1400 audit(2000000091.459:1886): avc: denied { open } for pid=11370 comm="syz.4.1445" path="/dev/ptyqc" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 207.616993][T11377] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 207.619392][T11377] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.635494][T11377] vhci_hcd vhci_hcd.0: Device attached [ 207.644408][T11377] 9pnet_fd: Insufficient options for proto=fd [ 207.653133][T11378] vhci_hcd: connection closed [ 207.653555][ T8479] vhci_hcd vhci_hcd.4: stop threads [ 207.658170][ T8479] vhci_hcd vhci_hcd.4: release socket [ 207.663317][ T8479] vhci_hcd vhci_hcd.4: disconnect device [ 207.988787][T11405] syzkaller0: entered promiscuous mode [ 207.991021][T11405] syzkaller0: entered allmulticast mode [ 208.013222][T11416] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1459'. [ 208.017039][T11416] syzkaller0: entered promiscuous mode [ 208.018795][T11416] syzkaller0: entered allmulticast mode [ 208.024035][T11416] tcf_pedit_act: 7 callbacks suppressed [ 208.024044][T11416] tc action pedit offset must be on 32 bit boundaries [ 208.030878][T11416] Cannot find del_set index 4 as target [ 208.043293][T11416] dlm: no locking on control device [ 208.070567][ T5741] Bluetooth: hci0: command tx timeout [ 208.686880][T11461] vim2m vim2m.0: vidioc_s_fmt queue busy [ 208.691649][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1473'. [ 208.694426][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1473'. [ 208.707507][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1473'. [ 208.709293][T11464] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 208.710243][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1473'. [ 208.721058][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1473'. [ 208.724921][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1473'. [ 208.758308][T11467] netlink: 'syz.1.1475': attribute type 1 has an invalid length. [ 208.764025][T11467] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 208.850857][T11464] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1474'. [ 209.033377][T11484] /dev/sg0: Can't lookup blockdev [ 209.183005][T11494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1481'. [ 209.416213][T11501] netlink: 'syz.2.1483': attribute type 1 has an invalid length. [ 209.452914][T11501] 8021q: adding VLAN 0 to HW filter on device bond6 [ 209.526601][T11501] bond6: (slave veth7): Enslaving as an active interface with a down link [ 209.535633][T11513] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 209.537977][T11513] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 209.563997][T11510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1488'. [ 209.581025][T11501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8225 sclass=netlink_route_socket pid=11501 comm=syz.2.1483 [ 209.941304][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 209.941359][ T40] audit: type=1400 audit(2000000094.039:1902): avc: denied { create } for pid=11522 comm="syz.4.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 209.959294][ T40] audit: type=1400 audit(2000000094.049:1903): avc: denied { sys_admin } for pid=11522 comm="syz.4.1490" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 210.195487][T11543] netlink: 'syz.2.1495': attribute type 1 has an invalid length. [ 210.204470][T11543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.268920][ T40] audit: type=1400 audit(2000000094.359:1904): avc: denied { connect } for pid=11549 comm="syz.2.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.279254][ T40] audit: type=1400 audit(2000000094.369:1905): avc: denied { bind } for pid=11549 comm="syz.2.1499" laddr=fe80::b lport=34035 faddr=::1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.288746][ T40] audit: type=1400 audit(2000000094.369:1906): avc: denied { name_bind } for pid=11549 comm="syz.2.1499" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 210.297310][ T40] audit: type=1400 audit(2000000094.369:1907): avc: denied { node_bind } for pid=11549 comm="syz.2.1499" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 210.373230][T11556] geneve1: entered allmulticast mode [ 210.563816][ T40] audit: type=1400 audit(2000000094.649:1908): avc: denied { connect } for pid=11576 comm="syz.1.