last executing test programs: 1m41.280664308s ago: executing program 0 (id=1009): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x0, 0x0, @tick=0xf64b, {0x0, 0xb8}, {0x4, 0x6}, @control={0x2, 0x7f, 0x2}}, {0x0, 0x3, 0x0, 0x4, @time={0x83, 0xa77f}, {0x2, 0x4}, {0x0, 0x2}, @control={0x8, 0x4, 0x4c8}}], 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff84, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r2], 0x60}, 0x1, 0x0, 0x0, 0x4008015}, 0x40000) 1m41.213848457s ago: executing program 0 (id=1011): bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, 0x0) sendto$inet6(r1, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1e) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x80000, 0x8) read$char_usb(r5, &(0x7f0000000040)=""/169, 0xa9) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000380)="baf80c66b8d6f7e28466efbafc0cb0dcee0f22d6b8df008ec0660f38801366660f1a259a0a988e0066b8007000000f23d80f21f86635400000d00f23f80fc76e008fc9c002b20000822dfb", 0x4b}], 0x1, 0x29, &(0x7f0000000400), 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2f, &(0x7f0000000040)=0x79b, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r7, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0xae}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040010) 1m41.210702029s ago: executing program 0 (id=1014): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1m41.161279425s ago: executing program 0 (id=1016): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003"], 0x10e0}}, 0x0) 1m41.104258632s ago: executing program 0 (id=1019): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000080)=0x1, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x6c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3], 0x4c}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x8, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local, {[@end]}}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9, 0x0, 0x7}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x40000, 0x120) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)=""/198, 0xc6) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe}}) write(r0, &(0x7f0000000000)="240000001a005f021483c6c5cd9008e696234eac188a8cf9f407000000001f5800000000", 0x24) 1m41.103230719s ago: executing program 0 (id=1021): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000000000030000000004"], 0x0, 0x4a}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000000000030000000004"], 0x0, 0x4a}, 0x28) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) close_range(r1, r2, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000380)={@private1}, &(0x7f00000000c0)=0x14) (async) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000380)={@private1, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@getchain={0x5c, 0x66, 0x404, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xfff1}, {0xa, 0xe}, {0xc, 0xffe0}}, [{0x8, 0xb, 0x7fff}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xe}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40440d4}, 0x1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xfffffffc}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xfffffffc}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000280)) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000da000000000000000000000089750a000020000000000000000004000880"], 0x20}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) 1m25.768828027s ago: executing program 32 (id=1021): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000000000030000000004"], 0x0, 0x4a}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000000000030000000004"], 0x0, 0x4a}, 0x28) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) close_range(r1, r2, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000380)={@private1}, &(0x7f00000000c0)=0x14) (async) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000380)={@private1, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@getchain={0x5c, 0x66, 0x404, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xfff1}, {0xa, 0xe}, {0xc, 0xffe0}}, [{0x8, 0xb, 0x7fff}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xe}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40440d4}, 0x1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xfffffffc}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xfffffffc}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000280)) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000da000000000000000000000089750a000020000000000000000004000880"], 0x20}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) 1m21.501266488s ago: executing program 2 (id=1289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000000280)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @remote, 0x99}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@flowinfo={{0x14, 0x29, 0xb, 0xc0c}}, @flowinfo={{0x14, 0x29, 0xb, 0xe6}}], 0x30}}], 0x1, 0x20008000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m21.253363173s ago: executing program 2 (id=1297): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x800, 0x25}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x5845) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000140)={0x6, 'ip6tnl0\x00', {0x6}, 0x5}) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000180)=""/97) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000300)={&(0x7f0000000280)=[r2, r3], &(0x7f00000002c0)=[0x40, 0x7fff], 0x2, 0x1}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2f, 0xfd, 0xf, 0x0, 0x10, @private2, @private2, 0x8000, 0x1, 0x5, 0x6}}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000480)={0x638, r4, 0x20, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x35, 0x3, "538270771e1ae4b9eed789cbcb8aa07e9224435f01f8911762e76f4a300c9bc25de35154d5e0e1a976523aec42aa61f679"}, @ETHTOOL_A_WOL_MODES={0x2a4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}, @ETHTOOL_A_BITSET_BITS={0x1b4, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xc8%].}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '[-](\xa4\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%^#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\xbb\\^)#:%,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.\\)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\\x8c^-!/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x457}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa3ac}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, './\'}@-[,/${{\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{]-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_VALUE={0x73, 0x4, "1183576d8a7026019d24643c4ff1c136dd62aa1c5e86bc5039ed37a6cd4f97df2864d4a4962033e0f643114dd724fcd3fc771249fd61621c755fa48dfad135d96ffddcaa45bca520063c600bc2bedecf7114d413d08b801a84b173d0006ea0f6cd303fb597cfb5d7d61bdc280e669a"}, @ETHTOOL_A_BITSET_MASK={0x25, 0x5, "de4f6edd236153e1c68e11e193be85a03228cbc876f38cff77ad3c55caa6350371"}, @ETHTOOL_A_BITSET_VALUE={0x46, 0x4, "18859998be98eb24bada4f83fda6d9499b3aea5746b9e6e06412b95f3e5683b8dac0000e5e846c48e23f6d5360728d696de4968915c15b2ae290aebcb4a4a3d45c35"}]}, @ETHTOOL_A_WOL_MODES={0x2c0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_BITS={0x134, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$\xb7#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8721}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x8f, 0x5, "2ebe2832a4d41d76e2f50ab13eeced8e8409ef85bd6212037f226ef12da9cdfa9cf5806726cca25f802bd2a66e8a9f6e08c0551e586a3f336920de161fb589ea306a91cef3c8f590462149597dcaa187a1a485e62786f7518b329c7bdea6e1c3b366f83ffe39e86d29bd73f59c34b46bbfc4a820bfccfde39f943f94651b9eda08cc9e7ecaa5198cb0d055"}, @ETHTOOL_A_BITSET_VALUE={0xe2, 0x4, "66ed4e4bfa5e329bb90a06eb506e7eff7f5b31bf3fb348d8b627d52cbea7c6da94e7243c8e2dcc8f07bfb6516e1284798ea70ef81d347641558132350418f65dce1dfcf8c2b2ac4b0b9fd3743b2bc3c3e73795b66317407770831b667b7f3adf207caf14e47891fdb716781d83e85459d4bc287fd2226eadcd07ff51a33a52bd038e08b537b61a543f47da3dc51d1642f55386438e3df037b55295ed5eda27995d4ce05908482f25345e37db5572319b6763fff8a3d2864f20ddc440167ea02b177280f3e0fe0a474ef909d582bb8d09eaf66eb76ee8299ba7b0bf875dc5"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6977}]}, @ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x638}, 0x1, 0x0, 0x0, 0x1}, 0xca6035686fa8e325) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000b40)=@int=0xe96, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000b80)={'vcan0\x00'}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000bc0), 0x90500) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000c00)=0x4, &(0x7f0000000c40)=0x4) mount(&(0x7f0000000c80)=@nullb, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)='ntfs3\x00', 0x100000, &(0x7f0000000d40)='syztnl0\x00') r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x1, &(0x7f0000000d80), &(0x7f0000000e00)=0x80) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), r6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x3000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80) write(r1, &(0x7f0000000f80)="a5c51af5cbcf5893be4bcfb322df22f7d9f5a5cc8781b5a3091ee0a0ebca6dd3600ebc9c8c3d32910eb057ea8906f723ee7f05e9903c26b22741b8f1aaefc804e45eb0ed5bfe4f0b2cac20472c3dfd12d85335ea7fb2420fbaa81c9ea0853c437cf1be52753f17bd5f9e6003a52cfa6b24af3d86929cacc5b54fbf7e40a7add956a35d091cef76d0ec77311c3affa7d73834b921b58e7f4c4555d97ce7088744b68a62289ffa4c7c1bd21f", 0xab) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000001140)={0x2, 0x80, 0xdb, &(0x7f0000001040)=""/219}) preadv(r1, &(0x7f0000001200)=[{&(0x7f0000001180)=""/2, 0x2}, {&(0x7f00000011c0)=""/23, 0x17}], 0x2, 0x4, 0xfffffff2) syz_open_dev$evdev(&(0x7f0000001240), 0x1, 0x200) getsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000001280), &(0x7f00000012c0)=0x4) sendmsg$IPSET_CMD_TEST(r6, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, 0xb, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4001810) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000001600)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000015c0)={&(0x7f0000001440)={0x178, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe516}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_NODE={0x114, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xe0, 0x3, "aa5d1ddcedb9578add9113e4fbd254505ba8c3fde4e24562cda1c3bdec7656d025eecd62e4a42563f07ada1e33ecb2e56154e7e545454eca36000578232408f3e4653b6d7a00af76fbeb2df242ec0078fe3c57c7470e343128e7ceb60f272a3ab8c99f1e8ccecfcb65bea6ff107b120882eaa366c175f3f5f9102cb49c7f348bf4b36edde943f56ab1f956dccfce9a9ff31e6a50ef2d247539cc81f2ae86076077634bffc70d7a9c385a25d220cb7ab51e394f6f05b49fa23aa83500d67e81698fa54b6b0e1ead37a353a56f7c2d79d334f66d51429a0a4dbaacdb17"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x13, 0x3, "93874ed18a6409c2e69c8da588cb76"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x41}, 0x1) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000001640)={'broute\x00', 0x0, 0x0, 0x0, [0x200, 0x7, 0x40000000000, 0x2, 0xcf, 0x1000]}, &(0x7f00000016c0)=0x78) sendto(r1, &(0x7f0000001700)="53fe51", 0x3, 0xc0, &(0x7f0000001740)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80) socket$can_j1939(0x1d, 0x2, 0x7) 1m21.164692464s ago: executing program 2 (id=1301): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r4], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x20004004) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="34004080", @ANYRES16=r0, @ANYBLOB="010029bd7000000000008900000008000300", @ANYRES32=r5, @ANYBLOB="18001d801400008006000500b000000005000c0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x44, r7, 0x5, 0xfffffffd, 0x1fffc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0xccf, 0x7, 0x7, 0x4, 0x3ff, 0x9]}}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x808}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$netlink(0x10, 0x3, 0xc) setresuid(0x0, 0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) 1m21.082813758s ago: executing program 2 (id=1304): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setsig(r3, 0xa, 0x4b65) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r7) r8 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) r9 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r8) r10 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r9) r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r10) r12 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r11) add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, r12) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000340)={r9, 0x1000, 0xe7}, &(0x7f00000003c0)={'enc=', 'oaep', ' hash=', {'rmd320-generic\x00'}}, &(0x7f00000010c0)="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", &(0x7f0000000580)=""/231) sendmsg$netlink(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)={0x14, 0x24, 0xc8fe83ee7f0e7fd5, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1}, 0x4000) accept4(r5, 0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0xfffffffffffffcf9, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x1}, 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 1m21.014127448s ago: executing program 2 (id=1305): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x52e5}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0x10e0}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x303}, "bdd9ef13bc95e11b", "1840fc8f9fcc3b489899d9f7ff16006c54e766c09e259fb96bdc7eb02964e523", "ae5dc4ff", "b24f6d9803455209"}, 0x38) recvfrom$inet6(r7, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) splice(r7, 0x0, r0, 0x0, 0x10000008ebc, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0x9, @capture={0x1000, 0x1, {0x6, 0x9}, 0x767, 0x5}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x6c) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x40000, 0x120) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0\x00'}) 1m21.012922973s ago: executing program 2 (id=1307): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r2, @ANYBLOB="0500000000000000000001000000060006004e240000901008809005008024002000d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff050003000100000006d4e23d7500000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a0000001400020020010000000000000000000000000002050003000100000058000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030000000000060001000200000008000200e0000001050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r3, @ANYBLOB="240003"], 0x10e0}}, 0x0) 1m14.123567334s ago: executing program 3 (id=1425): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000020c0)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0xfdef) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4048aecb, &(0x7f0000001440)={{0x0, 0x0, 0x80, {0xffffffffffffffff, 0xd000, 0x1}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156fb4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e60ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d475bd5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95f3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641f9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b31cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33201f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49d2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a34313315836bb7291764b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2dbed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3ad34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4026be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33dff5ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26f1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e02000000be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c0851800c6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e400000f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) close_range(r0, 0xffffffffffffffff, 0x0) 1m13.931102801s ago: executing program 3 (id=1428): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x3) sendmmsg(r2, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) socket$netlink(0x10, 0x3, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0x4}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x10}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f00000000c0)={0x1, 0x4, 0x2, 0x68, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) 1m13.769880056s ago: executing program 3 (id=1431): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x300, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1m13.769586067s ago: executing program 3 (id=1432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x8a83, 0x8, 0xffffff00, 0x38000, 0x2, "1039db8d79bea18fa3015ae9ae6901313cf366"}) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1m13.71404416s ago: executing program 3 (id=1433): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x52e5}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0x10e0}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x303}, "bdd9ef13bc95e11b", "1840fc8f9fcc3b489899d9f7ff16006c54e766c09e259fb96bdc7eb02964e523", "ae5dc4ff", "b24f6d9803455209"}, 0x38) recvfrom$inet6(r7, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) splice(r7, 0x0, r0, 0x0, 0x10000008ebc, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0x9, @capture={0x1000, 0x1, {0x6, 0x9}, 0x767, 0x5}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x6c) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x40000, 0x120) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0\x00'}) 1m10.718044631s ago: executing program 3 (id=1458): syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac1414aa}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x13, 0x1, 0x200, &(0x7f0000000080)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730900000000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010420007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf6221ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebeab745bcd4697d75c9601fd333d3cd697963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de9880100df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b37000000000000000000000000000000f800"}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0x88, 0x0}, 0x8) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x8}, 0x18) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000980), 0x1, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f00000009c0), 0xf0040) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0xffffffffffffffff, 0x7, 0x18}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r1, {0x1, 0x7}}, './file0\x00'}) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000a80), 0x400002, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x5, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x1, 0x0, 0xb, 0x0, 0x3c, 0x1}, @call={0x85, 0x0, 0x0, 0x33}, @map_fd={0x18, 0x6}]}, &(0x7f0000000700)='GPL\x00', 0x10000, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x8, 0x2, 0x1ff}, 0x10, r2, r3, 0x3, &(0x7f0000000b00)=[r4, r5, 0x1, r6, r7, r8, r9, r10], &(0x7f0000000b40)=[{0x2, 0x4, 0xc, 0x5}, {0x1, 0x4, 0xb, 0x9}, {0x1, 0x3, 0x1, 0x1}], 0x10, 0x1}, 0x94) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="110089a4dd40ad80b5000052db000008000000001a5b293ee31e316012bcdfe4dec0bfc33a310c9874e349d5cb8d09cddbbef8c3b6ebd302f42c3633e831da4774ca39044e9d3666255028a64d82dffe4d1c44399c4c7da2c81e39ca05ec058c3ca0ee442376746a10883412b42c6e9b5ef85391517f9db95ef7f55e3cc54071592e02d1332afa4cb0304cab31f33f63a04e69c45e8dbecb5289091a50f6e7f3b39aee188ef6575da8b760cc2417fef053af0548ac8792dd24e5676e00d65ca6740082e986ef170bc37ff524b24052f0fbd12955c184ab13b66a81"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb0000090800014000000001080002"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="05000000010011", 0x7) r12 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r12, 0x4601, &(0x7f00000007c0)={0x1e0, 0x140, 0x2000, 0x240, 0x74fc, 0x7, 0x2, 0x0, {0x6, 0x8}, {0x6, 0x401, 0x1}, {0x800, 0x40000000, 0x1}, {0x7, 0x75d00000}, 0x3, 0x100, 0x5, 0x1, 0x0, 0xffffffff, 0x5, 0x9, 0xff, 0x6, 0x1, 0x4, 0x3, 0x3e, 0x2, 0x462be122f10b40b4}) r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0xbb, 0x2, 0xb8ea, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7820, 0x20, 0x8001, 0x43602840}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, r13, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8, 0x1, r14}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4014) 1m5.983240439s ago: executing program 33 (id=1307): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003"], 0x10e0}}, 0x0) 55.292972528s ago: executing program 34 (id=1458): syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac1414aa}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x13, 0x1, 0x200, &(0x7f0000000080)="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"}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0x88, 0x0}, 0x8) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x8}, 0x18) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000980), 0x1, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f00000009c0), 0xf0040) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0xffffffffffffffff, 0x7, 0x18}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r1, {0x1, 0x7}}, './file0\x00'}) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000a80), 0x400002, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x5, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x1, 0x0, 0xb, 0x0, 0x3c, 0x1}, @call={0x85, 0x0, 0x0, 0x33}, @map_fd={0x18, 0x6}]}, &(0x7f0000000700)='GPL\x00', 0x10000, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x8, 0x2, 0x1ff}, 0x10, r2, r3, 0x3, &(0x7f0000000b00)=[r4, r5, 0x1, r6, r7, r8, r9, r10], &(0x7f0000000b40)=[{0x2, 0x4, 0xc, 0x5}, {0x1, 0x4, 0xb, 0x9}, {0x1, 0x3, 0x1, 0x1}], 0x10, 0x1}, 0x94) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="110089a4dd40ad80b5000052db000008000000001a5b293ee31e316012bcdfe4dec0bfc33a310c9874e349d5cb8d09cddbbef8c3b6ebd302f42c3633e831da4774ca39044e9d3666255028a64d82dffe4d1c44399c4c7da2c81e39ca05ec058c3ca0ee442376746a10883412b42c6e9b5ef85391517f9db95ef7f55e3cc54071592e02d1332afa4cb0304cab31f33f63a04e69c45e8dbecb5289091a50f6e7f3b39aee188ef6575da8b760cc2417fef053af0548ac8792dd24e5676e00d65ca6740082e986ef170bc37ff524b24052f0fbd12955c184ab13b66a81"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb0000090800014000000001080002"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="05000000010011", 0x7) r12 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r12, 0x4601, &(0x7f00000007c0)={0x1e0, 0x140, 0x2000, 0x240, 0x74fc, 0x7, 0x2, 0x0, {0x6, 0x8}, {0x6, 0x401, 0x1}, {0x800, 0x40000000, 0x1}, {0x7, 0x75d00000}, 0x3, 0x100, 0x5, 0x1, 0x0, 0xffffffff, 0x5, 0x9, 0xff, 0x6, 0x1, 0x4, 0x3, 0x3e, 0x2, 0x462be122f10b40b4}) r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0xbb, 0x2, 0xb8ea, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7820, 0x20, 0x8001, 0x43602840}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, r13, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8, 0x1, r14}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4014) 47.322811362s ago: executing program 5 (id=1865): fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000200), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@assoc={0x18, 0x117, 0x4, 0x6b}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000001380)=""/5, 0x5}, {&(0x7f0000000780)=""/242, 0xf2}], 0x2}, 0x9}], 0x1, 0x2000, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r3, 0x260}], 0x1, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x814) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x109840, 0x2) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf259200000008000300", @ANYRES32=r5, @ANYBLOB="0a0006"], 0x38}, 0x1, 0x0, 0x0, 0x200048f0}, 0x48100) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010300000000000000000500"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) sendmsg$NL80211_CMD_TESTMODE(r6, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000026c0)={0x226c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5c}}}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x3b, 0x45, "7c39ba9f2779d6decd732f3cefe1a7bf18a9d3efeab05b27e3c1b52bd1f1a36d1dea4a74513b7333a21b9adf15a9aae0595e08b84daca9"}, @NL80211_ATTR_TESTDATA={0x6a, 0x45, "35380adb7a0ec4d4415dcaf524ffb28ecc911a2d40140e8bd2a7ba5c3868b755b9b8ab300be7fbc80bed4b384bfb7b5daddb1e1e745b78ec8c6d589e5ac5870fd70e1f0e314cbe56065ce26a03eabfa0b5ba67f78e284f2edf89d78b55f47e3b8dd6aa3d0898"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x75, 0x45, "f7a1873393cdc436c0fa2cf9febcf8548b8e4893d8782e95659271ee812f56192397825d98ee27263b5acf06352605bda721d5fbdba33b2ab2013d504b8e36d57d45c1fbe9dcf2eed2715f67baece09a3fa29c4ae5804a8419134a312feec579be199f3f58d4150bf1bcd4c386549f75e8"}, @NL80211_ATTR_TESTDATA={0x6e, 0x45, "1b04e25800762728472d3945515d2231d90a1fa097f95d95dbe1f44f7e0379b773cd1578e3f36877772ce57fc14c1b17d20749a08e19f58900451d1c640b85ea3e2923495a7f08264f28988a4838386e782efed7ac6e77a442123a209ec8d873ab39fd2a3493cd227629"}, @NL80211_ATTR_TESTDATA={0x43, 0x45, "4f0f82b37e42ae6f87f4a5080fb0da91edf68c236ac610e825c4e187b1c40c28c0c077596faa5b81c17d7c3d83fdcde3858030bf1b4ffc25418a9150de2e93"}, @NL80211_ATTR_TESTDATA={0x6f, 0x45, "ecb1543c0c687edd375f617e2cda9f217e480721a2607d15070d79a41c5f86582b03060a3622f4d28d1c3bddf2b348bf2272084c14cb25033c2279474b0668be9b1bd90e21aae35e9787887f7ad1f68c578eb910ea2c07fd44127b04556f84f974bd179de68ecaea2b99d9"}]}, 0x226c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 46.612036412s ago: executing program 4 (id=1885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000f3, 0x0, 0x6}]}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@report={0xd8, 0x20, 0x300, 0x70bd26, 0x25dfdbfb, {0x27, {@in=@rand_addr=0x64010101, @in=@multicast1, 0x4e24, 0x0, 0x4e24, 0x5, 0x2, 0xa0}}, [@extra_flags={0x8, 0x18, 0x4}, @tmpl={0x84, 0x5, [{{@in=@local, 0x4d5, 0xff}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, 0x3500, 0x2, 0x3, 0x3, 0x48a20c8b, 0x800, 0x40}, {{@in6=@local, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x3505, 0x0, 0x3, 0x2, 0x4, 0x80000001, 0x80000000}]}]}, 0xd8}}, 0x24000058) ioperm(0x0, 0x7fff, 0x15f9) r5 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ptrace(0x10, r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000740)={0x0, 0x96}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0xa8, 0x10, 0x230, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10851, 0x600}, [@IFLA_NUM_TX_QUEUES={0x8}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}, @IFLA_PORT_SELF={0x54, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "53240a8f97b9307bd75a0f7314a0b93c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "08632d58022e628cac62161bb907ffea"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "679588db54111ad8a48369bc5b037cd9"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "cb9f05d4b7b5c7206ffa9eae6b66ef97"}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x14}, @IFLA_GROUP={0x8, 0x1b, 0x98}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vxcan1\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x10003, &(0x7f00000000c0)='norecovery') r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0xd7, &(0x7f0000000440)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @val={@val={0x88a8, 0x5, 0x1, 0x2}, {0x8100, 0x0, 0x0, 0x1}}, {@x25={0x805, {0x1, 0x7, 0x0, "740709829daa47495120b587ac7351bc486e8ca510f70eeab588ee1ec9e5f1daa7d4d7d7b84013bf0db7f3f9e660a6daaa310f95e263da55e71b0f8dfa0cd63a706ed6d948130433f2cd743215a5a81c3d5f19e63310c8c50a0e50e763dfe53d7143d7ded274c4623c8f654dabda972102df35b8d5c16f9b8095562ba513c7c2a41653b416398c200adee15aed4eb596063c39f6d38ce88dae7d322cf0a866bd92156aab57d96650dd603ea4930a26e522abe7efe1d46b72fa6794091140"}}}}, &(0x7f0000000340)={0x0, 0x1, [0x8d1, 0xa4c, 0x71a, 0xe97]}) set_robust_list(&(0x7f0000000600)={0x0, 0x8000000000000000}, 0x18) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x4880d) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 46.453344931s ago: executing program 4 (id=1888): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="34020000", @ANYRES16=r0, @ANYBLOB="010025bd7000000000008900000008000300", @ANYRES32=r2, @ANYBLOB="18001d801400008006000500c000000005000a0000000000"], 0x34}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = fsopen(&(0x7f00000003c0)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x4, 0x0, &(0x7f0000000200)="8b500200"}) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="07000000010001", 0x7) 46.452934411s ago: executing program 5 (id=1889): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b702000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x8a83, 0x8, 0xffffff00, 0x38000, 0x2, "1039db8d79bea18fa3015ae9ae6901313cf366"}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 46.393005264s ago: executing program 4 (id=1890): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x101, 0x0, {0xffffffffffffffff, 0x0, 0x28, 0x0, 0x5}, 0xfff}) ioctl$TIOCGPGRP(r0, 0x40086806, &(0x7f0000000100)) 46.392325662s ago: executing program 5 (id=1891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) sendto$inet6(r2, &(0x7f00000004c0)="b9a77639a743dae27a62d34e22745f6842f58cb1c428e26fc55f0d2ecaa5909a80b722939a199bc2830d90e33c00ca47f7686b32ccebf9c55699ff0664a2c49dc3492c6673bb6f8ec4248dbfb58b63b22e1a9446f3620149a13bed8602189fa71b98148ca9d3cf4947b4a550a7e563fd7e29d6cded27c87d3d54ebde556f8c96cefd63413d74d965132b1cf325a746257cc0f545de411ddc3ebf79ff23de10ea307dcd11572e79", 0xa7, 0x4000, 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) 46.392258572s ago: executing program 4 (id=1892): r0 = socket(0x10, 0x80003, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 46.331663929s ago: executing program 4 (id=1894): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000032000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000016e000/0x2000)=nil, &(0x7f000022d000/0x1000)=nil, &(0x7f00002dd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000237000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="cf9a20f853dceea04db165e767a0e0f000456a9fe7c83edfc7a65c59e46dcbd8a772cefd60fa6aff9e963e36d2833174237f1cb06451865bede1d95ae98239abc53ed4bbae68cabd36bba0f32df6565f79146f75b2d99e0383ff5ef261950b757ea136c6d1c7dba4a908a9d11fb7a7231652e376051385d0b5cf85314f7bedc11f81709dddf2626d3056aab3ea800f41a9cf7f240b7ac63f4d6be702f9653d11867ceaad916d727702aeb12595c9add6121e5fa2472e94ed279e87fc4ab6a596b8895264bc390e909d624dc42485fff7d082c65f44457915aab8a3", 0xdb}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1210}, 0x4008815) r2 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002100)=0x0) r4 = syz_open_procfs(r3, &(0x7f00000020c0)='io\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r4) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, &(0x7f0000002080)={0x7fff, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000002180)=""/211) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) io_uring_setup(0x37cc, &(0x7f0000000040)={0x0, 0x2a11, 0x1c080, 0xa, 0x20002f7}) syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x24, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r4) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd700000000000007767300000000000000000000000000008000500010000000000000000000042153608191c7d6814792086ef3f6809fbd6186ff270380d31ec720036bd8869916b5ace419df7bedf14b376e77c77b7fe5231cc14a6c10b1491e778702c6bd2cda662ce65b93b7248e1a5464eefdca35ba95445c6e7a6c35d75c67c168ca7b92a48f270999020d4a2b5ed2caa05239596155c389e0437352bbeb5691224c936e975b8365e45a4e9992269cf4d8b906363abebcb97048b8cc305d354beb8"], 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 46.24365532s ago: executing program 5 (id=1895): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = fsopen(&(0x7f0000000540)='virtiofs\x00', 0x0) pread64(r0, &(0x7f00000005c0)=""/9, 0x9, 0x5) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000110000000fddbdf250410000008000700e000000208000800ffffffff10851d07050ff0fef64224eb0e8d6a86fd68a9f8061672909db7fc171ee29f044322e8a518465e0a41768ca0b8b3067ac1e8698e9eca9bca20636e5f85492093390d8d1a9a06bb3eced09df62c1dc1d7d2e9de52b6c5504a606d80ccc2feeeddca7dcf1674"], 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x200000000000000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4044014) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0xd71, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000180)={0x0, 0x2, 0x2, "e4815826b1af9d911c9e181942f697619ff1bcb06be129cd593711aab0d1884a", 0x3234564e}) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000011700000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a0104000000000000001b010000002400048020000180080001006f73660014000280050002006d000000000000000000001408000b40000000000900010073797a3000"], 0xd4}}, 0x4008010) read(r1, &(0x7f0000000140)=""/73, 0x49) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x1d1, 0x0, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000000c0)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x20000090) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}, 0x1, 0x0, 0x0, 0x2404c010}, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000440)={{0x0, 0xea60}, 0x14, 0x2}, 0x18) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r9) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYRES8, @ANYRES8=r6, @ANYRES16=r7], 0x4c}, 0x1, 0x0, 0x0, 0x4000045}, 0x4040000) 45.663345234s ago: executing program 5 (id=1896): sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c045}, 0x4008000) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6005, &(0x7f0000000540)=0xa, 0x6, 0x0) 45.461453679s ago: executing program 5 (id=1898): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0xbe5a941, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 45.379869664s ago: executing program 35 (id=1898): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0xbe5a941, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 45.322197483s ago: executing program 4 (id=1900): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f040, 0xa60}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="f1d213e3b32c5937b422d6f87f6309ca32ab98049e4d99cdfba6c128d2e0ec1aab5d3c854c40bbd5beac3c1295b826759a71060ee1e73b5f1792238eb88e3906aa83b3af825f1bf80b5908d85bdf9849e334ca26b92538d78a79bb276673d73f351b46d2d1f1c61165286ed1570f5779884c936bc8ad476e006989c696f42a146018faf690cd655be64572dfc4e17ecb08f81869edbcb75da6fe8d7d8accac2dcf2b2ac3445654317fa94f20fe19e8f85084ec41f10cb0d8fdf501843a2b1520eca806e475a551c4f12b2b84d0368325448d1872f14957ea50478d", @ANYRES64=r1, @ANYRESHEX=r1, @ANYRESOCT=r0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffc01, 0x0, r2}, 0x48) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={{r2}, 0x9, 0x0, 0x800}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$watch_queue(r7, &(0x7f0000000140)=""/4096, 0x1000) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000005e00000428bd7000fddbdf2500000000", @ANYRES32=r6, @ANYBLOB="7b66bae472ce44e3d6a5932a63357863fbb4ec06b5565571b413618dc9b556699723baec8053dd3e17fe340adc3681610b354373afca748212"], 0x1c}}, 0x20000000) 30.341911314s ago: executing program 36 (id=1900): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f040, 0xa60}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="f1d213e3b32c5937b422d6f87f6309ca32ab98049e4d99cdfba6c128d2e0ec1aab5d3c854c40bbd5beac3c1295b826759a71060ee1e73b5f1792238eb88e3906aa83b3af825f1bf80b5908d85bdf9849e334ca26b92538d78a79bb276673d73f351b46d2d1f1c61165286ed1570f5779884c936bc8ad476e006989c696f42a146018faf690cd655be64572dfc4e17ecb08f81869edbcb75da6fe8d7d8accac2dcf2b2ac3445654317fa94f20fe19e8f85084ec41f10cb0d8fdf501843a2b1520eca806e475a551c4f12b2b84d0368325448d1872f14957ea50478d", @ANYRES64=r1, @ANYRESHEX=r1, @ANYRESOCT=r0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffc01, 0x0, r2}, 0x48) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={{r2}, 0x9, 0x0, 0x800}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$watch_queue(r7, &(0x7f0000000140)=""/4096, 0x1000) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000005e00000428bd7000fddbdf2500000000", @ANYRES32=r6, @ANYBLOB="7b66bae472ce44e3d6a5932a63357863fbb4ec06b5565571b413618dc9b556699723baec8053dd3e17fe340adc3681610b354373afca748212"], 0x1c}}, 0x20000000) 24.823902705s ago: executing program 8 (id=2245): unshare(0x62040200) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (fail_nth: 2) 24.651106085s ago: executing program 8 (id=2248): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0xfffffffffffff801, 0xc, 0x8, 0x8}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x110, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000081}, 0x8000) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) (async) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40, 0x71}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000001) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x144, 0x2, 0x2, 0x406, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_NAT={0xf4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x10001}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x717}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000640)) (async) write$6lowpan_enable(r3, &(0x7f0000000a40)='1', 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x3, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040041}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, r2, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "8cad"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0xc004) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000cc0)={@dev, @initdev, @multicast1}, &(0x7f0000000d00)=0xc) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000d40), 0x4) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "742a51960647a49c2ef009016598f13e"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000f00), r3) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x74, r8, 0x400, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x933}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xaf}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) recvfrom$netrom(r3, &(0x7f0000001040)=""/142, 0x8e, 0x2, &(0x7f0000001100)={{0x3, @null, 0x5}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000001180)) (async, rerun: 64) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001200), r0) (rerun: 64) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x84, r9, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcf74}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x28}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3d}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x36}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000881}, 0x40) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000001380), 0x4) (async, rerun: 32) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000013c0)='wg1\x00', 0x4) (rerun: 32) 24.650935658s ago: executing program 8 (id=2249): syz_open_dev$sndmidi(0x0, 0x2, 0x143102) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x400, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0}) 23.813295696s ago: executing program 8 (id=2264): fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000200), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@assoc={0x18, 0x117, 0x4, 0x6b}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000001380)=""/5, 0x5}, {&(0x7f0000000780)=""/242, 0xf2}], 0x2}, 0x9}], 0x1, 0x2000, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r3, 0x260}], 0x1, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x109840, 0x2) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf259200000008000300", @ANYRES32=r5, @ANYBLOB="0a0006"], 0x38}, 0x1, 0x0, 0x0, 0x200048f0}, 0x48100) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) 23.682666466s ago: executing program 8 (id=2272): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x1) 23.613494825s ago: executing program 8 (id=2273): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x464000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) read(r2, &(0x7f0000000140)=""/73, 0x49) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000600)={0x18}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000740)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r5, 0xd}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={r5, 0x1}, 0x8) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x464000, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) (async) read(r2, &(0x7f0000000140)=""/73, 0x49) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000600)={0x18}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) sendmmsg$inet(r4, &(0x7f0000000740)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) (async) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r5, 0xd}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={r5, 0x1}, 0x8) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) (async) 8.3405161s ago: executing program 37 (id=2273): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x464000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) read(r2, &(0x7f0000000140)=""/73, 0x49) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000600)={0x18}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000740)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r5, 0xd}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={r5, 0x1}, 0x8) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x464000, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) (async) read(r2, &(0x7f0000000140)=""/73, 0x49) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000600)={0x18}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) sendmmsg$inet(r4, &(0x7f0000000740)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) (async) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r5, 0xd}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={r5, 0x1}, 0x8) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) (async) 7.643551678s ago: executing program 6 (id=2586): fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) pipe2$9p(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@assoc={0x18, 0x117, 0x4, 0x6b}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r2, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x814) 7.643222099s ago: executing program 6 (id=2587): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x100000001, 0xffffffffffff6e3d}) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a01030045f5d2000000000000000100000020000000050a01020000000000000000010020000900010073797a3100000000140000001100010000000000000000000000000a"], 0x5c}}, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) (async) close_range(r0, r0, 0x2) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) (async) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r8, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x200, 0x5, 0x0, 0x4, 0x8, 0x0, 0x401, 0xcb, r8}, &(0x7f0000000080)=0x20) (async) r10 = socket(0x11, 0x800000003, 0x0) (async) r11 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x6, 0xa, 0x0, 0x9, 0x0, 0x101, 0xfffffffe, r7}, 0x20) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r9, 0x100}, &(0x7f00000001c0)=0x8) (async) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}}]}, 0x88}}, 0x0) 7.562178508s ago: executing program 6 (id=2588): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/26, 0x1a, 0x2, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/42, 0x2a, 0x2, 0x3d}, @fda={0x66646185, 0x8000000000000009, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x40}], 0x0, 0x0, 0x0}) 7.491218463s ago: executing program 6 (id=2592): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x1}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)="d6", 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x24008004}, 0x0) r2 = dup2(r1, r0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000240), 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000240), 