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 210.570044][T11575] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 210.574578][ T40] audit: type=1400 audit(2000000094.649:1909): avc: denied { bind } for pid=11576 comm="syz.1.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 210.637576][ T116] tipc: Subscription rejected, illegal request [ 211.207257][ T40] audit: type=1400 audit(2000000095.299:1910): avc: denied { setopt } for pid=11600 comm="syz.6.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 211.233869][T11601] /dev/sr0: Can't open blockdev [ 211.430623][ T5827] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 211.523462][ T40] audit: type=1400 audit(2000000095.619:1911): avc: denied { lock } for pid=11615 comm="syz.4.1516" path="socket:[46952]" dev="sockfs" ino=46952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 211.599801][ T5827] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 211.603861][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.607222][ T5827] usb 7-1: Product: syz [ 211.608976][ T5827] usb 7-1: Manufacturer: syz [ 211.611246][ T5827] usb 7-1: SerialNumber: syz [ 211.738528][T11621] CIFS: VFS: UNC: missing share name [ 211.740979][T11621] CIFS: VFS: Malformed UNC in devname [ 211.778475][T11626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=11626 comm=syz.1.1519 [ 211.938313][ T5827] rtl8150 7-1:1.0: couldn't reset the device [ 211.940994][ T5827] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 211.954030][ T5827] usb 7-1: USB disconnect, device number 13 [ 213.211894][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c57f000: rx timeout, send abort [ 213.219654][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802c57f000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 228.354343][ T8476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.357783][ T8476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.360984][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 228.360996][ T40] audit: type=1400 audit(2000000112.449:1922): avc: denied { execute } for pid=11651 comm="syz.6.1527" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=48813 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 228.385227][ T40] audit: type=1400 audit(2000000112.479:1923): avc: denied { write } for pid=11651 comm="syz.6.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 228.386030][T11654] program syz.6.1527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.412382][T11662] __nla_validate_parse: 4 callbacks suppressed [ 228.412402][T11662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1524'. [ 228.446631][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1525'. [ 228.516655][ T40] audit: type=1400 audit(2000000112.609:1924): avc: denied { append } for pid=11679 comm="syz.6.1532" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 228.526577][T11680] ªªªªªª: renamed from vlan0 (while UP) [ 228.539146][ T40] audit: type=1400 audit(2000000112.629:1925): avc: denied { ioctl } for pid=11679 comm="syz.6.1532" path="socket:[50203]" dev="sockfs" ino=50203 ioctlcmd=0x89f4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.554599][T11684] [ 228.555416][T11684] ====================================================== [ 228.557657][T11684] WARNING: possible circular locking dependency detected [ 228.557666][T11684] syzkaller #0 Tainted: G L [ 228.557672][T11684] ------------------------------------------------------ [ 228.557676][T11684] syz.4.1534/11684 is trying to acquire lock: [ 228.557683][T11684] ffffffff8e9b1b80 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x4b/0x6f0 [ 228.569094][T11684] [ 228.569094][T11684] but task is already holding lock: [ 228.571364][T11684] ffff8880661c45e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_sendmsg+0x15ba/0x2210 [ 228.574347][T11684] [ 228.574347][T11684] which lock already depends on the new lock. [ 228.574347][T11684] [ 228.577553][T11684] [ 228.577553][T11684] the existing dependency chain (in reverse order) is: [ 228.580307][T11684] [ 228.580307][T11684] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 228.582754][T11684] lock_sock_nested+0x41/0xf0 [ 228.584417][T11684] __inet6_bind+0x80f/0x1b40 [ 228.586039][T11684] inet6_bind_sk+0xb8/0xf0 [ 228.587580][T11684] mptcp_bind+0x135/0x1e0 [ 228.589147][T11684] __sys_bind+0x1a9/0x260 [ 228.590691][T11684] __x64_sys_bind+0x72/0xb0 [ 228.592283][T11684] do_syscall_64+0x10b/0xf80 [ 228.593906][T11684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.595915][T11684] [ 228.595915][T11684] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 228.598339][T11684] lock_sock_nested+0x41/0xf0 [ 228.599980][T11684] inet_shutdown+0x67/0x410 [ 228.601509][T11684] nbd_mark_nsock_dead+0xae/0x5c0 [ 228.603252][T11684] recv_work+0x5fb/0x8c0 [ 228.604778][T11684] process_one_work+0xa0e/0x1980 [ 228.606506][T11684] worker_thread+0x5ef/0xe50 [ 228.608098][T11684] kthread+0x370/0x450 [ 228.609559][T11684] ret_from_fork+0x72b/0xd50 [ 228.611125][T11684] ret_from_fork_asm+0x1a/0x30 [ 228.612792][T11684] [ 228.612792][T11684] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 228.615179][T11684] __mutex_lock+0x1a4/0x1b10 [ 228.616812][T11684] nbd_queue_rq+0x428/0x1080 [ 228.618408][T11684] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 228.620206][T11684] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 228.622328][T11684] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 228.624325][T11684] blk_mq_run_hw_queue+0x23c/0x670 [ 228.626100][T11684] blk_mq_dispatch_list+0x51d/0x1360 [ 228.627912][T11684] blk_mq_flush_plug_list+0x130/0x600 [ 228.629782][T11684] __blk_flush_plug+0x2c4/0x4b0 [ 228.631456][T11684] __submit_bio+0x584/0x6c0 [ 228.633023][T11684] submit_bio_noacct_nocheck+0x543/0xbf0 [ 228.634934][T11684] submit_bio_noacct+0xd18/0x2000 [ 228.636887][T11684] submit_bh_wbc+0x681/0x890 [ 228.638538][T11684] block_read_full_folio+0x264/0x8e0 [ 228.640293][T11684] filemap_read_folio+0xfc/0x3b0 [ 228.642025][T11684] do_read_cache_folio+0x2d7/0x6b0 [ 228.643777][T11684] read_part_sector+0xd1/0x370 [ 228.645441][T11684] adfspart_check_ICS+0x91/0x7d0 [ 228.647133][T11684] bdev_disk_changed+0x7a3/0x1250 [ 228.648861][T11684] blkdev_get_whole+0x187/0x290 [ 228.650536][T11684] bdev_open+0x2c7/0xe40 [ 228.652018][T11684] blkdev_open+0x34e/0x4f0 [ 228.653555][T11684] do_dentry_open+0x6d8/0x1660 [ 228.655217][T11684] vfs_open+0x82/0x3f0 [ 228.656678][T11684] path_openat+0x208c/0x31a0 [ 228.658267][T11684] do_file_open+0x20e/0x430 [ 228.659851][T11684] do_sys_openat2+0x10d/0x1e0 [ 228.661482][T11684] __x64_sys_openat+0x12d/0x210 [ 228.663144][T11684] do_syscall_64+0x10b/0xf80 [ 228.664806][T11684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.666802][T11684] [ 228.666802][T11684] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 228.669027][T11684] __mutex_lock+0x1a4/0x1b10 [ 228.670635][T11684] nbd_queue_rq+0xba/0x1080 [ 228.672190][T11684] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 228.674090][T11684] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 228.676211][T11684] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 228.678222][T11684] blk_mq_run_hw_queue+0x23c/0x670 [ 228.679965][T11684] blk_mq_dispatch_list+0x51d/0x1360 [ 228.681764][T11684] blk_mq_flush_plug_list+0x130/0x600 [ 228.683582][T11684] __blk_flush_plug+0x2c4/0x4b0 [ 228.685220][T11684] __submit_bio+0x584/0x6c0 [ 228.686774][T11684] submit_bio_noacct_nocheck+0x543/0xbf0 [ 228.688673][T11684] submit_bio_noacct+0xd18/0x2000 [ 