0x4) sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x400000000000121, 0x200000d1) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001a00)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000880)=""/4089, 0xd000}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0xff80, 0x0, 0x0, 0xe, 0x1, 0xea8, 0x8, 0x1, 0x3, 0x6, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0xff80, 0x0, 0x0, 0xe, 0x1, 0xea8, 0x8, 0x1, 0x3, 0x6, 'syz1\x00'}) 7.49100904s ago: executing program 6 (id=2593): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x1, 0x1}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x20000) r2 = pidfd_getfd(r1, r0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x98, 0xc9, 0xdf}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xad}, @l2cap_cid_signaling={{0xa9}, [@l2cap_info_rsp={{0xb, 0x81, 0xa5}, {0x1d12, 0x8, "ed26a3cd99c86967b72a4a9880c1e5d824d36f68258e829a18e040c16954085e4f324f25ddac2cd0454a31a318b5b9fcdb3ede849e57b49045cb630f841e7439873d44dc83f08fe273e803bab8cf1449529cea2acdb9d07b0ed7cfa17800a89483989e70a2025b0cd3ebff533f949a746622f508101a412a4bbdd90c7ac1571412300689937f9e2abf8a54b4363c755459b67eb3251a507f08a01b539ed8d476a1"}}]}}, 0xb2) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) r3 = syz_open_dev$mouse(&(0x7f00000001c0), 0x6, 0x4001) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r1, 0x100}, {r4, 0x20}, {r0, 0x8000}, {r3, 0x2042}, {r0, 0x1260}], 0x5, &(0x7f00000002c0)={r5, r6+10000000}, &(0x7f0000000300)={[0x8]}, 0x8) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r3, 0x4068aea3, &(0x7f0000002380)) syz_emit_vhci(&(0x7f0000002400)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x2, 0xc8, @any, 0x1, 0x25, 0xe0, 0x53, 0x5, 0x4}}}, 0x14) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000002440)) syz_emit_vhci(&(0x7f0000002480)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0xca, 0xc8, "1a704556a486c262"}}}, 0xe) syz_emit_vhci(&(0x7f00000024c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) 7.292583702s ago: executing program 6 (id=2597): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) getpgid(0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x2180, 0x0) ioctl$COMEDI_LOCK(r2, 0x6405) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x4802, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x4}) getpid() r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r5, 0x9, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500006000000000000190780a010101ac1414aa05019078e000000241a00004000000000289000064010101e0000002441c9571ac1e0101000020000a01010100000401ac1414aa000000034414445364010100400000090a010101fffffffd"], 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x80000}}, 0x50) write$FUSE_INIT(r5, &(0x7f0000000400)={0x50, 0xfffffffffffffff5, r7, {0x7, 0x2b, 0x40000, 0x100000, 0x3, 0x3, 0xe, 0x7, 0x0, 0x0, 0x2, 0x20000}}, 0x50) timer_create(0x6, &(0x7f0000000140)={0x0, 0x35, 0x4, @thr={&(0x7f0000000180)="e80e2f8ad2706c8dc334980d60df134b8557ead90cedb0e4e63247d1af147038684a09a4a1d7394c2103ffb0326166b1339a860027cce51124b4684482becfee6afe2d166313c3a10a436f42080370ede4b067ef63a97f9d1f6e10aab1965da459f6e14aa5dfb60739ad21bc7e95b5e5359c9b87f0986f13aba17c577d4f0dbcb4180ac0aa8fb70b44c48cbeb2d2e37e6a115df2df21e73eee341719c17d91a12b9a819651d344704cbb610ba220462df978497b6030062a193fa75bf02086643b8b3a3687b71b1a10868cf42c", &(0x7f0000000340)="2a6e10f82565ee7988249e00eb982a3819aed0ca7bf95953930ab391af87abbaffbea4d19e12d61f64b79aa141f0e947e8da65b8c37da88400d49bc164bb663abeeef1e839e52bc0627b0b3132055413f64a39357a2f1ad57a112c6666ca6fa4ea7f76132e3c8eb134660b92e6388b72e0b742f2f42c4282d21e7858ce620f9db3155cbbd410e445aba260d66612347ae21cba948911368d1749d7dccabbbeb28ee177da4aac06f33adcf7ceeaab8ec275292072c5"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xd, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = syz_io_uring_setup(0x82e, &(0x7f0000000280)={0x0, 0x3fa, 0x10, 0x0, 0x3}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) socket(0x10, 0x3, 0x0) 3.613031807s ago: executing program 1 (id=2659): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101000, 0xd9971d7e4f797242) r2 = socket$nl_generic(0x10, 0x3, 0x10) open$dir(&(0x7f0000000280)='./file0\x00', 0x8000, 0x100) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400020000009653fc5f6bbfb66de8e544666d4215a7a69bf47a7a9ddd4c446e32e943d5c4672e8a91fd0d6cc8"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000110) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB='\b\x00']) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r7 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r10) readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=""/62, 0x3e) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0xfffffffffffffffe, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0}], 0x2, 0x0, 0x1}) syz_io_uring_setup(0x69d2, &(0x7f00000002c0)={0x0, 0x1388, 0x4000, 0x0, 0x3a6, 0x0, r6}, &(0x7f0000000340), &(0x7f0000000380)) io_uring_enter(r7, 0x4d10, 0x2, 0x2, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) bind$phonet(r0, &(0x7f00000001c0)={0x23, 0x4, 0xa, 0x5}, 0x10) r12 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.733371355s ago: executing program 1 (id=2670): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_emit_ethernet(0x9a, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @udp={{0x11, 0x4, 0x3, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0x9b, [@multicast1, @private=0xa010100, @multicast2]}, @timestamp={0x44, 0xa, 0x7e, 0x0, 0x8}, @ra={0x94, 0x4, 0x1}, @end, @end]}}, {0x0, 0x883e, 0x48, 0x0, @wg=@data={0x4, 0x200, 0xffffffff, "ff1eeb652c60016a3bb2fa53129e4db051254b4ed317ac7846d822b7331b29c6bc9522f903ecb3618c66096ad55882264822cabea0723e5597ff1f9c4c9110ce83c726e14c02ecd8f59759eb92c2c0d5e73c26e67ff75bfcd4d23eba1a48a23c82cb48bcf95e6451331c3e780e6dd4ce0c21dcf2e4ada46b924f56d417255df8869eb39e5f181861717c669c97a2cc5853313c93f9d84a3339c52e424b694d54cd7dfb341d339d0bb42ae4d2"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) (async) socket$inet(0x2, 0x2, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) (async) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) syz_emit_ethernet(0x9a, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @udp={{0x11, 0x4, 0x3, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0x9b, [@multicast1, @private=0xa010100, @multicast2]}, @timestamp={0x44, 0xa, 0x7e, 0x0, 0x8}, @ra={0x94, 0x4, 0x1}, @end, @end]}}, {0x0, 0x883e, 0x48, 0x0, @wg=@data={0x4, 0x200, 0xffffffff, "ff1eeb652c60016a3bb2fa53129e4db051254b4ed317ac7846d822b7331b29c6bc9522f903ecb3618c66096ad55882264822cabea0723e5597ff1f9c4c9110ce83c726e14c02ecd8f59759eb92c2c0d5e73c26e67ff75bfcd4d23eba1a48a23c82cb48bcf95e6451331c3e780e6dd4ce0c21dcf2e4ada46b924f56d417255df8869eb39e5f181861717c669c97a2cc5853313c93f9d84a3339c52e424b694d54cd7dfb341d339d0bb42ae4d2"}}}}}}, 0x0) (async) 2.73316757s ago: executing program 1 (id=2671): r0 = io_uring_setup(0x47bf, &(0x7f0000000140)={0x0, 0x6d70, 0x10, 0x1, 0x324}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/29, 0x1d}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1f0bd26, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x2, {@ip4=@multicast1, 0x800}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1f0bd26, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x2, {@ip4=@multicast1, 0x800}}}]}, 0x38}}, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 2.662691307s ago: executing program 1 (id=2672): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0x2}, 0x18, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r2, 0x4068aea3, &(0x7f0000000280)={0xdb, 0x0, 0x3}) landlock_restrict_self(r0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x9) 2.583331266s ago: executing program 1 (id=2673): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000040), 0x400000000000193, 0x40010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x140}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) r3 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="76bd19b26012d27756f1f13cd1dc47c6f4e7ce69c91684aea28136bb29298134413dd25db33c1b98c0b89da974bdeabf981a4472cc4094095d7e34289ddba41a8e9f713705"]) read$FUSE(r4, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r6, r7, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r8 = openat(0xffffffffffffffff, &(0x7f0000000a80)='./file1\x00', 0x20000, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x40044d0e, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xf9, 0x8, 0xbf, 0x12, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x80, 0x3}}) sendto$packet(r8, &(0x7f00000004c0)="77e659e8761906e8ad012c239177e6914b5064789aaf0a84b58e07fa380ef773514e3f58e803db34f1e47a38658e389a2b328a688936393ced309ef64d73123e45e581f45e31f281edbbe0b1ff22195abc8c93fa8c23906519a3", 0x5a, 0x40044, &(0x7f0000000640)={0x11, 0xe4, r9, 0x1, 0x67, 0x6, @remote}, 0x14) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2.072937585s ago: executing program 1 (id=2676): unshare(0x62040200) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0xfffffffffffff000) 696.4583ms ago: executing program 9 (id=2692): socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x13, 0x2}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 696.114479ms ago: executing program 9 (id=2693): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009500)=@newtaction={0xe68, 0x30, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x401, 0x20000000, 0x1, 0x4}, 0x3c, 0x9}, [{0x10000, 0x80000001, 0x90b71e2, 0x6, 0x6, 0x9}, {0xb943, 0x0, 0x8, 0x7, 0x1, 0x6}, {0x4, 0x80000001, 0x9cb, 0x9, 0x4b, 0x3}, {0x80000000, 0x272f8ca0, 0x0, 0x400, 0x8, 0xde}, {0x9, 0x9, 0x1, 0xfffffff7, 0x9, 0x800000}, {0xa, 0xa, 0x1000, 0x7, 0x2, 0x2000}, {0x63, 0x1, 0x2, 0x1, 0x6, 0x301}, {0x4757, 0x5, 0x8, 0xbc64, 0x5b, 0x45ef}, {0x1f, 0xfffffffc, 0x1, 0x3, 0x2, 0x2}, {0x7ff, 0x400, 0x10000, 0x9, 0x1, 0x4}, {0x8, 0xa7, 0x40, 0x6, 0x2, 0x9}, {0x2, 0x6, 0x81, 0x7f, 0x2, 0xa}, {0x40, 0x1ff, 0xa, 0x3, 0x6, 0xbebd}, {0x8, 0x3ff, 0x0, 0x8, 0x7, 0x5}, {0x0, 0x4206, 0x7, 0x1, 0x9, 0xdf99caf9}, {0x1, 0x2, 0x9, 0xfffffffd, 0x8, 0x4}, {0xffff, 0x7, 0x9, 0xd, 0x7, 0xc}, {0x6, 0x6d4c, 0x2, 0x2, 0x7, 0x3}, {0x5, 0x8000, 0x3, 0xfffffff4, 0x0, 0x7}, {0x0, 0x424, 0x4, 0xffff0001, 0x2, 0xfffffffb}, {0x6d, 0x4, 0x3b79, 0x2, 0x4, 0x7ff}, {0x90e9, 0xc1e8, 0x80, 0x15, 0x8, 0xfffffffe}, {0x398, 0x4, 0x8, 0x9, 0x8b1, 0xd8}, {0xc9, 0x9, 0x6, 0xf, 0x0, 0x28}, {0xa9, 0x0, 0x81, 0x800, 0x100, 0x7}, {0xfffffff8, 0x7, 0x0, 0x0, 0xab}, {0xc10b, 0x2191, 0x6, 0x9, 0x0, 0xbe}, {0x80000000, 0x2c2d, 0x400, 0x2, 0x3, 0x7}, {0xfe, 0x9, 0x9, 0x9, 0x7, 0x80}, {0x10000, 0x3, 0x7, 0x800, 0xffffffff, 0x1}, {0x7, 0x6, 0x7ffa328c, 0x2, 0x7b51, 0x8ce6}, {0x8, 0x212626f5, 0x2, 0x2, 0x8001, 0x2}, {0x7, 0x2, 0x7fff, 0x4, 0x7, 0x9}, {0x9, 0x5, 0x2, 0x4, 0x9, 0xe}, {0xfffffffe, 0x2, 0x354a657a, 0x7, 0x8, 0x8}, {0x1, 0x5, 0x9e2a, 0x0, 0x7, 0x3}, {0x7f, 0x5, 0x57b, 0x2, 0x0, 0x5}, {0x3, 0x3, 0x1, 0x3, 0x5, 0x9}, {0xff, 0x0, 0xfff, 0x8, 0x4, 0x9}, {0x2c, 0x2, 0x6, 0x10001, 0x2, 0x101}, {0x2, 0x0, 0x4, 0x6, 0x3, 0x10001}, {0xd, 0xfff, 0x5, 0x94, 0x2, 0x6}, {0x5d, 0x80, 0x4, 0x7, 0x11, 0x6}, {0x3, 0x5, 0xc8, 0x5, 0x18000000, 0x6}, {0xfffffffb, 0x7, 0x3, 0x9, 0x8001, 0x6}, {0x1, 0xb94, 0x800, 0xffffff49, 0x5, 0x9}, {0x95d5, 0x8, 0x8, 0x9, 0x1, 0x89bc}, {0x24, 0x1000, 0x7, 0x400040, 0x1, 0x1}, {0x6, 0x800, 0x0, 0x400, 0x10, 0x1}, {0x29a, 0x3, 0x4, 0x6, 0x7, 0x3}, {0x38000000, 0x5, 0x3e690dd2, 0x0, 0x49f, 0x8}, {0x9, 0x8, 0x7f, 0x9, 0x8, 0x8}, {0xfffffff6, 0x0, 0x2, 0x8, 0x1ff, 0x4}, {0xfffffff8, 0x6, 0xfffffffc, 0x7, 0x7, 0x1}, {0xc, 0x70c, 0xad8, 0x7, 0x355e7bd2, 0x7}, {0x5, 0x5, 0x1, 0xe3, 0x6ec, 0x3}, {0xff, 0x7, 0x66, 0xb, 0x9, 0x9}, {0x0, 0x0, 0x2, 0x1, 0x200, 0x8}, {0x32db, 0x1, 0x1, 0xffffffff, 0xe790, 0x9}, {0x2, 0x400, 0xfa, 0x9, 0x6, 0x1}, {0x7f, 0x1, 0x5, 0x8000, 0xffffffff, 0x8}, {0x1, 0xfff, 0x7f, 0x8000, 0xe, 0xc44}, {0x80000000, 0x9, 0x0, 0xf98, 0x9, 0x8}, {0x5, 0x1, 0x18, 0x0, 0x80000001, 0x9}, {0x0, 0x8, 0x3, 0x200, 0x5, 0x7}, {0x80000001, 0x2, 0x9, 0xc8, 0xfffffffc}, {0x5, 0x3b, 0x400, 0x4, 0x4, 0x3}, {0x7, 0x8, 0x1, 0x400, 0x9, 0x529}, {0x9, 0x16, 0x10001, 0x3, 0x1, 0xfffffffa}, {0x6, 0x74, 0xffffffff, 0x3, 0x1, 0x7ff}, {0x80000000, 0x9, 0x9, 0x0, 0x9}, {0xffffff97, 0xc, 0x9, 0x3, 0x1, 0x5}, {0xd, 0x4, 0xd, 0x3f, 0x2, 0x7}, {0xa, 0x4, 0x2, 0x3, 0x5}, {0x0, 0x283, 0x4, 0x6, 0x8, 0xee7}, {0x6, 0x7, 0x3, 0x0, 0x7f, 0x9}, {0x8, 0xe, 0x100, 0x8, 0x4, 0x5}, {0x1, 0xfffffffc, 0x2, 0x4, 0x100, 0x80000001}, {0x4, 0xffff, 0x2a, 0xf24d, 0xffff8001, 0x5}, {0xd6b, 0x7b8c3976, 0x1, 0x0, 0xf7d9, 0x1}, {0xae9, 0x6, 0xfffffffe, 0x6e53de2f, 0x4, 0xe2758a}, {0x7, 0x8, 0x4, 0x9, 0x8, 0x7fff}, {0xff, 0x1, 0x4, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x8a, 0x6, 0x10, 0x5}, {0x2, 0xe24, 0x5, 0x96, 0x7, 0xd859}, {0x6, 0x6, 0x7, 0x400, 0xfff, 0x2}, {0x3, 0xb, 0x6f70, 0x3, 0xe, 0x6}, {0x0, 0x8, 0xdd1d8af, 0xd1e, 0x4dd, 0x7}, {0x9, 0x1, 0x9, 0x1000000, 0x4, 0x81}, {0xfffffffc, 0xad, 0x9, 0x7, 0x8000, 0x6}, {0x5, 0x6, 0x5, 0x2, 0x7f, 0x7}, {0x8, 0x6, 0xe79, 0x10f, 0x80, 0x3}, {0x9404, 0x4d, 0x8, 0xc63, 0x475, 0x9}, {0xc4c3, 0x4, 0x1, 0xfadc, 0x8, 0x5}, {0x4, 0x1, 0x3, 0x8, 0x10, 0xfffeffff}, {0x9, 0x5, 0x14, 0x1, 0x7, 0x1}, {0x5, 0xed40, 0x8000, 0x7cf, 0x10, 0xe}, {0x3, 0x0, 0x1c7b, 0x9fc3, 0x57c4, 0x800}, {0x5, 0xfffeffff, 0x4, 0x1, 0x0, 0x3}, {0x6, 0x9, 0x8, 0x3, 0x5, 0x7}, {0x6, 0x2, 0x4, 0x9, 0x7fff, 0x5}, {0x7fff, 0x8, 0x0, 0x9, 0xced, 0x80000000}, {0x7ff, 0x3, 0x6, 0x7fff, 0x9, 0xd}, {0x3, 0x5, 0xb, 0x8001, 0x9, 0x1}, {0x0, 0x2, 0x6, 0x2, 0x9, 0x8}, {0x0, 0x7, 0xae6ad9f, 0x9, 0x7, 0x6}, {0x6, 0x200, 0x81, 0xfffffff7, 0x6, 0x4}, {0x0, 0x4, 0x546, 0x6, 0x7, 0x1}, {0xad03, 0x81, 0x7, 0x6, 0x5, 0x9}, {0x4, 0xfff, 0x2, 0x3, 0x9, 0xd}, {0xe, 0x2d4, 0x5, 0x40, 0x1c7a3607, 0xcb2d}, {0x7, 0x9, 0x3, 0x2, 0x4, 0x7fffffff}, {0x0, 0x3, 0x3, 0x8, 0x6}, {0x91, 0x8, 0xfffffffc, 0x8, 0x10000, 0x1}, {0x9, 0x5, 0x8, 0x2, 0x7, 0x8d}, {0x4, 0xb, 0xfffff364, 0x4, 0x400, 0x4}, {0x81, 0x3, 0x1, 0x80000000, 0xbf1}, {0x8, 0x6, 0xd4, 0x1, 0x6, 0x1}, {0x3ff, 0x1, 0x1, 0x800, 0x800, 0xa4}, {0x8, 0x0, 0xfffffff7, 0xfffffffc, 0x4, 0xad5f}, {0x62, 0xe, 0x0, 0x7f7, 0x3, 0x3ff}, {0x100, 0xfffffff9, 0x5, 0xd, 0x84, 0xc20e}, {0xc, 0x6c, 0x2, 0x4, 0x7, 0xea}, {0x8, 0x0, 0x8, 0x0, 0xb2, 0x3}, {0x7, 0x3, 0xec, 0x5, 0x8, 0x1}, {0x8, 0x3000000, 0xffff, 0x81, 0xfffffff6, 0x9}, {0x1, 0xda, 0x5, 0x3, 0x6553, 0x4}, {0xfffffff9, 0x6, 0x7, 0x4, 0xa6, 0x50d8a0cf}], [{0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0xbc772ccd0a61e388, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {}, {}, {}, {0x1}, {0x3}, {0x1}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {}, {}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 553.660279ms ago: executing program 9 (id=2697): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="be1d", 0x2}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRESDEC=r0, @ANYRES8], 0x40}, 0x0) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f00000000c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) dup(r0) (async) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="be1d", 0x2}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRESDEC=r0, @ANYRES8], 0x40}, 0x0) (async) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f00000000c0)) (async) 553.271188ms ago: executing program 9 (id=2699): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000400)) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000040)={0xb, 0x200000, 0x30000001, 0x6, 0x1, 0x7}) mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000002000717320000000fddbdf2502101400fd0000020100000008000200ac1414bb08000100ffffffffb728409da44c94bd08204d202192156914c84133fa7539973041eba4a765fc9f93326d41419496c02c889f4b9d8b20d9"], 0xfffffffffffffe62}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f00000003c0)={0xc00, 0x0, 0x4, 0xfffffffe}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000010140)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) io_setup(0x202, &(0x7f0000000200)) 393.449759ms ago: executing program 9 (id=2701): socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x13, 0x2}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 392.786693ms ago: executing program 9 (id=2702): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) read$char_usb(r0, &(0x7f0000000040)=""/236, 0xec) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', &(0x7f00000011c0)={0x101801, 0x80, 0x8}, 0x18) renameat(r1, &(0x7f0000001200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001240)='./file0\x00') r2 = epoll_create1(0x80000) epoll_pwait(r2, &(0x7f0000001440)=[{}, {}, {}, {}], 0x4, 0x6, &(0x7f0000001480)={[0x8]}, 0x8) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x44, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xd, 0x7, 0x1, 0x8}}]}}]}, 0x44}}, 0x800) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x570}]}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$kcm(0xa, 0x2, 0x73) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) sendmsg$inet(r10, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(r10) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b000100657874686472000014000280080006400000000308000740000000090900020073797a32000000000900010073797a3000000000140000001100010000000000000000000000000adf8a"], 0x7c}}, 0x0) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="5c00000014006b00c84e21000af32c6e020675f8002500024001080000000000000024eab582949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9081139343d0189594c952e805fffa1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x22}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$nl_crypto(r3, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)=@get={0x100, 0x13, 0x400, 0x70bd27, 0x25dfdbfb, {{'ctr-aes-neonbs-sync\x00'}, '\x00', '\x00', 0xb9d3d7a4a0c75773, 0x400}, [{0x8, 0x1, 0xfff}, {0x8, 0x1, 0xffff8001}, {0x8, 0x1, 0xfffffc8a}, {0x8, 0x1, 0x9}]}, 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x4000021) 331.714215ms ago: executing program 7 (id=2703): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077673200"], 0xa8}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000200)={0x100, r3}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000004240), 0xa000, 0x0) setreuid(0x0, 0xee00) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r5, 0x0, &(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x10000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000300)={'bond0\x00', @ifru_names='wg0\x00'}) 252.081769ms ago: executing program 7 (id=2704): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) chdir(&(0x7f00000003c0)='./bus\x00') (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000024c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x2, {0x2, 0x20, 0x0, 0x20, 0xfe, 0x0, 0x0, 0x1, 0x2000}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x35}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x20008844) (async) getdents(r0, &(0x7f0000000200)=""/52, 0x34) 251.786936ms ago: executing program 7 (id=2705): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 188.059804ms ago: executing program 7 (id=2706): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x1, 0x1}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x20000) r2 = pidfd_getfd(r1, r0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x98, 0xc9, 0xdf}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xad}, @l2cap_cid_signaling={{0xa9}, [@l2cap_info_rsp={{0xb, 0x81, 0xa5}, {0x1d12, 0x8, "ed26a3cd99c86967b72a4a9880c1e5d824d36f68258e829a18e040c16954085e4f324f25ddac2cd0454a31a318b5b9fcdb3ede849e57b49045cb630f841e7439873d44dc83f08fe273e803bab8cf1449529cea2acdb9d07b0ed7cfa17800a89483989e70a2025b0cd3ebff533f949a746622f508101a412a4bbdd90c7ac1571412300689937f9e2abf8a54b4363c755459b67eb3251a507f08a01b539ed8d476a1"}}]}}, 0xb2) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) r3 = syz_open_dev$mouse(&(0x7f00000001c0), 0x6, 0x4001) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r1, 0x100}, {r4, 0x20}, {r0, 0x8000}, {r3, 0x2042}, {r0, 0x1260}], 0x5, &(0x7f00000002c0)={r5, r6+10000000}, &(0x7f0000000300)={[0x8]}, 0x8) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r3, 0x4068aea3, &(0x7f0000002380)) syz_emit_vhci(&(0x7f0000002400)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x2, 0xc8, @any, 0x1, 0x25, 0xe0, 0x53, 0x5, 0x4}}}, 0x14) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000002440)) syz_emit_vhci(&(0x7f00000024c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) 311.167µs ago: executing program 7 (id=2707): fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) pipe2$9p(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000", 0xe) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r2, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x814) 0s ago: executing program 7 (id=2708): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x8a83, 0x8, 0xffffff00, 0x38000, 0x2, "1039db8d79bea18fa3015ae9ae6901313cf366"}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0xfffffffd, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) kernel console output (not intermixed with test programs): 49037][ T5946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.353555][ T5946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.356389][ T5946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.359597][ T5946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.365727][ T5946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.387823][T11833] netlink: 'syz.7.2060': attribute type 10 has an invalid length. [ 159.570242][T11828] chnl_net:caif_netlink_parms(): no params data found [ 159.585822][T11840] loop2: detected capacity change from 0 to 7 [ 159.587361][ T6210] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.588869][T11840] Dev loop2: unable to read RDB block 7 [ 159.594522][T11840] loop2: AHDI p1 p2 p3 [ 159.596108][T11840] loop2: partition table partially beyond EOD, truncated [ 159.599418][T11840] loop2: p1 start 1818582900 is beyond EOD, truncated [ 159.602731][T11840] loop2: p3 start 335544320 is beyond EOD, truncated [ 159.647724][ T6210] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.661249][ T40] kauditd_printk_skb: 203 callbacks suppressed [ 159.661260][ T40] audit: type=1400 audit(1764464160.054:3637): avc: denied { read write } for pid=11842 comm="syz.7.2062" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 159.663470][T11844] netlink: 'syz.7.2062': attribute type 27 has an invalid length. [ 159.664137][ T40] audit: type=1400 audit(1764464160.054:3638): avc: denied { open } for pid=11842 comm="syz.7.2062" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 159.672861][T11828] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.672992][T11828] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.673099][T11828] bridge_slave_0: entered allmulticast mode [ 159.674950][T11828] bridge_slave_0: entered promiscuous mode [ 159.677127][ T40] audit: type=1400 audit(1764464160.054:3639): avc: denied { remount } for pid=11842 comm="syz.7.2062" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 159.738782][T11844] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.742517][T11844] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.818225][T11844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.828554][T11844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.921452][T11844] ip6gretap1: left promiscuous mode [ 159.923404][T11844] ip6gretap1: left allmulticast mode [ 159.925753][T11828] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.928539][T11828] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.931003][T11828] bridge_slave_1: entered allmulticast mode [ 159.934003][T11828] bridge_slave_1: entered promiscuous mode [ 159.957763][T11846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.960952][T11846] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.966366][T11846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.973881][ T1149] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.976794][ T1149] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.005091][ T40] audit: type=1400 audit(1764464160.404:3640): avc: denied { read } for pid=11847 comm="syz.6.2063" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 160.014732][ T40] audit: type=1400 audit(1764464160.404:3641): avc: denied { open } for pid=11847 comm="syz.6.2063" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 160.019813][ T6210] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.022319][ T40] audit: type=1400 audit(1764464160.404:3642): avc: denied { ioctl } for pid=11847 comm="syz.6.2063" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 160.022344][ T40] audit: type=1400 audit(1764464160.414:3643): avc: denied { write } for pid=11847 comm="syz.6.2063" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 160.046798][ T1149] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.049922][ T1149] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.056953][T11828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.057981][ T40] audit: type=1400 audit(1764464160.454:3644): avc: denied { mounton } for pid=11847 comm="syz.6.2063" path="/81/file0" dev="tmpfs" ino=475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 160.064590][T11828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.094653][T11828] team0: Port device team_slave_0 added [ 160.111056][ T6210] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.118190][ T40] audit: type=1400 audit(1764464160.524:3645): avc: denied { read write } for pid=11847 comm="syz.6.2063" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.127189][ T40] audit: type=1400 audit(1764464160.524:3646): avc: denied { open } for pid=11847 comm="syz.6.2063" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.130916][T11828] team0: Port device team_slave_1 added [ 160.149804][ T5942] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 160.161162][T11828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.164614][T11828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.175771][T11828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.182020][T11828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.184930][T11828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.195874][T11828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.223700][T11828] hsr_slave_0: entered promiscuous mode [ 160.225961][T11828] hsr_slave_1: entered promiscuous mode [ 160.228056][T11828] debugfs: 'hsr0' already exists in 'hsr' [ 160.229913][T11828] Cannot create hsr debugfs directory [ 160.288151][ T6210] bridge_slave_1: left allmulticast mode [ 160.290323][ T6210] bridge_slave_1: left promiscuous mode [ 160.292604][ T6210] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.295926][ T6210] bridge_slave_0: left allmulticast mode [ 160.297725][ T6210] bridge_slave_0: left promiscuous mode [ 160.299943][ T6210] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.361490][ T72] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 160.372405][T11859] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 160.467304][T11865] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 160.475478][ T6210] bridge0 (unregistering): left promiscuous mode [ 160.511464][ T72] usb 11-1: Using ep0 maxpacket: 32 [ 160.515671][ T72] usb 11-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.519662][ T72] usb 11-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 160.524579][ T72] usb 11-1: config 1 interface 0 has no altsetting 0 [ 160.529066][ T72] usb 11-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.40 [ 160.532505][ T72] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.535279][ T72] usb 11-1: Product: syz [ 160.536789][ T72] usb 11-1: Manufacturer: syz [ 160.538513][ T72] usb 11-1: SerialNumber: syz [ 160.653002][T11873] openvswitch: netlink: Message has 6 unknown bytes. [ 160.656905][T11873] binder_alloc: 11871: binder_alloc_buf, no vma [ 160.817062][ T6210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.823100][ T6210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.826709][ T6210] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 160.834168][ T6210] bond0 (unregistering): Released all slaves [ 160.840804][ T6210] bond1 (unregistering): Released all slaves [ 160.960384][ T6210] IPVS: stopping backup sync thread 8905 ... [ 161.172137][T11885] __nla_validate_parse: 10 callbacks suppressed [ 161.172148][T11885] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2075'. [ 161.231482][ T5942] Bluetooth: hci3: command 0x0409 tx timeout [ 161.328053][ T6210] hsr_slave_0: left promiscuous mode [ 161.330413][ T6210] hsr_slave_1: left promiscuous mode [ 161.332815][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.336153][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.338941][ T6210] batman_adv: batadv0: Removing interface: dummy0 [ 161.391505][ T5942] Bluetooth: hci0: command 0x0406 tx timeout [ 161.392582][ T5946] Bluetooth: hci4: command tx timeout [ 161.491480][ T839] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 161.641600][ T839] usb 12-1: Using ep0 maxpacket: 8 [ 161.651724][ T839] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.655696][ T839] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.659416][ T839] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 161.665375][ T839] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 161.668561][ T839] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.672816][ T839] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 161.675668][ T839] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.679698][ T6210] team0 (unregistering): Port device team_slave_1 removed [ 161.710630][ T6210] team0 (unregistering): Port device team_slave_0 removed [ 161.887645][ T839] usb 12-1: GET_CAPABILITIES returned 0 [ 161.890253][ T839] usbtmc 12-1:16.0: can't read capabilities [ 162.025396][T11828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 162.032142][T11828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 162.042620][T11828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 162.049063][T11828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 162.086656][ T839] usb 12-1: USB disconnect, device number 2 [ 162.135518][T11828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.150871][T11828] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.159151][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.162279][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.171853][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.174898][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.333206][T11828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.358918][T11828] veth0_vlan: entered promiscuous mode [ 162.365037][T11828] veth1_vlan: entered promiscuous mode [ 162.385153][T11828] veth0_macvtap: entered promiscuous mode [ 162.390553][T11828] veth1_macvtap: entered promiscuous mode [ 162.405382][T11828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.415044][T11828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.422761][ T6210] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.426572][ T6210] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.430763][ T6210] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.435203][ T6210] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.475355][ T6216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.478789][ T6216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.492838][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.496396][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.607707][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2077'. [ 162.667131][ T5946] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 162.932558][ T5946] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 162.935782][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 162.935801][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.935814][ T5946] Workqueue: hci4 hci_rx_work [ 162.935854][ T5946] Call Trace: [ 162.935860][ T5946] [ 162.935866][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 162.935880][ T5946] sysfs_warn_dup+0x7f/0xa0 [ 162.935897][ T5946] sysfs_create_dir_ns+0x24b/0x2b0 [ 162.935912][ T5946] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 162.935930][ T5946] ? find_held_lock+0x2b/0x80 [ 162.935948][ T5946] ? do_raw_spin_unlock+0x172/0x230 [ 162.935966][ T5946] kobject_add_internal+0x2c4/0x9b0 [ 162.935980][ T5946] kobject_add+0x16e/0x240 [ 162.935992][ T5946] ? __pfx_kobject_add+0x10/0x10 [ 162.936005][ T5946] ? do_raw_spin_unlock+0x172/0x230 [ 162.936018][ T5946] ? kobject_put+0xab/0x5a0 [ 162.936033][ T5946] device_add+0x288/0x1aa0 [ 162.936054][ T5946] ? __pfx_dev_set_name+0x10/0x10 [ 162.936069][ T5946] ? __pfx_device_add+0x10/0x10 [ 162.936083][ T5946] ? mgmt_send_event_skb+0x2fb/0x460 [ 162.936105][ T5946] hci_conn_add_sysfs+0x17e/0x230 [ 162.936117][ T5946] le_conn_complete_evt+0x1260/0x2150 [ 162.936138][ T5946] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 162.936155][ T5946] ? hci_event_packet+0x459/0x11c0 [ 162.936175][ T5946] hci_le_conn_complete_evt+0x23c/0x370 [ 162.936194][ T5946] hci_le_meta_evt+0x357/0x5e0 [ 162.936210][ T5946] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 162.936228][ T5946] hci_event_packet+0x685/0x11c0 [ 162.936244][ T5946] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 162.936261][ T5946] ? __pfx_hci_event_packet+0x10/0x10 [ 162.936278][ T5946] ? kcov_remote_start+0x3c9/0x6d0 [ 162.936292][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 162.936305][ T5946] hci_rx_work+0x2c9/0xeb0 [ 162.936323][ T5946] process_one_work+0x9cf/0x1b70 [ 162.936341][ T5946] ? __pfx_process_one_work+0x10/0x10 [ 162.936357][ T5946] ? assign_work+0x1a0/0x250 [ 162.936369][ T5946] worker_thread+0x6c8/0xf10 [ 162.936387][ T5946] ? __pfx_worker_thread+0x10/0x10 [ 162.936399][ T5946] kthread+0x3c5/0x780 [ 162.936411][ T5946] ? __pfx_kthread+0x10/0x10 [ 162.936423][ T5946] ? rcu_is_watching+0x12/0xc0 [ 162.936437][ T5946] ? __pfx_kthread+0x10/0x10 [ 162.936448][ T5946] ret_from_fork+0x675/0x7d0 [ 162.936458][ T5946] ? __pfx_kthread+0x10/0x10 [ 162.936469][ T5946] ret_from_fork_asm+0x1a/0x30 [ 162.936492][ T5946] [ 162.936507][ T5946] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 163.017562][ T5946] Bluetooth: hci4: failed to register connection device [ 163.104488][ T72] usbhid 11-1:1.0: can't add hid device: -71 [ 163.106505][ T72] usbhid 11-1:1.0: probe with driver usbhid failed with error -71 [ 163.112379][ T72] usb 11-1: USB disconnect, device number 2 [ 163.311525][ T5946] Bluetooth: hci3: command 0x0409 tx timeout [ 163.351023][T11934] FAULT_INJECTION: forcing a failure. [ 163.351023][T11934] name failslab, interval 1, probability 0, space 0, times 0 [ 163.355082][T11934] CPU: 3 UID: 0 PID: 11934 Comm: syz.6.2089 Not tainted syzkaller #0 PREEMPT(full) [ 163.355097][T11934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.355103][T11934] Call Trace: [ 163.355108][T11934] [ 163.355112][T11934] dump_stack_lvl+0x16c/0x1f0 [ 163.355126][T11934] should_fail_ex+0x512/0x640 [ 163.355139][T11934] ? fs_reclaim_acquire+0xae/0x150 [ 163.355153][T11934] should_failslab+0xc2/0x120 [ 163.355178][T11934] __kmalloc_noprof+0xdd/0x880 [ 163.355194][T11934] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 163.355209][T11934] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 163.355221][T11934] tomoyo_realpath_from_path+0xc2/0x6e0 [ 163.355235][T11934] ? tomoyo_profile+0x47/0x60 [ 163.355250][T11934] tomoyo_path_number_perm+0x245/0x580 [ 163.355260][T11934] ? tomoyo_path_number_perm+0x237/0x580 [ 163.355271][T11934] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 163.355282][T11934] ? find_held_lock+0x2b/0x80 [ 163.355307][T11934] ? find_held_lock+0x2b/0x80 [ 163.355320][T11934] ? hook_file_ioctl_common+0x145/0x410 [ 163.355337][T11934] ? __fget_files+0x20e/0x3c0 [ 163.355350][T11934] security_file_ioctl+0x9b/0x240 [ 163.355364][T11934] __x64_sys_ioctl+0xb7/0x210 [ 163.355380][T11934] do_syscall_64+0xcd/0xfa0 [ 163.355391][T11934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.355402][T11934] RIP: 0033:0x7f554658f7c9 [ 163.355411][T11934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.355421][T11934] RSP: 002b:00007f55447f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.355431][T11934] RAX: ffffffffffffffda RBX: 00007f55467e5fa0 RCX: 00007f554658f7c9 [ 163.355438][T11934] RDX: 0000200000000240 RSI: 0000000000008946 RDI: 0000000000000003 [ 163.355444][T11934] RBP: 00007f55447f6090 R08: 0000000000000000 R09: 0000000000000000 [ 163.355451][T11934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.355457][T11934] R13: 00007f55467e6038 R14: 00007f55467e5fa0 R15: 00007ffc86749e98 [ 163.355471][T11934] [ 163.355486][T11934] ERROR: Out of memory at tomoyo_realpath_from_path. [ 163.472758][ T5946] Bluetooth: hci4: command tx timeout [ 163.653985][T11954] FAULT_INJECTION: forcing a failure. [ 163.653985][T11954] name failslab, interval 1, probability 0, space 0, times 0 [ 163.657952][T11954] CPU: 2 UID: 0 PID: 11954 Comm: syz.1.2098 Not tainted syzkaller #0 PREEMPT(full) [ 163.657968][T11954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.657974][T11954] Call Trace: [ 163.657978][T11954] [ 163.657982][T11954] dump_stack_lvl+0x16c/0x1f0 [ 163.658000][T11954] should_fail_ex+0x512/0x640 [ 163.658013][T11954] ? fs_reclaim_acquire+0xae/0x150 [ 163.658027][T11954] should_failslab+0xc2/0x120 [ 163.658040][T11954] __kmalloc_noprof+0xdd/0x880 [ 163.658054][T11954] ? tomoyo_encode2+0x100/0x3e0 [ 163.658069][T11954] ? tomoyo_encode2+0x100/0x3e0 [ 163.658080][T11954] tomoyo_encode2+0x100/0x3e0 [ 163.658094][T11954] tomoyo_encode+0x29/0x50 [ 163.658105][T11954] tomoyo_realpath_from_path+0x18f/0x6e0 [ 163.658119][T11954] ? tomoyo_profile+0x47/0x60 [ 163.658134][T11954] tomoyo_path_number_perm+0x245/0x580 [ 163.658143][T11954] ? tomoyo_path_number_perm+0x237/0x580 [ 163.658154][T11954] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 163.658166][T11954] ? find_held_lock+0x2b/0x80 [ 163.658190][T11954] ? find_held_lock+0x2b/0x80 [ 163.658203][T11954] ? hook_file_ioctl_common+0x145/0x410 [ 163.658220][T11954] ? __fget_files+0x20e/0x3c0 [ 163.658233][T11954] security_file_ioctl+0x9b/0x240 [ 163.658246][T11954] __x64_sys_ioctl+0xb7/0x210 [ 163.658262][T11954] do_syscall_64+0xcd/0xfa0 [ 163.658273][T11954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.658284][T11954] RIP: 0033:0x7ff7a3d8f7c9 [ 163.658293][T11954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.658304][T11954] RSP: 002b:00007ff7a4b62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.658314][T11954] RAX: ffffffffffffffda RBX: 00007ff7a3fe5fa0 RCX: 00007ff7a3d8f7c9 [ 163.658321][T11954] RDX: 0000200000000240 RSI: 0000000000008946 RDI: 0000000000000003 [ 163.658327][T11954] RBP: 00007ff7a4b62090 R08: 0000000000000000 R09: 0000000000000000 [ 163.658333][T11954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.658339][T11954] R13: 00007ff7a3fe6038 R14: 00007ff7a3fe5fa0 R15: 00007ffc2edf22d8 [ 163.658352][T11954] [ 163.658362][T11954] ERROR: Out of memory at tomoyo_realpath_from_path. [ 163.730210][ T5946] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 163.743853][T11956] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 163.780814][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 163.788335][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 163.791728][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 163.797467][ T5946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.801125][ T5946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.885490][T11982] binder: 11981:11982 ioctl 40046210 0 returned -14 [ 163.922224][T11988] FAULT_INJECTION: forcing a failure. [ 163.922224][T11988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.926383][T11988] CPU: 1 UID: 0 PID: 11988 Comm: syz.7.2109 Not tainted syzkaller #0 PREEMPT(full) [ 163.926417][T11988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.926425][T11988] Call Trace: [ 163.926432][T11988] [ 163.926437][T11988] dump_stack_lvl+0x16c/0x1f0 [ 163.926451][T11988] should_fail_ex+0x512/0x640 [ 163.926466][T11988] _copy_from_user+0x2e/0xd0 [ 163.926481][T11988] get_user_ifreq+0xf1/0x250 [ 163.926498][T11988] sock_do_ioctl+0x16b/0x280 [ 163.926508][T11988] ? __pfx_sock_do_ioctl+0x10/0x10 [ 163.926521][T11988] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 163.926537][T11988] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 163.926553][T11988] sock_ioctl+0x227/0x6b0 [ 163.926564][T11988] ? __pfx_sock_ioctl+0x10/0x10 [ 163.926573][T11988] ? hook_file_ioctl_common+0x145/0x410 [ 163.926591][T11988] ? selinux_file_ioctl+0x180/0x270 [ 163.926602][T11988] ? selinux_file_ioctl+0xb4/0x270 [ 163.926613][T11988] ? __pfx_sock_ioctl+0x10/0x10 [ 163.926624][T11988] __x64_sys_ioctl+0x18e/0x210 [ 163.926640][T11988] do_syscall_64+0xcd/0xfa0 [ 163.926651][T11988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.926662][T11988] RIP: 0033:0x7ff753d8f7c9 [ 163.926671][T11988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.926681][T11988] RSP: 002b:00007ff754cbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.926692][T11988] RAX: ffffffffffffffda RBX: 00007ff753fe5fa0 RCX: 00007ff753d8f7c9 [ 163.926698][T11988] RDX: 0000200000000240 RSI: 0000000000008946 RDI: 0000000000000003 [ 163.926704][T11988] RBP: 00007ff754cbb090 R08: 0000000000000000 R09: 0000000000000000 [ 163.926710][T11988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.926715][T11988] R13: 00007ff753fe6038 R14: 00007ff753fe5fa0 R15: 00007ffd320e7678 [ 163.926730][T11988] [ 163.941923][T11961] chnl_net:caif_netlink_parms(): no params data found [ 164.033254][ T5946] Bluetooth: unknown link type 251 [ 164.035257][ T5946] Bluetooth: hci0: connection err: -111 [ 164.082019][T12003] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2113'. [ 164.106724][T11961] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.109999][T11961] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.114089][T11961] bridge_slave_0: entered allmulticast mode [ 164.121958][T11961] bridge_slave_0: entered promiscuous mode [ 164.128740][T11961] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.132977][T11961] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.136187][T11961] bridge_slave_1: entered allmulticast mode [ 164.142593][T11961] bridge_slave_1: entered promiscuous mode [ 164.159386][T11961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.165323][T11961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.179974][T11961] team0: Port device team_slave_0 added [ 164.183252][T11961] team0: Port device team_slave_1 added [ 164.197037][T11961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.199854][T11961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.210788][T11961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.215361][T11961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.217650][T11961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.226088][T11961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.248481][T11961] hsr_slave_0: entered promiscuous mode [ 164.251583][T11961] hsr_slave_1: entered promiscuous mode [ 164.253655][T11961] debugfs: 'hsr0' already exists in 'hsr' [ 164.255438][T11961] Cannot create hsr debugfs directory [ 164.315433][T12018] Trying to write to read-only block-device nullb0 [ 164.401135][T12027] fuse: Unknown parameter 'fd-0x0000000000000003' [ 164.427811][T11961] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 164.437943][T11961] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 164.442282][T11961] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 164.446607][T11961] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 164.449459][T12030] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 164.469691][T11961] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.471040][T12040] netlink: 'syz.1.2126': attribute type 21 has an