228.690383][T11684] submit_bh_wbc+0x681/0x890 [ 228.691959][T11684] block_read_full_folio+0x264/0x8e0 [ 228.693771][T11684] filemap_read_folio+0xfc/0x3b0 [ 228.695466][T11684] do_read_cache_folio+0x2d7/0x6b0 [ 228.697193][T11684] read_part_sector+0xd1/0x370 [ 228.698823][T11684] adfspart_check_ICS+0x91/0x7d0 [ 228.700536][T11684] bdev_disk_changed+0x7a3/0x1250 [ 228.702251][T11684] blkdev_get_whole+0x187/0x290 [ 228.703947][T11684] bdev_open+0x2c7/0xe40 [ 228.705448][T11684] blkdev_open+0x34e/0x4f0 [ 228.706984][T11684] do_dentry_open+0x6d8/0x1660 [ 228.708629][T11684] vfs_open+0x82/0x3f0 [ 228.710088][T11684] path_openat+0x208c/0x31a0 [ 228.711678][T11684] do_file_open+0x20e/0x430 [ 228.713244][T11684] do_sys_openat2+0x10d/0x1e0 [ 228.714885][T11684] __x64_sys_openat+0x12d/0x210 [ 228.716575][T11684] do_syscall_64+0x10b/0xf80 [ 228.718169][T11684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.720160][T11684] [ 228.720160][T11684] -> #3 (set->srcu){.+.+}-{0:0}: [ 228.722346][T11684] __synchronize_srcu+0xa2/0x300 [ 228.724067][T11684] blk_mq_quiesce_queue+0x149/0x1c0 [ 228.725842][T11684] elevator_switch+0x17b/0x7e0 [ 228.727485][T11684] elevator_change+0x352/0x530 [ 228.729137][T11684] elevator_set_default+0x29e/0x360 [ 228.730916][T11684] blk_register_queue+0x48e/0x630 [ 228.732612][T11684] __add_disk+0x73f/0xe40 [ 228.734124][T11684] add_disk_fwnode+0x118/0x5c0 [ 228.735753][T11684] nbd_dev_add+0x77a/0xb10 [ 228.737239][T11684] nbd_init+0x291/0x2b0 [ 228.738755][T11684] do_one_initcall+0x121/0x750 [ 228.740417][T11684] kernel_init_freeable+0x6ea/0x7b0 [ 228.742177][T11684] kernel_init+0x1f/0x1e0 [ 228.743717][T11684] ret_from_fork+0x72b/0xd50 [ 228.745277][T11684] ret_from_fork_asm+0x1a/0x30 [ 228.746920][T11684] [ 228.746920][T11684] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 228.749341][T11684] __mutex_lock+0x1a4/0x1b10 [ 228.750937][T11684] elevator_change+0x1bc/0x530 [ 228.752586][T11684] elevator_set_none+0x92/0xf0 [ 228.754245][T11684] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 228.756203][T11684] nbd_start_device+0x1a6/0xbd0 [ 228.757870][T11684] nbd_genl_connect+0xff2/0x1a40 [ 228.759566][T11684] genl_family_rcv_msg_doit+0x214/0x300 [ 228.761452][T11684] genl_rcv_msg+0x560/0x800 [ 228.763014][T11684] netlink_rcv_skb+0x159/0x420 [ 228.764657][T11684] genl_rcv+0x28/0x40 [ 228.766074][T11684] netlink_unicast+0x585/0x850 [ 228.767710][T11684] netlink_sendmsg+0x8b0/0xda0 [ 228.769364][T11684] ____sys_sendmsg+0x9e1/0xb70 [ 228.771003][T11684] ___sys_sendmsg+0x190/0x1e0 [ 228.772624][T11684] __sys_sendmsg+0x170/0x220 [ 228.774228][T11684] do_syscall_64+0x10b/0xf80 [ 228.775840][T11684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.777820][T11684] [ 228.777820][T11684] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 228.780485][T11684] blk_alloc_queue+0x610/0x790 [ 228.782132][T11684] blk_mq_alloc_queue+0x174/0x290 [ 228.783879][T11684] __blk_mq_alloc_disk+0x29/0x120 [ 228.785601][T11684] nbd_dev_add+0x492/0xb10 [ 228.787107][T11684] nbd_init+0x291/0x2b0 [ 228.788561][T11684] do_one_initcall+0x121/0x750 [ 228.790178][T11684] kernel_init_freeable+0x6ea/0x7b0 [ 228.791907][T11684] kernel_init+0x1f/0x1e0 [ 228.793398][T11684] ret_from_fork+0x72b/0xd50 [ 228.795015][T11684] ret_from_fork_asm+0x1a/0x30 [ 228.796783][T11684] [ 228.796783][T11684] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 228.799083][T11684] __lock_acquire+0x14b8/0x2630 [ 228.800790][T11684] lock_acquire+0x1b1/0x370 [ 228.802364][T11684] fs_reclaim_acquire+0xc4/0x100 [ 228.804109][T11684] __kmalloc_cache_noprof+0x4b/0x6f0 [ 228.805932][T11684] tcp_sendmsg_fastopen+0x24d/0x750 [ 228.807710][T11684] mptcp_sendmsg+0x1641/0x2210 [ 228.809396][T11684] inet6_sendmsg+0x11c/0x140 [ 228.810984][T11684] ____sys_sendmsg+0x704/0xb70 [ 228.812641][T11684] ___sys_sendmsg+0x190/0x1e0 [ 228.814262][T11684] __sys_sendmsg+0x170/0x220 [ 228.815863][T11684] do_syscall_64+0x10b/0xf80 [ 