invalid length. [ 164.472632][T11961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.478230][T11961] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.480636][T11961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.485892][T12040] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2126'. [ 164.546043][T11961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.560796][ T1198] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.565051][ T1198] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.569921][T12047] FAULT_INJECTION: forcing a failure. [ 164.569921][T12047] name failslab, interval 1, probability 0, space 0, times 0 [ 164.576061][T12047] CPU: 2 UID: 0 PID: 12047 Comm: syz.1.2129 Not tainted syzkaller #0 PREEMPT(full) [ 164.576117][T12047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.576124][T12047] Call Trace: [ 164.576130][T12047] [ 164.576134][T12047] dump_stack_lvl+0x16c/0x1f0 [ 164.576148][T12047] should_fail_ex+0x512/0x640 [ 164.576162][T12047] ? __kmalloc_cache_noprof+0x5f/0x780 [ 164.576178][T12047] should_failslab+0xc2/0x120 [ 164.576191][T12047] __kmalloc_cache_noprof+0x72/0x780 [ 164.576206][T12047] ? dev_ethtool+0x1a2/0x5bc0 [ 164.576221][T12047] ? dev_ethtool+0x1a2/0x5bc0 [ 164.576231][T12047] dev_ethtool+0x1a2/0x5bc0 [ 164.576242][T12047] ? __kernel_text_address+0xd/0x40 [ 164.576254][T12047] ? unwind_get_return_address+0x59/0xa0 [ 164.576267][T12047] ? arch_stack_walk+0xa6/0x100 [ 164.576282][T12047] ? __pfx_dev_ethtool+0x10/0x10 [ 164.576293][T12047] ? stack_trace_save+0x8e/0xc0 [ 164.576308][T12047] ? __pfx_stack_trace_save+0x10/0x10 [ 164.576323][T12047] ? stack_depot_save_flags+0x29/0x9c0 [ 164.576335][T12047] ? __lock_acquire+0xb8a/0x1c90 [ 164.576348][T12047] ? __lock_acquire+0x622/0x1c90 [ 164.576364][T12047] ? find_held_lock+0x2b/0x80 [ 164.576377][T12047] ? avc_has_extended_perms+0x33a/0x1090 [ 164.576397][T12047] ? __lock_acquire+0x622/0x1c90 [ 164.576434][T12047] ? find_held_lock+0x2b/0x80 [ 164.576449][T12047] ? dev_load+0x8e/0x240 [ 164.576465][T12047] dev_ioctl+0x290/0x10e0 [ 164.576480][T12047] sock_do_ioctl+0x19d/0x280 [ 164.576491][T12047] ? __pfx_sock_do_ioctl+0x10/0x10 [ 164.576504][T12047] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 164.576519][T12047] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 164.576534][T12047] sock_ioctl+0x227/0x6b0 [ 164.576545][T12047] ? __pfx_sock_ioctl+0x10/0x10 [ 164.576554][T12047] ? hook_file_ioctl_common+0x145/0x410 [ 164.576572][T12047] ? selinux_file_ioctl+0x180/0x270 [ 164.576583][T12047] ? selinux_file_ioctl+0xb4/0x270 [ 164.576595][T12047] ? __pfx_sock_ioctl+0x10/0x10 [ 164.576606][T12047] __x64_sys_ioctl+0x18e/0x210 [ 164.576621][T12047] do_syscall_64+0xcd/0xfa0 [ 164.576632][T12047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.576643][T12047] RIP: 0033:0x7ff7a3d8f7c9 [ 164.576652][T12047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.576663][T12047] RSP: 002b:00007ff7a4b62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.576673][T12047] RAX: ffffffffffffffda RBX: 00007ff7a3fe5fa0 RCX: 00007ff7a3d8f7c9 [ 164.576680][T12047] RDX: 0000200000000240 RSI: 0000000000008946 RDI: 0000000000000003 [ 164.576686][T12047] RBP: 00007ff7a4b62090 R08: 0000000000000000 R09: 0000000000000000 [ 164.576692][T12047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.576697][T12047] R13: 00007ff7a3fe6038 R14: 00007ff7a3fe5fa0 R15: 00007ffc2edf22d8 [ 164.576711][T12047] [ 164.584577][T11961] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.622163][T12051] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2131'. [ 164.704207][T12052] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2131'. [ 164.709852][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.713323][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.722175][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.725069][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.739133][T12056] fuse: Unknown parameter 'use00000000000000000000' [ 164.745302][ T40] kauditd_printk_skb: 229 callbacks suppressed [ 164.745319][ T40] audit: type=1400 audit(1764464165.144:3876): avc: denied { unlink } for pid=12055 comm="syz.7.2133" name="#50" dev="tmpfs" ino=416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 164.764378][ T40] audit: type=1400 audit(1764464165.144:3877): avc: denied { mount } for pid=12055 comm="syz.7.2133" name="/" dev="overlay" ino=411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 164.778313][ T40] audit: type=1400 audit(1764464165.164:3878): avc: denied { unmount } for pid=11335 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 164.783022][ T5946] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 164.787513][ T40] audit: type=1400 audit(1764464165.174:3879): avc: denied { bind } for pid=12058 comm="syz.1.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 164.800473][ T40] audit: type=1400 audit(1764464165.174:3880): avc: denied { write } for pid=12058 comm="syz.1.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 164.809045][ T5942] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 164.811972][ T40] audit: type=1400 audit(1764464165.174:3881): avc: denied { read } for pid=12058 comm="syz.1.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 164.818274][ T40] audit: type=1400 audit(1764464165.184:3882): avc: denied { listen } for pid=12058 comm="syz.1.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.834446][ T40] audit: type=1400 audit(1764464165.184:3883): avc: denied { read write } for pid=11335 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.845263][ T40] audit: type=1400 audit(1764464165.184:3884): avc: denied { open } for pid=11335 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.855609][ T40] audit: type=1400 audit(1764464165.184:3885): avc: denied { ioctl } for pid=11335 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.904815][T11961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.957564][T12072] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 165.040597][T11961] veth0_vlan: entered promiscuous mode [ 165.045608][T11961] veth1_vlan: entered promiscuous mode [ 165.076059][T11961] veth0_macvtap: entered promiscuous mode [ 165.080734][T11961] veth1_macvtap: entered promiscuous mode [ 165.091573][T11961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.097859][T11961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.105948][ T1149] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.112020][ T1149] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.114727][ T1149] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.128061][ T1149] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.169330][ T6216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.176504][ T6216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.181264][ T5946] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 165.202976][ T6210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.205839][ T6210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.294598][T12101] fuse: Unknown parameter 'user_i00000000000000000000' [ 165.346221][T12104] netlink: 'syz.7.2148': attribute type 4 has an invalid length. [ 165.401457][ T5946] Bluetooth: hci3: command 0x0409 tx timeout [ 165.544474][T12113] mkiss: ax0: crc mode is auto. [ 165.551984][ T5946] Bluetooth: hci4: command tx timeout [ 165.556181][ T5942] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 165.560476][ T5942] CPU: 0 UID: 0 PID: 5942 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 165.560505][ T5942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.560519][ T5942] Workqueue: hci1 hci_rx_work [ 165.560551][ T5942] Call Trace: [ 165.560558][ T5942] [ 165.560568][ T5942] dump_stack_lvl+0x16c/0x1f0 [ 165.560588][ T5942] sysfs_warn_dup+0x7f/0xa0 [ 165.560618][ T5942] sysfs_create_dir_ns+0x24b/0x2b0 [ 165.560641][ T5942] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 165.560666][ T5942] ? find_held_lock+0x2b/0x80 [ 165.560695][ T5942] ? do_raw_spin_unlock+0x172/0x230 [ 165.560717][ T5942] kobject_add_internal+0x2c4/0x9b0 [ 165.560751][ T5942] kobject_add+0x16e/0x240 [ 165.560772][ T5942] ? __pfx_kobject_add+0x10/0x10 [ 165.560796][ T5942] ? do_raw_spin_unlock+0x172/0x230 [ 165.560820][ T5942] ? kobject_put+0xab/0x5a0 [ 165.560845][ T5942] device_add+0x288/0x1aa0 [ 165.560871][ T5942] ? __pfx_dev_set_name+0x10/0x10 [ 165.560897][ T5942] ? __pfx_device_add+0x10/0x10 [ 165.560920][ T5942] ? mgmt_send_event_skb+0x2fb/0x460 [ 165.560951][ T5942] hci_conn_add_sysfs+0x17e/0x230 [ 165.560970][ T5942] le_conn_complete_evt+0x1260/0x2150 [ 165.561002][ T5942] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 165.561028][ T5942] ? hci_event_packet+0x459/0x11c0 [ 165.561063][ T5942] hci_le_conn_complete_evt+0x23c/0x370 [ 165.561096][ T5942] hci_le_meta_evt+0x357/0x5e0 [ 165.561124][ T5942] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 165.561155][ T5942] hci_event_packet+0x685/0x11c0 [ 165.561181][ T5942] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 165.561210][ T5942] ? __pfx_hci_event_packet+0x10/0x10 [ 165.561233][ T5942] ? kcov_remote_start+0x3c9/0x6d0 [ 165.561276][ T5942] ? lockdep_hardirqs_on+0x7c/0x110 [ 165.561303][ T5942] hci_rx_work+0x2c9/0xeb0 [ 165.561330][ T5942] process_one_work+0x9cf/0x1b70 [ 165.561359][ T5942] ? __pfx_process_one_work+0x10/0x10 [ 165.561386][ T5942] ? assign_work+0x1a0/0x250 [ 165.561407][ T5942] worker_thread+0x6c8/0xf10 [ 165.561439][ T5942] ? __pfx_worker_thread+0x10/0x10 [ 165.561459][ T5942] kthread+0x3c5/0x780 [ 165.561478][ T5942] ? __pfx_kthread+0x10/0x10 [ 165.561495][ T5942] ? rcu_is_watching+0x12/0xc0 [ 165.561515][ T5942] ? __pfx_kthread+0x10/0x10 [ 165.561534][ T5942] ret_from_fork+0x675/0x7d0 [ 165.561549][ T5942] ? __pfx_kthread+0x10/0x10 [ 165.561568][ T5942] ret_from_fork_asm+0x1a/0x30 [ 165.561606][ T5942] [ 165.619697][T12118] loop2: detected capacity change from 0 to 7 [ 165.621701][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.624661][ T5942] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 165.626560][ T9253] Dev loop2: unable to read RDB block 7 [ 165.627618][ T5942] Bluetooth: hci1: failed to register connection device [ 165.629512][ T9253] loop2: AHDI p1 p2 p3 [ 165.629542][ T9253] loop2: partition table partially beyond EOD, truncated [ 165.629739][ T9253] loop2: p1 start 1818582900 is beyond EOD, truncated [ 165.681241][ T9253] loop2: p3 start 335544320 is beyond EOD, truncated [ 165.688500][T12118] Dev loop2: unable to read RDB block 7 [ 165.690832][T12118] loop2: AHDI p1 p2 p3 [ 165.692724][T12118] loop2: partition table partially beyond EOD, truncated [ 165.696191][T12118] loop2: p1 start 1818582900 is beyond EOD, truncated [ 165.698506][T12118] loop2: p3 start 335544320 is beyond EOD, truncated [ 165.769093][T12124] tmpfs: Bad value for 'huge' [ 165.825371][T12132] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 165.849466][T12136] binder: BINDER_SET_CONTEXT_MGR already set [ 165.852185][T12136] binder: 12134:12136 ioctl 4018620d 200000004a80 returned -16 [ 165.855864][T12136] binder: BINDER_SET_CONTEXT_MGR already set [ 165.858693][T12136] binder: 12134:12136 ioctl 4018620d 200000004a80 returned -16 [ 165.859402][T12135] binder_alloc: binder_alloc_mmap_handler: 12134 200000ffd000-200001000000 already mapped failed -16 [ 165.862787][T12136] binder: BINDER_SET_CONTEXT_MGR already set [ 165.866036][T12135] binder_alloc: binder_alloc_mmap_handler: 12134 200000ffd000-200001000000 already mapped failed -16 [ 165.868097][T12136] binder: 12134:12136 ioctl 4018620d 200000004a80 returned -16 [ 165.876671][T12136] binder: BINDER_SET_CONTEXT_MGR already set [ 165.877201][T12135] binder_alloc: binder_alloc_mmap_handler: 12134 200000ffd000-200001000000 already mapped failed -16 [ 165.879550][T12136] binder: 12134:12136 ioctl 4018620d 200000004a80 returned -16 [ 165.881427][ T5942] Bluetooth: hci1: command tx timeout [ 165.919762][T12147] loop2: detected capacity change from 0 to 7 [ 165.923806][T12147] Dev loop2: unable to read RDB block 7 [ 165.926044][T12147] loop2: AHDI p1 p2 p3 [ 165.927720][T12147] loop2: partition table partially beyond EOD, truncated [ 165.927936][ T34] IPVS: starting estimator thread 0... [ 165.931104][T12147] loop2: p1 start 1818582900 is beyond EOD, truncated [ 165.935819][T12147] loop2: p3 start 335544320 is beyond EOD, truncated [ 166.026369][T12160] netlink: 'syz.1.2168': attribute type 33 has an invalid length. [ 166.028996][T12160] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2168'. [ 166.031540][T12148] IPVS: using max 43 ests per chain, 103200 per kthread [ 166.054571][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2168'. [ 166.057840][T12160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2168'. [ 166.058038][T12165] 9pnet_fd: p9_fd_create_unix (12165): problem connecting socket: ./file0: -111 [ 166.066712][T12168] netlink: 'syz.7.2170': attribute type 1 has an invalid length. [ 166.124711][T12176] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 166.129694][T12168] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 166.135865][T12168] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 166.146066][T12181] FAULT_INJECTION: forcing a failure. [ 166.146066][T12181] name failslab, interval 1, probability 0, space 0, times 0 [ 166.150422][T12181] CPU: 2 UID: 0 PID: 12181 Comm: syz.1.2174 Not tainted syzkaller #0 PREEMPT(full) [ 166.150437][T12181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 166.150444][T12181] Call Trace: [ 166.150448][T12181] [ 166.150453][T12181] dump_stack_lvl+0x16c/0x1f0 [ 166.150467][T12181] should_fail_ex+0x512/0x640 [ 166.150480][T12181] ? __kmalloc_cache_node_noprof+0x62/0x7a0 [ 166.150493][T12181] should_failslab+0xc2/0x120 [ 166.150506][T12181] __kmalloc_cache_node_noprof+0x75/0x7a0 [ 166.150517][T12181] ? __lock_acquire+0xb8a/0x1c90 [ 166.150526][T12181] ? __get_vm_area_node+0x101/0x330 [ 166.150541][T12181] ? __get_vm_area_node+0x101/0x330 [ 166.150552][T12181] __get_vm_area_node+0x101/0x330 [ 166.150567][T12181] __vmalloc_node_range_noprof+0x271/0x1480 [ 166.150581][T12181] ? dev_ethtool+0x1b79/0x5bc0 [ 166.150595][T12181] ? __lock_acquire+0xb8a/0x1c90 [ 166.150605][T12181] ? dev_ethtool+0x1b79/0x5bc0 [ 166.150619][T12181] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 166.150634][T12181] ? __might_fault+0xe3/0x190 [ 166.150649][T12181] ? __might_fault+0xe3/0x190 [ 166.150663][T12181] ? __might_fault+0x13b/0x190 [ 166.150679][T12181] ? dev_ethtool+0x1b79/0x5bc0 [ 166.150690][T12181] __vmalloc_node_noprof+0xad/0xf0 [ 166.150703][T12181] ? dev_ethtool+0x1b79/0x5bc0 [ 166.150715][T12181] dev_ethtool+0x1b79/0x5bc0 [ 166.150737][T12181] ? __pfx_dev_ethtool+0x10/0x10 [ 166.150751][T12181] ? __lock_acquire+0xb8a/0x1c90 [ 166.150763][T12181] ? rcu_is_watching+0x12/0xc0 [ 166.150778][T12181] ? do_raw_spin_lock+0x12c/0x2b0 [ 166.150791][T12181] ? find_held_lock+0x2b/0x80 [ 166.150805][T12181] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 166.150821][T12181] ? lockdep_hardirqs_on+0x7c/0x110 [ 166.150831][T12181] ? find_held_lock+0x2b/0x80 [ 166.150844][T12181] ? avc_has_extended_perms+0x33a/0x1090 [ 166.150865][T12181] ? __lock_acquire+0x622/0x1c90 [ 166.150880][T12181] ? find_held_lock+0x2b/0x80 [ 166.150893][T12181] ? dev_load+0x8e/0x240 [ 166.150909][T12181] dev_ioctl+0x290/0x10e0 [ 166.150923][T12181] sock_do_ioctl+0x19d/0x280 [ 166.150934][T12181] ? __pfx_sock_do_ioctl+0x10/0x10 [ 166.150947][T12181] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 166.150962][T12181] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 166.150980][T12181] sock_ioctl+0x227/0x6b0 [ 166.150991][T12181] ? __pfx_sock_ioctl+0x10/0x10 [ 166.151000][T12181] ? hook_file_ioctl_common+0x145/0x410 [ 166.151018][T12181] ? selinux_file_ioctl+0x180/0x270 [ 166.151029][T12181] ? selinux_file_ioctl+0xb4/0x270 [ 166.151102][T12181] ? __pfx_sock_ioctl+0x10/0x10 [ 166.151114][T12181] __x64_sys_ioctl+0x18e/0x210 [ 166.151131][T12181] do_syscall_64+0xcd/0xfa0 [ 166.151143][T12181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.151154][T12181] RIP: 0033:0x7ff7a3d8f7c9 [ 166.151163][T12181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.151173][T12181] RSP: 002b:00007ff7a4b62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.151184][T12181] RAX: ffffffffffffffda RBX: 00007ff7a3fe5fa0 RCX: 00007ff7a3d8f7c9 [ 166.151190][T12181] RDX: 0000200000000240 RSI: 0000000000008946 RDI: 0000000000000003 [ 166.151197][T12181] RBP: 00007ff7a4b62090 R08: 0000000000000000 R09: 0000000000000000 [ 166.151203][T12181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.151208][T12181] R13: 00007ff7a3fe6038 R14: 00007ff7a3fe5fa0 R15: 00007ffc2edf22d8 [ 166.151222][T12181] [ 166.271437][T12181] syz.1.2174: vmalloc error: size 240, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 166.275152][T12183] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2175'. [ 166.276636][T12181] CPU: 2 UID: 0 PID: 12181 Comm: syz.1.2174 Not tainted syzkaller #0 PREEMPT(full) [ 166.276650][T12181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 166.276657][T12181] Call Trace: [ 166.276662][T12181] [ 166.276667][T12181] dump_stack_lvl+0x16c/0x1f0 [ 166.276680][T12181] warn_alloc+0x248/0x3a0 [ 166.276698][T12181] ? __pfx_warn_alloc+0x10/0x10 [ 166.276712][T12181] ? rcu_is_watching+0x12/0xc0 [ 166.276728][T12181] ? trace_kmalloc+0x2b/0xd0 [ 166.276740][T12181] ? __get_vm_area_node+0x101/0x330 [ 166.276754][T12181] ? __kasan_kmalloc+0x8a/0xb0 [ 166.276766][T12181] ? __get_vm_area_node+0x208/0x330 [ 166.276781][T12181] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 166.276801][T12181] ? __lock_acquire+0xb8a/0x1c90 [ 166.276811][T12181] ? dev_ethtool+0x1b79/0x5bc0 [ 166.276827][T12181] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 166.276842][T12181] ? __might_fault+0xe3/0x190 [ 166.276858][T12181] ? __might_fault+0xe3/0x190 [ 166.276872][T12181] ? __might_fault+0x13b/0x190 [ 166.276888][T12181] ? dev_ethtool+0x1b79/0x5bc0 [ 166.276898][T12181] __vmalloc_node_noprof+0xad/0xf0 [ 166.276911][T12181] ? dev_ethtool+0x1b79/0x5bc0 [ 166.276924][T12181] dev_ethtool+0x1b79/0x5bc0 [ 166.276940][T12181] ? __pfx_dev_ethtool+0x10/0x10 [ 166.276954][T12181] ? __lock_acquire+0xb8a/0x1c90 [ 166.276965][T12181] ? rcu_is_watching+0x12/0xc0 [ 166.276980][T12181] ? do_raw_spin_lock+0x12c/0x2b0 [ 166.276992][T12181] ? find_held_lock+0x2b/0x80 [ 166.277010][T12181] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 166.277026][T12181] ? lockdep_hardirqs_on+0x7c/0x110 [ 166.277036][T12181] ? find_held_lock+0x2b/0x80 [ 166.277049][T12181] ? avc_has_extended_perms+0x33a/0x1090 [ 166.277069][T12181] ? __lock_acquire+0x622/0x1c90 [ 166.277085][T12181] ? find_held_lock+0x2b/0x80 [ 166.277098][T12181] ? dev_load+0x8e/0x240 [ 166.277114][T12181] dev_ioctl+0x290/0x10e0 [ 166.277128][T12181] sock_do_ioctl+0x19d/0x280 [ 166.277139][T12181] ? __pfx_sock_do_ioctl+0x10/0x10 [ 166.277152][T12181] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 166.277167][T12181] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 166.277183][T12181] sock_ioctl+0x227/0x6b0 [ 166.277193][T12181] ? __pfx_sock_ioctl+0x10/0x10 [ 166.277202][T12181] ? hook_file_ioctl_common+0x145/0x410 [ 166.277220][T12181] ? selinux_file_ioctl+0x180/0x270 [ 166.277231][T12181] ? selinux_file_ioctl+0xb4/0x270 [ 166.277243][T12181] ? __pfx_sock_ioctl+0x10/0x10 [ 166.277254][T12181] __x64_sys_ioctl+0x18e/0x210 [ 166.277270][T12181] do_syscall_64+0xcd/0xfa0 [ 166.277281][T12181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.277292][T12181] RIP: 0033:0x7ff7a3d8f7c9 [ 166.277300][T12181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.277311][T12181] RSP: 002b:00007ff7a4b62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.277321][T12181] RAX: ffffffffffffffda RBX: 00007ff7a3fe5fa0 RCX: 00007ff7a3d8f7c9 [ 166.277327][T12181] RDX: 0000200000000240 RSI: 0000000000008946 RDI: 0000000000000003 [ 166.277333][T12181] RBP: 00007ff7a4b62090 R08: 0000000000000000 R09: 0000000000000000 [ 166.277339][T12181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.277345][T12181] R13: 00007ff7a3fe6038 R14: 00007ff7a3fe5fa0 R15: 00007ffc2edf22d8 [ 166.277359][T12181] [ 166.277363][T12181] Mem-Info: [ 166.404462][T12181] active_anon:25350 inactive_anon:0 isolated_anon:0 [ 166.404462][T12181] active_file:15433 inactive_file:40706 isolated_file:0 [ 166.404462][T12181] unevictable:1768 dirty:318 writeback:0 [ 166.404462][T12181] slab_reclaimable:8849 slab_unreclaimable:71883 [ 166.404462][T12181] mapped:30048 shmem:18796 pagetables:1106 [ 166.404462][T12181] sec_pagetables:311 bounce:0 [ 166.404462][T12181] kernel_misc_reclaimable:0 [ 166.404462][T12181] free:424641 free_pcp:19829 free_cma:0 [ 166.420444][T12181] Node 0 active_anon:101400kB inactive_anon:0kB active_file:61684kB inactive_file:162628kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:120164kB dirty:1244kB writeback:0kB shmem:71648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13840kB pagetables:4236kB sec_pagetables:1244kB all_unreclaimable? no Balloon:0kB [ 166.433961][T12181] Node 1 active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:196kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:28kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 166.444355][T12181] Node 0 DMA free:15192kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.456636][T12181] lowmem_reserve[]: 0 1239 1239 1239 1239 [ 166.458762][T12181] Node 0 DMA32 free:86444kB boost:0kB min:27580kB low:34472kB high:41364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:101400kB inactive_anon:0kB active_file:61684kB inactive_file:162620kB unevictable:3536kB writepending:1244kB zspages:0kB present:2080628kB managed:1269452kB mlocked:0kB bounce:0kB free_pcp:55372kB local_pcp:23104kB free_cma:0kB [ 166.472837][T12181] lowmem_reserve[]: 0 0 0 0 0 [ 166.474703][T12181] Node 1 Normal free:1596928kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:196kB unevictable:3536kB writepending:28kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:23944kB local_pcp:8500kB free_cma:0kB [ 166.487961][T12181] lowmem_reserve[]: 0 0 0 0 0 [ 166.489876][T12181] Node 0 DMA: 10*4kB (UM) 12*8kB (UM) 9*16kB (UM) 10*32kB (U) 8*64kB (UM) 10*128kB (UM) 6*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 2*2048kB (M) 1*4096kB (U) = 15192kB [ 166.496518][T12181] Node 0 DMA32: 35*4kB (UE) 60*8kB (UE) 278*16kB (UME) 169*32kB (UME) 121*64kB (UME) 144*128kB (UME) 66*256kB (ME) 32*512kB (UME) 8*1024kB (M) 4*2048kB (M) 0*4096kB = 86316kB [ 166.503837][T12181] Node 1 Normal: 8*4kB (UE) 24*8kB (UME) 16*16kB (UME) 87*32kB (UME) 29*64kB (UME) 16*128kB (UE) 4*256kB (UME) 5*512kB (UME) 3*1024kB (UE) 3*2048kB (UME) 385*4096kB (UM) = 1596928kB [ 166.511528][T12181] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.515322][T12181] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.519217][T12181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.523299][T12181] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.527129][T12181] 74933 total pagecache pages [ 166.529137][T12181] 0 pages in swap cache [ 166.530861][T12181] Free swap = 124996kB [ 166.532710][T12181] Total swap = 124996kB [ 166.534386][T12181] 1048443 pages RAM [ 166.535998][T12181] 0 pages HighMem/MovableOnly [ 166.537843][T12181] 281767 pages reserved [ 166.539665][T12181] 0 pages cma reserved [ 166.547574][T12182] gretap1: entered promiscuous mode [ 166.551699][T12182] bond1: (slave gretap1): making interface the new active one [ 166.554656][T12182] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 166.564306][T12185] macvlan2: entered promiscuous mode [ 166.566544][T12185] macvlan2: entered allmulticast mode [ 166.569287][T12185] bond1: entered promiscuous mode [ 166.572477][T12185] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 166.577766][T12185] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 166.584174][T12185] bond1: left promiscuous mode [ 166.603174][T12186] bond0: (slave wg0): Error: Device can not be enslaved while up [ 166.692202][T12198] openvswitch: netlink: IP tunnel dst address not specified [ 166.845625][ T5942] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 166.932784][ T10] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 167.091516][ T10] usb 12-1: Using ep0 maxpacket: 32 [ 167.099211][ T10] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 167.105852][ T10] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 167.110554][ T10] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 167.113713][ T10] usb 12-1: Product: syz [ 167.115254][ T10] usb 12-1: Manufacturer: syz [ 167.117490][ T10] usb 12-1: SerialNumber: syz [ 167.121046][ T10] usb 12-1: config 0 descriptor?? [ 167.127817][T12199] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 167.132180][ T10] hub 12-1:0.0: bad descriptor, ignoring hub [ 167.134745][ T10] hub 12-1:0.0: probe with driver hub failed with error -5 [ 167.213035][T12224] smc: net device bond0 applied user defined pnetid SYZ2 [ 167.268176][T12229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.397409][T12199] loop3: detected capacity change from 0 to 7 [ 167.400229][T12199] Dev loop3: unable to read RDB block 7 [ 167.402428][T12199] loop3: unable to read partition table [ 167.404335][T12199] loop3: partition table beyond EOD, truncated [ 167.406308][T12199] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 167.410285][T12199] veth0_vlan: left promiscuous mode [ 167.412101][T12199] veth0_vlan: entered allmulticast mode [ 167.414472][T12199] veth0_vlan: entered promiscuous mode [ 167.419979][T12237] zonefs (md0) ERROR: Not a zoned block device [ 167.457675][ T5946] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 167.471457][ T5946] Bluetooth: hci3: command 0x0409 tx timeout [ 167.493254][T12241] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 167.561803][ T1459] usb 12-1: USB disconnect, device number 3 [ 167.631816][ T5946] Bluetooth: hci4: command tx timeout [ 167.656748][T12246] binder: BINDER_SET_CONTEXT_MGR already set [ 167.658809][T12246] binder: 12245:12246 ioctl 4018620d 200000000040 returned -16 [ 167.768795][T12250] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 167.847090][T12252] Invalid logical block size (18) [ 167.915571][ T5298] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 167.952446][ T5298] Bluetooth: hci1: command tx timeout [ 168.064168][T12265] binder: 12264:12265 unknown command 0 [ 168.065992][T12265] binder: 12264:12265 ioctl c0306201 200000000080 returned -22 [ 168.101206][T12268] netlink: 'syz.7.2206': attribute type 3 has an invalid length. [ 168.104234][T12268] netlink: 'syz.7.2206': attribute type 1 has an invalid length. [ 168.106689][T12268] netlink: 216 bytes leftover after parsing attributes in process `syz.7.2206'. [ 168.110202][T12268] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2206'. [ 168.235735][ T5298] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 168.289158][T12284] Invalid logical block size (151) [ 168.337242][T12288] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 168.374115][T12292] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2217'. [ 168.377882][T12292] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2217'. [ 168.384623][T12292] ufs: You didn't specify the type of your ufs filesystem [ 168.384623][T12292] [ 168.384623][T12292] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 168.384623][T12292] [ 168.384623][T12292] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 168.395824][T12292] ufs: ufstype=old is supported read-only [ 168.485417][ T5939] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 168.512304][T12304] Invalid logical block size (201) [ 168.558858][T12308] fuse: Bad value for 'user_id' [ 168.561005][T12308] fuse: Bad value for 'user_id' [ 168.657160][T12316] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 168.661841][T12316] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 168.801907][T12325] FAULT_INJECTION: forcing a failure. [ 168.801907][T12325] name failslab, interval 1, probability 0, space 0, times 0 [ 168.805931][T12325] CPU: 2 UID: 0 PID: 12325 Comm: syz.6.2230 Not tainted syzkaller #0 PREEMPT(full) [ 168.805946][T12325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 168.805952][T12325] Call Trace: [ 168.805957][T12325] [ 168.805961][T12325] dump_stack_lvl+0x16c/0x1f0 [ 168.805975][T12325] should_fail_ex+0x512/0x640 [ 168.805988][T12325] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 168.806006][T12325] should_failslab+0xc2/0x120 [ 168.806019][T12325] kmem_cache_alloc_noprof+0x75/0x6e0 [ 168.806035][T12325] ? getname_flags.part.0+0x4c/0x550 [ 168.806054][T12325] ? getname_flags.part.0+0x4c/0x550 [ 168.806067][T12325] getname_flags.part.0+0x4c/0x550 [ 168.806083][T12325] getname_flags+0x93/0xf0 [ 168.806094][T12325] do_sys_openat2+0xb8/0x1d0 [ 168.806108][T12325] ? __pfx_do_sys_openat2+0x10/0x10 [ 168.806123][T12325] ? __fget_files+0x20e/0x3c0 [ 168.806137][T12325] __x64_sys_openat+0x174/0x210 [ 168.806151][T12325] ? __pfx___x64_sys_openat+0x10/0x10 [ 168.806164][T12325] ? ksys_write+0x1ac/0x250 [ 168.806179][T12325] do_syscall_64+0xcd/0xfa0 [ 168.806190][T12325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.806202][T12325] RIP: 0033:0x7f554658e010 [ 168.806211][T12325] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 168.806222][T12325] RSP: 002b:00007f55447f5f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 168.806232][T12325] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f554658e010 [ 168.806239][T12325] RDX: 0000000000000000 RSI: 00007f554661407e RDI: 00000000ffffff9c [ 168.806245][T12325] RBP: 00007f554661407e R08: 0000000000000000 R09: 0000000000000000 [ 168.806252][T12325] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 168.806258][T12325] R13: 00007f55467e6038 R14: 00007f55467e5fa0 R15: 00007ffc86749e98 [ 168.806272][T12325] [ 168.831092][T12330] netlink: 'syz.7.2227': attribute type 4 has an invalid length. [ 168.895798][T12330] netlink: 17 bytes leftover after parsing attributes in process `syz.7.2227'. [ 168.937116][ T5298] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 168.985729][T12347] libceph: resolve ' [ 168.985729][T12347] -&fYǝa2i [ 168.985729][T12347] .?&*&' (ret=-3): failed [ 169.060944][T12363] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2244'. [ 169.066660][T12363] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2244'. [ 169.070430][T12364] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2244'. [ 169.074975][T12364] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2244'. [ 169.162006][T12372] FAULT_INJECTION: forcing a failure. [ 169.162006][T12372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.166865][T12372] CPU: 3 UID: 0 PID: 12372 Comm: syz.8.2245 Not tainted syzkaller #0 PREEMPT(full) [ 169.166880][T12372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 169.166888][T12372] Call Trace: [ 169.166892][T12372] [ 169.166896][T12372] dump_stack_lvl+0x16c/0x1f0 [ 169.166911][T12372] should_fail_ex+0x512/0x640 [ 169.166928][T12372] strncpy_from_user+0x3b/0x2e0 [ 169.166941][T12372] getname_flags.part.0+0x8f/0x550 [ 169.166959][T12372] getname_flags+0x93/0xf0 [ 169.166969][T12372] do_sys_openat2+0xb8/0x1d0 [ 169.166983][T12372] ? __pfx_do_sys_openat2+0x10/0x10 [ 169.166998][T12372] ? __fget_files+0x20e/0x3c0 [ 169.167014][T12372] __x64_sys_openat+0x174/0x210 [ 169.167033][T12372] ? __pfx___x64_sys_openat+0x10/0x10 [ 169.167047][T12372] ? ksys_write+0x1ac/0x250 [ 169.167062][T12372] do_syscall_64+0xcd/0xfa0 [ 169.167073][T12372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.167084][T12372] RIP: 0033:0x7fd285f8e010 [ 169.167094][T12372] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 169.167104][T12372] RSP: 002b:00007fd286eb1f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 169.167115][T12372] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd285f8e010 [ 169.167122][T12372] RDX: 0000000000000000 RSI: 00007fd28601407e RDI: 00000000ffffff9c [ 169.167128][T12372] RBP: 00007fd28601407e R08: 0000000000000000 R09: 0000000000000000 [ 169.167135][T12372] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 169.167141][T12372] R13: 00007fd2861e6128 R14: 00007fd2861e6090 R15: 00007ffd1eaffe48 [ 169.167154][T12372] [ 169.232875][ T10] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 169.401774][ T10] usb 12-1: Using ep0 maxpacket: 8 [ 169.407539][ T10] usb 12-1: config 179 has an invalid interface number: 65 but max is 0 [ 169.411216][ T10] usb 12-1: config 179 has no interface number 0 [ 169.414557][ T10] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 169.419174][ T10] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 169.425423][ T10] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 169.430756][ T10] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 169.436005][ T10] usb 12-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 169.441773][ T10] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 169.443506][T12387] syzkaller0: entered promiscuous mode [ 169.445704][ T10] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.447923][T12387] syzkaller0: entered allmulticast mode [ 169.454179][T12351] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 169.456968][ T5942] Bluetooth: Wrong link type (-71) [ 169.552041][ T5942] Bluetooth: hci3: command 0x0409 tx timeout [ 169.665556][ T5942] Bluetooth: hci3: hcon ffff888029740000 sent 1 < count 9 [ 169.675068][ T34] usb 12-1: USB disconnect, device number 4 [ 169.675124][ C0] xpad 12-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 169.681429][ C0] dummy_hcd dummy_hcd.7: timer fired with no URBs pending? [ 169.687114][T12395] netlink: 'syz.1.2253': attribute type 9 has an invalid length. [ 169.711549][ T5942] Bluetooth: hci4: command 0x0409 tx timeout [ 169.805163][ T40] kauditd_printk_skb: 245 callbacks suppressed [ 169.805181][ T40] audit: type=1400 audit(1764464170.204:4131): avc: denied { create } for pid=12396 comm="syz.1.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.805881][ T5942] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 169.807884][ T40] audit: type=1400 audit(1764464170.204:4132): avc: denied { listen } for pid=12396 comm="syz.1.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.835120][ T40] audit: type=1400 audit(1764464170.234:4133): avc: denied { bind } for pid=12398 comm="syz.1.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.838888][T12399] loop2: detected capacity change from 0 to 7 [ 169.847387][T12399] Dev loop2: unable to read RDB block 7 [ 169.849271][T12399] loop2: AHDI p1 p2 p3 [ 169.850603][T12399] loop2: partition table partially beyond EOD, truncated [ 169.853057][T12399] loop2: p1 start 1818582900 is beyond EOD, truncated [ 169.855162][T12399] loop2: p3 start 335544320 is beyond EOD, truncated [ 169.929790][ T40] audit: type=1400 audit(1764464170.324:4134): avc: denied { getopt } for pid=12404 comm="syz.6.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.937175][ T40] audit: type=1400 audit(1764464170.324:4135): avc: denied { setopt } for pid=12404 comm="syz.6.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 169.955113][T12405] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 169.961038][ T40] audit: type=1400 audit(1764464170.354:4136): avc: denied { write } for pid=12404 comm="syz.6.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 169.967422][ T40] audit: type=1400 audit(1764464170.354:4137): avc: denied { connect } for pid=12404 comm="syz.6.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 169.974696][ T40] audit: type=1400 audit(1764464170.354:4138): avc: denied { name_connect } for pid=12404 comm="syz.6.2258" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 169.984593][ T40] audit: type=1400 audit(1764464170.364:4139): avc: denied { create } for pid=12404 comm="syz.6.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 169.991606][ T40] audit: type=1400 audit(1764464170.364:4140): avc: denied { write } for pid=12404 comm="syz.6.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 170.031666][ T5942] Bluetooth: hci1: command 0x040f tx timeout [ 170.032239][T12411] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 170.130659][T12419] fuse: Unknown parameter '0x0000000000000003' [ 170.203160][T12427] Invalid logical block size (768) [ 170.227108][ T5942] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 170.352501][T12445] fuse: Unknown parameter '0x0000000000000003' [ 170.457703][T12454] netlink: 'syz.1.2276': attribute type 4 has an invalid length. [ 170.474102][T12446] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 170.476132][T12446] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 170.487193][T12446] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 170.493535][T12446] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 170.498191][T12446] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 170.500708][T12446] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 170.506085][T12446] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 170.510421][T12446] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 170.514544][T12446] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 170.518779][T12446] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 170.525627][T12446] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 170.531063][T12446] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 170.533837][T12446] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 170.537615][T12446] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 170.864710][T12470] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 170.963994][T12473] fuse: Unknown parameter '0x0000000000000003' [ 171.013290][T12475] Invalid logical block size (1536) [ 171.299027][T12493] tipc: Enabling not permitted [ 171.301978][T12493] tipc: Enabling of bearer rejected, failed to enable media [ 171.308770][T12493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=12493 comm=syz.7.2291 [ 171.318294][T12506] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 171.478907][T12535] __nla_validate_parse: 4 callbacks suppressed [ 171.478922][T12535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2308'. [ 171.555275][T12545] fuse: Unknown parameter 'fd0x0000000000000003' [ 171.623209][T12553] Cannot find set identified by id 0 to match [ 171.636102][T12553] netlink: 'syz.6.2313': attribute type 1 has an invalid length. [ 171.639492][T12553] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2313'. [ 171.893031][T12570] FAULT_INJECTION: forcing a failure. [ 171.893031][T12570] name failslab, interval 1, probability 0, space 0, times 0 [ 171.898574][T12570] CPU: 0 UID: 0 PID: 12570 Comm: syz.1.2323 Not tainted syzkaller #0 PREEMPT(full) [ 171.898598][T12570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 171.898609][T12570] Call Trace: [ 171.898617][T12570] [ 171.898625][T12570] dump_stack_lvl+0x16c/0x1f0 [ 171.898647][T12570] should_fail_ex+0x512/0x640 [ 171.898676][T12570] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 171.898706][T12570] should_failslab+0xc2/0x120 [ 171.898727][T12570] kmem_cache_alloc_node_noprof+0x78/0x770 [ 171.898754][T12570] ? __alloc_skb+0x2b2/0x380 [ 171.898783][T12570] ? __alloc_skb+0x2b2/0x380 [ 171.898802][T12570] ? __pfx_netlink_insert+0x10/0x10 [ 171.898826][T12570] __alloc_skb+0x2b2/0x380 [ 171.898849][T12570] ? __pfx___alloc_skb+0x10/0x10 [ 171.898867][T12570] ? netlink_autobind.isra.0+0x158/0x370 [ 171.898897][T12570] netlink_alloc_large_skb+0x69/0x140 [ 171.898924][T12570] netlink_sendmsg+0x698/0xdd0 [ 171.898952][T12570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.898987][T12570] ____sys_sendmsg+0xa98/0xc70 [ 171.899007][T12570] ? copy_msghdr_from_user+0x10a/0x160 [ 171.899031][T12570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.899061][T12570] ___sys_sendmsg+0x134/0x1d0 [ 171.899086][T12570] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.899108][T12570] ? __lock_acquire+0x622/0x1c90 [ 171.899152][T12570] __sys_sendmsg+0x16d/0x220 [ 171.899178][T12570] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.899216][T12570] do_syscall_64+0xcd/0xfa0 [ 171.899233][T12570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.899253][T12570] RIP: 0033:0x7ff7a3d8f7c9 [ 171.899266][T12570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.899280][T12570] RSP: 002b:00007ff7a4b62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.899298][T12570] RAX: ffffffffffffffda RBX: 00007ff7a3fe5fa0 RCX: 00007ff7a3d8f7c9 [ 171.899311][T12570] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 171.899321][T12570] RBP: 00007ff7a4b62090 R08: 0000000000000000 R09: 0000000000000000 [ 171.899331][T12570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.899342][T12570] R13: 00007ff7a3fe6038 R14: 00007ff7a3fe5fa0 R15: 00007ffc2edf22d8 [ 171.899364][T12570] [ 172.126495][T12577] tipc: Started in network mode [ 172.129011][T12577] tipc: Node identity 623b4c600e5b, cluster identity 4711 [ 172.134026][T12577] tipc: Enabled bearer , priority 0 [ 172.138878][T12577] syzkaller0: entered promiscuous mode [ 172.140751][T12577] syzkaller0: entered allmulticast mode [ 172.147602][T12577] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 172.161658][T12577] tipc: Resetting bearer [ 172.165176][T12577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.171940][T12576] tipc: Resetting bearer [ 172.180843][T12576] tipc: Disabling bearer [ 172.282497][T12579] dvmrp6: entered allmulticast mode [ 172.294491][T12581] pimreg: entered allmulticast mode [ 172.297672][T12581] dvmrp6: left allmulticast mode [ 172.391640][T12578] pimreg: left allmulticast mode [ 172.521776][ T5946] Bluetooth: hci4: command 0x0409 tx timeout [ 172.524723][ T5946] Bluetooth: hci3: command 0x0409 tx timeout [ 172.525532][ T5942] Bluetooth: hci0: command 0x0406 tx timeout [ 172.591453][ T5942] Bluetooth: hci1: command 0x040f tx timeout [ 172.864773][T12605] binder: 12604:12605 ioctl 4018620d 0 returned -22 [ 173.779735][T12620] overlayfs: failed to resolve './file1': -2 [ 173.844240][T12622] xt_recent: Unsupported userspace flags (000000b2) [ 173.930572][ T5942] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 173.936051][ T5942] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 174.384854][T12631] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.2345'. [ 174.593450][ T5942] Bluetooth: hci3: command 0x0409 tx timeout [ 174.593469][ T5939] Bluetooth: hci0: command 0x0406 tx timeout [ 174.601437][ T5942] Bluetooth: hci4: command 0x0409 tx timeout [ 174.644172][ T34] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 174.681410][ T5946] Bluetooth: hci1: command 0x040f tx timeout [ 174.762824][T12639] FAULT_INJECTION: forcing a failure. [ 174.762824][T12639] name failslab, interval 1, probability 0, space 0, times 0 [ 174.769159][T12639] CPU: 2 UID: 0 PID: 12639 Comm: syz.6.2348 Not tainted syzkaller #0 PREEMPT(full) [ 174.769182][T12639] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 174.769193][T12639] Call Trace: [ 174.769200][T12639] [ 174.769206][T12639] dump_stack_lvl+0x16c/0x1f0 [ 174.769226][T12639] should_fail_ex+0x512/0x640 [ 174.769248][T12639] ? __kmalloc_noprof+0xca/0x880 [ 174.769275][T12639] should_failslab+0xc2/0x120 [ 174.769298][T12639] __kmalloc_noprof+0xdd/0x880 [ 174.769321][T12639] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 174.769345][T12639] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 174.769363][T12639] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 174.769385][T12639] genl_start+0x18f/0x980 [ 174.769406][T12639] __netlink_dump_start+0x60e/0x990 [ 174.769435][T12639] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 174.769455][T12639] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 174.769480][T12639] ? __pfx_genl_get_cmd+0x10/0x10 [ 174.769506][T12639] ? __pfx_genl_start+0x10/0x10 [ 174.769519][T12639] ? __pfx_genl_dumpit+0x10/0x10 [ 174.769535][T12639] ? __pfx_genl_done+0x10/0x10 [ 174.769555][T12639] ? ____sys_sendmsg+0xa98/0xc70 [ 174.769572][T12639] ? ___sys_sendmsg+0x134/0x1d0 [ 174.769594][T12639] ? __radix_tree_lookup+0x21f/0x2c0 [ 174.769624][T12639] genl_rcv_msg+0x46e/0x800 [ 174.769645][T12639] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.769661][T12639] ? __pfx_nl802154_list_associations+0x10/0x10 [ 174.769690][T12639] ? __lock_acquire+0x622/0x1c90 [ 174.769710][T12639] netlink_rcv_skb+0x158/0x420 [ 174.769737][T12639] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.769757][T12639] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 174.769907][T12639] ? netlink_deliver_tap+0x1ae/0xd30 [ 174.769942][T12639] genl_rcv+0x28/0x40 [ 174.769958][T12639] netlink_unicast+0x5aa/0x870 [ 174.769986][T12639] ? __pfx_netlink_unicast+0x10/0x10 [ 174.770023][T12639] netlink_sendmsg+0x8c8/0xdd0 [ 174.770053][T12639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.770089][T12639] ____sys_sendmsg+0xa98/0xc70 [ 174.770107][T12639] ? copy_msghdr_from_user+0x10a/0x160 [ 174.770131][T12639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.770160][T12639] ___sys_sendmsg+0x134/0x1d0 [ 174.770186][T12639] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.770208][T12639] ? __lock_acquire+0x622/0x1c90 [ 174.770255][T12639] __sys_sendmsg+0x16d/0x220 [ 174.770279][T12639] ? __pfx___sys_sendmsg+0x10/0x10 [ 174.770320][T12639] do_syscall_64+0xcd/0xfa0 [ 174.770340][T12639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.770357][T12639] RIP: 0033:0x7f554658f7c9 [ 174.770374][T12639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.770391][T12639] RSP: 002b:00007f55447f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.770409][T12639] RAX: ffffffffffffffda RBX: 00007f55467e5fa0 RCX: 00007f554658f7c9 [ 174.770420][T12639] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 174.770432][T12639] RBP: 00007f55447f6090 R08: 0000000000000000 R09: 0000000000000000 [ 174.770442][T12639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.770453][T12639] R13: 00007f55467e6038 R14: 00007f55467e5fa0 R15: 00007ffc86749e98 [ 174.770477][T12639] [ 174.794081][ T34] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 174.922433][ T34] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 174.926806][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 174.932519][ T34] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 174.936430][ T34] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 174.940453][ T34] usb 6-1: Product: syz [ 174.942988][ T34] usb 6-1: Manufacturer: syz [ 174.944655][ T34] usb 6-1: SerialNumber: syz [ 174.948813][ T34] usb 6-1: config 0 descriptor?? [ 174.953525][ T34] hub 6-1:0.0: bad descriptor, ignoring hub [ 174.956133][ T34] hub 6-1:0.0: probe with driver hub failed with error -5 [ 174.962607][ T34] usb 6-1: selecting invalid altsetting 0 [ 175.026491][ T40] kauditd_printk_skb: 170 callbacks suppressed [ 175.026506][ T40] audit: type=1400 audit(1764464175.424:4311): avc: denied { name_bind } for pid=12646 comm="syz.6.2350" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 175.054019][ T40] audit: type=1400 audit(1764464175.454:4312): avc: denied { prog_load } for pid=12648 comm="syz.6.