228.817469][T11684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.819462][T11684] [ 228.819462][T11684] other info that might help us debug this: [ 228.819462][T11684] [ 228.822593][T11684] Chain exists of: [ 228.822593][T11684] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 228.822593][T11684] [ 228.826529][T11684] Possible unsafe locking scenario: [ 228.826529][T11684] [ 228.828825][T11684] CPU0 CPU1 [ 228.830493][T11684] ---- ---- [ 228.832116][T11684] lock(k-sk_lock-AF_INET6); [ 228.833576][T11684] lock(sk_lock-AF_INET6); [ 228.835756][T11684] lock(k-sk_lock-AF_INET6); [ 228.837981][T11684] lock(fs_reclaim); [ 228.839232][T11684] [ 228.839232][T11684] *** DEADLOCK *** [ 228.839232][T11684] [ 228.841735][T11684] 2 locks held by syz.4.1534/11684: [ 228.843333][T11684] #0: ffff888026824220 (sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_sendmsg+0x13b/0x2210 [ 228.846403][T11684] #1: ffff8880661c45e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_sendmsg+0x15ba/0x2210 [ 228.849626][T11684] [ 228.849626][T11684] stack backtrace: [ 228.851744][T11684] CPU: 3 UID: 0 PID: 11684 Comm: syz.4.1534 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.851761][T11684] Tainted: [L]=SOFTLOCKUP [ 228.851765][T11684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.851771][T11684] Call Trace: [ 228.851776][T11684] [ 228.851781][T11684] dump_stack_lvl+0x100/0x190 [ 228.851795][T11684] print_circular_bug.cold+0x178/0x1c7 [ 228.851812][T11684] check_noncircular+0x146/0x160 [ 228.851827][T11684] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 228.851843][T11684] __lock_acquire+0x14b8/0x2630 [ 228.851858][T11684] ? __pfx_evict+0x10/0x10 [ 228.851875][T11684] lock_acquire+0x1b1/0x370 [ 228.851888][T11684] ? __kmalloc_cache_noprof+0x4b/0x6f0 [ 228.851904][T11684] fs_reclaim_acquire+0xc4/0x100 [ 228.851916][T11684] ? __kmalloc_cache_noprof+0x4b/0x6f0 [ 228.851930][T11684] __kmalloc_cache_noprof+0x4b/0x6f0 [ 228.851944][T11684] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 228.851955][T11684] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 228.851971][T11684] tcp_sendmsg_fastopen+0x24d/0x750 [ 228.851983][T11684] mptcp_sendmsg+0x1641/0x2210 [ 228.851998][T11684] ? sock_has_perm+0x25a/0x2f0 [ 228.852011][T11684] ? __pfx_sock_has_perm+0x10/0x10 [ 228.852043][T11684] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 228.852059][T11684] ? import_ubuf+0x1b6/0x220 [ 228.852073][T11684] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 228.852088][T11684] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 228.852101][T11684] inet6_sendmsg+0x11c/0x140 [ 228.852115][T11684] ____sys_sendmsg+0x704/0xb70 [ 228.852129][T11684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.852143][T11684] ? __pfx_futex_wake_mark+0x10/0x10 [ 228.852155][T11684] ___sys_sendmsg+0x190/0x1e0 [ 228.852169][T11684] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.852189][T11684] __sys_sendmsg+0x170/0x220 [ 228.852199][T11684] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.852209][T11684] ? __x64_sys_futex+0x34f/0x4d0 [ 228.852228][T11684] ? rcu_is_watching+0x12/0xc0 [ 228.852244][T11684] do_syscall_64+0x10b/0xf80 [ 228.852258][T11684] ? clear_bhb_loop+0x40/0x90 [ 228.852270][T11684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.852280][T11684] RIP: 0033:0x7fd209d9ce59 [ 228.852289][T11684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.852301][T11684] RSP: 002b:00007fd20ac31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.852311][T11684] RAX: ffffffffffffffda RBX: 00007fd20a015fa0 RCX: 00007fd209d9ce59 [ 228.852321][T11684] RDX: 0000000020008811 RSI: 0000200000000a80 RDI: 0000000000000005 [ 228.852327][T11684] RBP: 00007fd209e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 228.852333][T11684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.852358][T11684] R13: 00007fd20a016038 R14: 00007fd20a015fa0 R15: 00007ffd638de998 [ 228.852375][T11684]