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 175.113565][ T40] audit: type=1400 audit(1764464175.514:4313): avc: denied { map_create } for pid=12652 comm="syz.6.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 175.141051][ T40] audit: type=1400 audit(1764464175.534:4314): avc: denied { create } for pid=12654 comm="syz.6.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 175.149821][ T40] audit: type=1400 audit(1764464175.544:4315): avc: denied { ioctl } for pid=12654 comm="syz.6.2354" path="socket:[47100]" dev="sockfs" ino=47100 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 175.188885][ T40] audit: type=1400 audit(1764464175.584:4316): avc: denied { getopt } for pid=12656 comm="syz.6.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.195948][ T40] audit: type=1400 audit(1764464175.584:4317): avc: denied { create } for pid=12656 comm="syz.6.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.202602][ T40] audit: type=1400 audit(1764464175.584:4318): avc: denied { setopt } for pid=12656 comm="syz.6.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.215624][T12657] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 175.220733][ T40] audit: type=1400 audit(1764464175.614:4319): avc: denied { write } for pid=12656 comm="syz.6.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.227710][ T40] audit: type=1400 audit(1764464175.614:4320): avc: denied { connect } for pid=12656 comm="syz.6.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.261930][ T34] usb 6-1: USB disconnect, device number 7 [ 175.313970][T12661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12661 comm=syz.6.2357 [ 175.318577][T12661] netlink: 'syz.6.2357': attribute type 13 has an invalid length. [ 175.322567][T12661] netlink: 'syz.6.2357': attribute type 17 has an invalid length. [ 175.355772][T12661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.356467][T12631] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.2345'. [ 175.422266][T12668] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2359'. [ 175.439897][T12668] tmpfs: Bad value for 'mpol' [ 175.482597][T12678] netlink: 'syz.1.2361': attribute type 1 has an invalid length. [ 175.510839][T12678] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 175.517935][ T46] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 175.527016][T12678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.567702][T12678] veth3: entered promiscuous mode [ 175.573628][T12678] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 175.634334][ T46] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 175.788557][T12694] trusted_key: encrypted_key: keylen parameter is missing [ 176.672258][ T5946] Bluetooth: hci0: command 0x0406 tx timeout [ 176.676232][ T5946] Bluetooth: hci4: command 0x0409 tx timeout [ 176.679012][ T5946] Bluetooth: hci3: command 0x0409 tx timeout [ 176.751496][ T5946] Bluetooth: hci1: command 0x040f tx timeout [ 176.861660][T12710] netlink: 408 bytes leftover after parsing attributes in process `syz.1.2372'. [ 176.865759][T12709] raw_sendmsg: syz.1.2372 forgot to set AF_INET. Fix it! [ 176.942607][T12715] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2375'. [ 177.036411][T12720] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 177.037452][T12721] netlink: 'syz.6.2377': attribute type 1 has an invalid length. [ 177.046842][T12720] CIFS mount error: No usable UNC path provided in device string! [ 177.046842][T12720] [ 177.047071][T12720] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 177.070723][T12721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.104115][T12721] bond1: (slave veth3): Enslaving as an active interface with a down link [ 177.172945][T12731] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.175366][T12731] IPv6: NLM_F_CREATE should be set when creating new route [ 177.205859][T12735] xt_cluster: node mask cannot exceed total number of nodes [ 177.289533][T12733] CIFS mount error: No usable UNC path provided in device string! [ 177.289533][T12733] [ 177.294016][T12733] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 177.814454][T12773] netlink: 'syz.1.2399': attribute type 11 has an invalid length. [ 177.817961][T12773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2399'. [ 178.125662][T12797] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.375499][T12809] bridge1: entered promiscuous mode [ 178.377226][T12809] bridge1: entered allmulticast mode [ 178.458089][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2412'. [ 178.461972][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2412'. [ 178.464816][T12814] netlink: 'syz.6.2412': attribute type 11 has an invalid length. [ 178.467437][T12814] netlink: 'syz.6.2412': attribute type 13 has an invalid length. [ 178.681440][ T5946] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 178.739357][T12844] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 178.751839][ T5946] Bluetooth: hci4: command 0x0409 tx timeout [ 178.751862][ T5939] Bluetooth: hci0: command 0x0406 tx timeout [ 178.786232][T12846] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 178.822041][T12848] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2423'. [ 178.842049][ T5939] Bluetooth: hci1: command 0x040f tx timeout [ 178.856362][T12851] tap0: tun_chr_ioctl cmd 1074025675 [ 178.858105][T12851] tap0: persist disabled [ 178.885734][T12854] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.976221][T12867] netlink: 'syz.1.2428': attribute type 21 has an invalid length. [ 178.979267][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2428'. [ 178.983379][T12867] netlink: 'syz.1.2428': attribute type 21 has an invalid length. [ 178.986315][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2428'. [ 178.994894][ C2] ata1: illegal qc_active transition (00000000->00002000) [ 178.999375][T12869] overlayfs: missing 'lowerdir' [ 179.078195][T12873] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 179.136978][T12878] overlayfs: missing 'lowerdir' [ 179.148448][T12880] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2434'. [ 179.302000][ T5939] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 179.324155][ T1114] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 179.330032][ T1114] ata1.00: configured for UDMA/100 [ 179.331262][T12894] tmpfs: User quota inode hardlimit too large. [ 179.660448][T12905] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 179.765426][T12911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12911 comm=syz.7.2446 [ 179.770119][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2446'. [ 179.957713][T12919] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 180.056757][ T40] kauditd_printk_skb: 232 callbacks suppressed [ 180.056772][ T40] audit: type=1400 audit(179.993:4553): avc: denied { map_create } for pid=12924 comm="syz.7.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.067537][ T40] audit: type=1400 audit(179.993:4554): avc: denied { map_read map_write } for pid=12924 comm="syz.7.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.081552][ T40] audit: type=1400 audit(179.993:4555): avc: denied { prog_load } for pid=12924 comm="syz.7.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.088229][ T40] audit: type=1400 audit(179.993:4556): avc: denied { bpf } for pid=12924 comm="syz.7.2451" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.095900][ T40] audit: type=1400 audit(179.993:4557): avc: denied { perfmon } for pid=12924 comm="syz.7.2451" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.104532][ T40] audit: type=1400 audit(180.023:4558): avc: denied { read write } for pid=12928 comm="syz.7.2452" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 180.114340][ T40] audit: type=1400 audit(180.023:4559): avc: denied { open } for pid=12928 comm="syz.7.2452" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 180.118508][T12930] binder: 12928:12930 ioctl 5501 0 returned -22 [ 180.123339][ T40] audit: type=1400 audit(180.023:4560): avc: denied { ioctl } for pid=12928 comm="syz.7.2452" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 180.123366][ T40] audit: type=1400 audit(180.043:4561): avc: denied { allowed } for pid=12928 comm="syz.7.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 180.123390][ T40] audit: type=1400 audit(180.043:4562): avc: denied { map } for pid=12928 comm="syz.7.2452" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=49716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 180.208178][T12934] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 180.210956][T12934] IPv6: NLM_F_CREATE should be set when creating new route [ 180.268757][T12936] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 180.384270][ T5946] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 180.387709][ T5946] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 180.561498][T12944] overlayfs: missing 'lowerdir' [ 180.716727][T12954] netlink: 'syz.1.2461': attribute type 21 has an invalid length. [ 180.745028][T12949] fuse: Unknown parameter 'dK0x0000000000000007' [ 180.832384][ T5946] Bluetooth: hci0: command 0x0406 tx timeout [ 180.841547][ T5946] Bluetooth: hci4: command 0x0409 tx timeout [ 180.880497][T12966] netlink: 'syz.1.2464': attribute type 1 has an invalid length. [ 180.911733][ T5946] Bluetooth: hci1: command 0x040f tx timeout [ 180.927094][T12963] netem: change failed [ 180.946774][ T839] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 180.979296][T12970] syzkaller0: entered promiscuous mode [ 180.983616][T12970] syzkaller0: entered allmulticast mode [ 181.114579][ T839] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 181.122765][ T839] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 3887, setting to 1024 [ 181.127325][ T839] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 181.131249][ T839] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 181.144435][ T839] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.167897][T12951] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 181.177735][ T839] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 181.275723][T12993] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 181.376109][ T5946] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 181.383139][T12998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.389918][T11898] usb 11-1: USB disconnect, device number 3 [ 181.626172][T12951] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 181.647739][T13011] binder: 13010:13011 ioctl c0306201 0 returned -14 [ 181.695845][T13013] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 181.881851][T13029] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 182.265446][T13043] binder: 13042:13043 ioctl c0306201 0 returned -14 [ 182.305302][ T5946] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 182.341570][ T5946] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 182.345771][ T5946] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 182.394101][T13051] CUSE: unknown device info "" [ 182.398317][T13051] CUSE: zero length info key specified [ 182.442217][ T5946] Bluetooth: hci3: command 0x0409 tx timeout [ 182.487021][T13055] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 182.610484][T13063] netlink: 'syz.6.2498': attribute type 2 has an invalid length. [ 182.642687][T13068] binder: 13067:13068 ioctl c0306201 0 returned -14 [ 182.673270][ T5939] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 182.691128][T13071] tmpfs: Cannot enable quota on remount [ 182.867209][T13079] netlink: 'syz.6.2503': attribute type 4 has an invalid length. [ 182.870726][T13078] Unsupported ieee802154 address type: 0 [ 182.911644][ T5939] Bluetooth: hci4: command 0x0409 tx timeout [ 182.912157][ T5946] Bluetooth: hci0: command 0x0406 tx timeout [ 183.042428][T13090] lo: entered allmulticast mode [ 183.185334][ T5942] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 183.189302][ T5942] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 183.304024][T13101] tipc: Failed to obtain node identity [ 183.308431][T13101] tipc: Enabling of bearer rejected, failed to enable media [ 183.379795][T13106] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 183.384247][T13106] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 183.422445][ T5942] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 183.593490][ T5942] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 183.596908][ T5942] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 183.604520][T13122] tmpfs: Bad value for 'mpol' [ 183.613140][T13122] __nla_validate_parse: 6 callbacks suppressed [ 183.613155][T13122] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2521'. [ 183.682756][T13131] overlayfs: missing 'lowerdir' [ 183.721825][ T839] IPVS: starting estimator thread 0... [ 183.723516][T13135] QAT: failed to copy from user cfg_data. [ 183.808885][T13147] erofs (device nbd1): cannot find valid erofs superblock [ 183.811476][T13136] IPVS: using max 43 ests per chain, 103200 per kthread [ 183.880420][T13149] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2530'. [ 183.961135][ T5942] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 183.971049][ T5939] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 183.974040][ T5939] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 184.050313][T13161] netlink: 'syz.1.2534': attribute type 1 has an invalid length. [ 184.064492][T13161] bond2: entered promiscuous mode [ 184.066441][T13161] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.078090][T13161] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.080412][T13161] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 184.084553][T13161] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 184.094694][T13161] bond2: (slave ip6gre1): making interface the new active one [ 184.097702][T13161] ip6gre1: entered promiscuous mode [ 184.102038][T13161] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 184.129912][ T5939] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 184.255506][T13183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.324937][ T5939] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 184.328729][ T5939] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 184.416111][ T5939] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 184.510100][T13203] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 184.531886][T13203] netdevsim netdevsim7 : renamed from netdevsim0 [ 184.596266][T13218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2556'. [ 184.601877][T13217] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13217 comm=syz.1.2556 [ 184.610622][T13218] PM: Enabling pm_trace changes system date and time during resume. [ 184.610622][T13218] PM: Correct system time has to be restored manually after resume. [ 184.620617][T13217] PM: Enabling pm_trace changes system date and time during resume. [ 184.620617][T13217] PM: Correct system time has to be restored manually after resume. [ 184.674357][T13225] netlink: 'syz.1.2558': attribute type 4 has an invalid length. [ 184.682449][T13225] netlink: 'syz.1.2558': attribute type 4 has an invalid length. [ 184.748679][T13236] loop5: detected capacity change from 0 to 7 [ 184.751334][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.754271][ C0] buffer_io_error: 65 callbacks suppressed [ 184.754279][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 184.759006][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.762459][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 184.765709][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.769594][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 184.773307][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.777060][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 184.780160][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.783915][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 184.787805][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.790854][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 184.795515][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.799640][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 184.804266][T13236] ldm_validate_partition_table(): Disk read failed. [ 184.807259][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.811042][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 184.814731][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.817730][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 184.820601][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.823613][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 184.826824][T13236] Dev loop5: unable to read RDB block 0 [ 184.829019][T13236] loop5: unable to read partition table [ 184.830931][T13236] loop5: partition table beyond EOD, truncated [ 184.833790][T13236] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 184.883975][T13242] vim2m vim2m.0: vidioc_s_fmt queue busy [ 184.890478][T13242] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2563'. [ 184.900134][T13242] netlink: 'syz.7.2563': attribute type 2 has an invalid length. [ 184.903973][T13242] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2563'. [ 184.940823][T13251] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2566'. [ 184.991647][ T5942] Bluetooth: hci4: command 0x0409 tx timeout [ 185.192765][ T40] kauditd_printk_skb: 311 callbacks suppressed [ 185.192780][ T40] audit: type=1400 audit(185.133:4874): avc: denied { read write } for pid=13254 comm="syz.7.2567" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.195899][T13255] 9pnet_virtio: no channels available for device 127.0.0.1 [ 185.203478][ T40] audit: type=1400 audit(185.133:4875): avc: denied { open } for pid=13254 comm="syz.7.2567" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.214846][ T40] audit: type=1400 audit(185.133:4876): avc: denied { ioctl } for pid=13254 comm="syz.7.2567" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.223311][ T40] audit: type=1400 audit(185.133:4877): avc: denied { write } for pid=13254 comm="syz.7.2567" path="socket:[51953]" dev="sockfs" ino=51953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.231586][ T40] audit: type=1400 audit(185.133:4878): avc: denied { mounton } for pid=13254 comm="syz.7.2567" path="/150" dev="tmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 185.238509][ T40] audit: type=1400 audit(185.143:4879): avc: denied { mount } for pid=13254 comm="syz.7.2567" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 185.242077][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 185.242153][ T5942] Bluetooth: hci0: command 0x0406 tx timeout [ 185.245351][ T40] audit: type=1400 audit(185.143:4880): avc: denied { ioctl } for pid=13254 comm="syz.7.2567" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 185.625475][ T40] audit: type=1400 audit(185.563:4881): avc: denied { execute } for pid=13257 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 185.633057][ T40] audit: type=1400 audit(185.563:4882): avc: denied { execute_no_trans } for pid=13257 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 185.640737][ T40] audit: type=1400 audit(185.573:4883): avc: denied { execmem } for pid=13257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 185.818749][T13272] fuse: Bad value for 'fd' [ 185.826398][ T5942] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 185.830203][T13275] dlm: non-version read from control device 8224 [ 185.833218][ T5942] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 185.834254][T13275] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 185.837287][ T5942] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 185.844997][ T5942] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 185.853552][ T5942] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 186.017194][T13273] chnl_net:caif_netlink_parms(): no params data found [ 186.093445][T13273] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.095804][T13273] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.098142][T13273] bridge_slave_0: entered allmulticast mode [ 186.100891][T13273] bridge_slave_0: entered promiscuous mode [ 186.104590][T13273] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.107798][T13273] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.110906][T13273] bridge_slave_1: entered allmulticast mode [ 186.116288][T13273] bridge_slave_1: entered promiscuous mode [ 186.144266][T13273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.152801][T13273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.183901][T13273] team0: Port device team_slave_0 added [ 186.188615][T13273] team0: Port device team_slave_1 added [ 186.214004][T13273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.216947][T13273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.222334][ T5946] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 186.228256][T13273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.236937][T13273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.239919][T13273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.251065][T13273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.252553][T13309] fuse: Bad value for 'fd' [ 186.294698][T13273] hsr_slave_0: entered promiscuous mode [ 186.298021][T13273] hsr_slave_1: entered promiscuous mode [ 186.298905][ T5946] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 186.300990][T13273] debugfs: 'hsr0' already exists in 'hsr' [ 186.305928][T13273] Cannot create hsr debugfs directory [ 186.396491][T13320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.451512][T13322] 9pnet_fd: Insufficient options for proto=fd [ 186.474397][T13273] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 186.480894][T13273] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 186.488665][T13273] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 186.498694][T13273] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 186.507645][T13332] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 186.525491][ T5946] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 186.556079][T13332] netlink: 'syz.1.2594': attribute type 10 has an invalid length. [ 186.562296][T13332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.565497][T13334] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 186.567227][T13332] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 186.597822][T13273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.629401][T13273] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.642506][ T6209] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.645575][ T6209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.659745][T13347] efs: device does not support 512 byte blocks [ 186.660028][ T6212] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.663186][T13347] device does not support 512 byte blocks [ 186.663186][T13347] [ 186.665154][ T6212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.762170][T13354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.797225][T13357] binder: 13356:13357 ioctl c0306201 0 returned -14 [ 186.827729][T13273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.901552][ T839] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 187.000252][T13273] veth0_vlan: entered promiscuous mode [ 187.039903][T13273] veth1_vlan: entered promiscuous mode [ 187.057688][ T839] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.065380][ T839] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 187.069087][ T839] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 187.076470][ T839] usb 11-1: Product: syz [ 187.078805][ T839] usb 11-1: Manufacturer: syz [ 187.081029][ T839] usb 11-1: SerialNumber: syz [ 187.131201][T13273] veth0_macvtap: entered promiscuous mode [ 187.141015][T13273] veth1_macvtap: entered promiscuous mode [ 187.161955][T13273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.169303][T13273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.215555][ T1198] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.219231][ T1198] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.232556][ T1198] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.236463][ T1198] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.295233][ T6212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.298600][ T6212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.311757][ T839] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 187.321952][ T6195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.325225][ T6195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.386832][ C2] sr 2:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 187.391224][ C2] sr 2:0:0:0: [sr0] tag#0 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 187.397220][T13382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2605'. [ 187.407690][ T5946] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 187.411197][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 187.411214][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 187.411222][ T5946] Workqueue: hci5 hci_rx_work [ 187.411253][ T5946] Call Trace: [ 187.411258][ T5946] [ 187.411263][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 187.411277][ T5946] sysfs_warn_dup+0x7f/0xa0 [ 187.411302][ T5946] sysfs_create_dir_ns+0x24b/0x2b0 [ 187.411319][ T5946] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 187.411333][ T5946] ? find_held_lock+0x2b/0x80 [ 187.411350][ T5946] ? do_raw_spin_unlock+0x172/0x230 [ 187.411365][ T5946] kobject_add_internal+0x2c4/0x9b0 [ 187.411381][ T5946] kobject_add+0x16e/0x240 [ 187.411393][ T5946] ? __pfx_kobject_add+0x10/0x10 [ 187.411406][ T5946] ? do_raw_spin_unlock+0x172/0x230 [ 187.411419][ T5946] ? kobject_put+0xab/0x5a0 [ 187.411434][ T5946] device_add+0x288/0x1aa0 [ 187.411455][ T5946] ? __pfx_dev_set_name+0x10/0x10 [ 187.411469][ T5946] ? __pfx_device_add+0x10/0x10 [ 187.411483][ T5946] ? mgmt_send_event_skb+0x2fb/0x460 [ 187.411510][ T5946] hci_conn_add_sysfs+0x17e/0x230 [ 187.411527][ T5946] le_conn_complete_evt+0x1260/0x2150 [ 187.411580][ T5946] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 187.411607][ T5946] ? hci_event_packet+0x459/0x11c0 [ 187.411632][ T5946] hci_le_conn_complete_evt+0x23c/0x370 [ 187.411651][ T5946] hci_le_meta_evt+0x357/0x5e0 [ 187.411668][ T5946] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 187.411685][ T5946] hci_event_packet+0x685/0x11c0 [ 187.411701][ T5946] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 187.411719][ T5946] ? __pfx_hci_event_packet+0x10/0x10 [ 187.411735][ T5946] ? kcov_remote_start+0x3c9/0x6d0 [ 187.411749][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 187.411763][ T5946] hci_rx_work+0x2c9/0xeb0 [ 187.411781][ T5946] process_one_work+0x9cf/0x1b70 [ 187.411799][ T5946] ? __pfx_process_one_work+0x10/0x10 [ 187.411822][ T5946] ? assign_work+0x1a0/0x250 [ 187.411842][ T5946] worker_thread+0x6c8/0xf10 [ 187.411871][ T5946] ? __pfx_worker_thread+0x10/0x10 [ 187.411891][ T5946] kthread+0x3c5/0x780 [ 187.411910][ T5946] ? __pfx_kthread+0x10/0x10 [ 187.411931][ T5946] ? rcu_is_watching+0x12/0xc0 [ 187.411952][ T5946] ? __pfx_kthread+0x10/0x10 [ 187.411970][ T5946] ret_from_fork+0x675/0x7d0 [ 187.411987][ T5946] ? __pfx_kthread+0x10/0x10 [ 187.412002][ T5946] ret_from_fork_asm+0x1a/0x30 [ 187.412039][ T5946] [ 187.507123][ T5946] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 187.513362][ T5946] Bluetooth: hci5: failed to register connection device [ 187.563096][T13387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.566819][T13387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.626427][T13389] binder: 13388:13389 ioctl c0306201 2000000002c0 returned -22 [ 187.629074][T13389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=13389 comm=syz.9.2606 [ 187.645933][ T5946] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 187.873074][ T5946] Bluetooth: hci5: command tx timeout [ 187.949648][ T5946] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 188.138358][ T5939] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 188.170009][T13431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.172518][T13431] IPv6: NLM_F_CREATE should be set when creating new route [ 188.281420][ T5942] Bluetooth: hci0: command 0x0406 tx timeout [ 188.357790][T13449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29472 sclass=netlink_route_socket pid=13449 comm=syz.9.2625 [ 188.401494][ T839] usb 12-1: new full-speed USB device number 5 using dummy_hcd [ 188.423803][T13452] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 188.535919][ T5942] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 188.562999][ T839] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 188.566919][ T839] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 188.570650][ T839] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 188.575025][ T839] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.579502][T13429] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 188.582479][T13429] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 188.591751][ T839] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 188.714640][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2633'. [ 188.788537][ T24] usb 12-1: USB disconnect, device number 5 [ 189.067403][ T5942] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 189.329635][ T5942] Bluetooth: hci4: unknown advertising packet type: 0x82 [ 189.329769][ T5942] Bluetooth: hci4: Dropping invalid advertising data [ 189.336310][ T5942] Bluetooth: hci4: Malformed LE Event: 0x02 [ 189.658342][T13510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2644'. [ 189.796821][ T5942] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 189.861141][T13517] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 189.953124][ T5946] Bluetooth: hci5: command tx timeout [ 190.046881][T13528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2651'. [ 190.232051][ T40] kauditd_printk_skb: 243 callbacks suppressed [ 190.232105][ T40] audit: type=1400 audit(190.173:5127): avc: denied { write } for pid=13541 comm="syz.1.2656" name="mISDNtimer" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.241234][ T40] audit: type=1400 audit(190.173:5128): avc: denied { open } for pid=13541 comm="syz.1.2656" path="/dev/mISDNtimer" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.248734][ T40] audit: type=1400 audit(190.173:5129): avc: denied { ioctl } for pid=13541 comm="syz.1.2656" path="/dev/mISDNtimer" dev="devtmpfs" ino=1292 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.261027][ T40] audit: type=1400 audit(190.173:5130): avc: denied { mount } for pid=13541 comm="syz.1.2656" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 190.282873][ T40] audit: type=1400 audit(190.223:5131): avc: denied { prog_load } for pid=13544 comm="syz.7.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 190.288979][ T40] audit: type=1400 audit(190.223:5132): avc: denied { bpf } for pid=13544 comm="syz.7.2658" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 190.290792][ T5946] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 190.298390][ T40] audit: type=1400 audit(190.223:5133): avc: denied { create } for pid=13544 comm="syz.7.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.306924][ T40] audit: type=1400 audit(190.223:5134): avc: denied { getopt } for pid=13544 comm="syz.7.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.306952][ T40] audit: type=1400 audit(190.223:5135): avc: denied { create } for pid=13544 comm="syz.7.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.306972][ T40] audit: type=1400 audit(190.223:5136): avc: denied { setopt } for pid=13544 comm="syz.7.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.327696][T13545] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 190.336143][T13549] 9pnet_fd: Insufficient options for proto=fd [ 190.353904][ T6195] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 190.390345][ T5946] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 190.586839][ T46] netdevsim netdevsim7 : set [1, 0] type 2 family 0 port 20001 - 0 [ 190.589709][ T46] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 190.593422][ T46] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 190.596302][ T46] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 190.886470][ T5939] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 190.951973][T13572] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 191.196476][T13577] netlink: 'syz.1.2670': attribute type 4 has an invalid length. [ 191.882012][ T6212] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.988753][ T6212] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.992381][ T5946] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 192.031843][ T5946] Bluetooth: hci5: command tx timeout [ 192.061127][T13595] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 192.077582][ T6212] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.113655][ T5942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.118812][ T5942] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.123273][ T5942] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.126739][ T5942] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.132303][ T5942] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 192.151118][T13599] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.2679'. [ 192.151758][ T6212] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.302783][T13596] chnl_net:caif_netlink_parms(): no params data found [ 192.308362][ T6212] bridge_slave_1: left allmulticast mode [ 192.310926][ T6212] bridge_slave_1: left promiscuous mode [ 192.313890][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.322093][ T6212] bridge_slave_0: left allmulticast mode [ 192.323971][ T6212] bridge_slave_0: left promiscuous mode [ 192.325916][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.414914][ T6212] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 192.418651][ T6212] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 192.421627][ T6212] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 3a:c7:b9:d8:86:9e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 192.439461][ T6212] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 192.442706][ T6212] ip6gre1 (unregistering): left promiscuous mode [ 192.700501][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2683'. [ 192.703718][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2683'. [ 192.725928][ T6212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.730226][ T6212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.734870][ T6212] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 192.740645][ T6212] bond0 (unregistering): Released all slaves [ 192.833414][ T6212] bond1 (unregistering): (slave veth3): Releasing backup interface [ 192.837351][ T6212] bond1 (unregistering): Released all slaves [ 192.922459][ T6212] bond2 (unregistering): Released all slaves [ 192.953808][T13607] netem: incorrect gi model size [ 192.955726][T13607] netem: change failed [ 192.959037][T13616] netlink: 'syz.7.2683': attribute type 4 has an invalid length. [ 192.997152][T13596] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.999584][T13596] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.002182][T13596] bridge_slave_0: entered allmulticast mode [ 193.005779][T13596] bridge_slave_0: entered promiscuous mode [ 193.014737][T13596] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.017942][T13596] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.021105][T13596] bridge_slave_1: entered allmulticast mode [ 193.025301][T13596] bridge_slave_1: entered promiscuous mode [ 193.028112][ T6212] tipc: Left network mode [ 193.073031][T13596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.075952][ T5946] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 193.078937][T13596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.096416][T13596] team0: Port device team_slave_0 added [ 193.099738][T13596] team0: Port device team_slave_1 added [ 193.110919][T13635] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 193.111737][T13636] netlink: 'syz.9.2689': attribute type 10 has an invalid length. [ 193.117983][T13636] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2689'. [ 193.156995][T13596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.159890][T13596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.168528][T13596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.194766][T13596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.197090][T13596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.206155][T13596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.212314][T13643] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 193.230468][T13596] hsr_slave_0: entered promiscuous mode [ 193.233320][T13596] hsr_slave_1: entered promiscuous mode [ 193.236143][T13596] debugfs: 'hsr0' already exists in 'hsr' [ 193.238281][T13596] Cannot create hsr debugfs directory [ 193.290269][T13649] netlink: zone id is out of range [ 193.294013][T13649] netlink: zone id is out of range [ 193.296287][T13649] netlink: zone id is out of range [ 193.298589][T13649] netlink: zone id is out of range [ 193.300930][T13649] netlink: zone id is out of range [ 193.304169][T13649] netlink: zone id is out of range [ 193.304390][ T6212] hsr_slave_0: left promiscuous mode [ 193.306431][T13649] netlink: zone id is out of range [ 193.310587][T13649] netlink: zone id is out of range [ 193.310616][ T6212] hsr_slave_1: left promiscuous mode [ 193.313264][T13649] netlink: zone id is out of range [ 193.316999][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.317226][T13649] netlink: zone id is out of range [ 193.319575][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.327742][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.330186][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.346618][ T6212] veth1_macvtap: left promiscuous mode [ 193.348519][ T6212] veth0_macvtap: left promiscuous mode [ 193.350389][ T6212] veth1_vlan: left promiscuous mode [ 193.355354][ T6212] veth0_vlan: left promiscuous mode [ 193.377140][ T5942] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 193.466069][ T5946] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 193.821782][ T5939] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 193.844123][ T6212] team0 (unregistering): Port device team_slave_1 removed [ 193.872001][ T6212] team0 (unregistering): Port device team_slave_0 removed [ 193.941037][ T5939] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 194.046629][ T5939] ------------[ cut here ]------------ [ 194.049845][ T5939] WARNING: CPU: 0 PID: 5939 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0x11a/0x210 [ 194.055343][ T5939] Modules linked in: SYZFAIL: failed to recv rpc [ 194.057693][ T5939] CPU: 0 UID: 0 PID: 5939 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 194.063032][ T5939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.067600][ T5939] Workqueue: hci3 hci_conn_timeout fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 194.069884][ T5939] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 194.072942][ T5939] Code: 00 e8 4a 6b 63 f7 4c 89 f1 4c 89 e2 48 c7 c6 20 64 d7 8c 48 c7 c7 e8 bc 7d 90 e8 d1 e9 7d fa e9 4d ff ff ff e8 27 6b 63 f7 90 <0f> 0b 90 e8 1e 6b 63 f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 194.081077][ T5939] RSP: 0018:ffffc90003a2fc20 EFLAGS: 00010293 [ 194.084042][ T5939] RAX: 0000000000000000 RBX: ffff88805aa28948 RCX: ffffffff8a597c0f [ 194.087802][ T5939] RDX: ffff888023c3a480 RSI: ffffffff8a597cb9 RDI: 0000000000000005 [ 194.091432][ T5939] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 194.094847][ T5939] R10: 00000000ffffffff R11: 0000000000000001 R12: ffff88805aa28000 [ 194.098248][ T5939] R13: 0000000000000000 R14: ffffffff90824e54 R15: ffffc90003a2fd00 [ 194.102289][ T5939] FS: 0000000000000000(0000) GS:ffff8880d6a05000(0000) knlGS:0000000000000000 [ 194.106127][ T5939] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.109088][ T5939] CR2: 00007ff754c99f98 CR3: 000000000e182000 CR4: 0000000000352ef0 [ 194.113045][ T5939] Call Trace: [ 194.114556][ T5939] [ 194.115868][ T5939] process_one_work+0x9cf/0x1b70 [ 194.118297][ T5939] ? __pfx_process_one_work+0x10/0x10 [ 194.120656][ T5939] ? assign_work+0x1a0/0x250 [ 194.122692][ T5939] worker_thread+0x6c8/0xf10 [ 194.123652][ T5946] Bluetooth: hci5: command 0x0419 tx timeout [ 194.124551][ T5939] ? __pfx_worker_thread+0x10/0x10 [ 194.128912][ T5939] kthread+0x3c5/0x780 [ 194.130693][ T5939] ? __pfx_kthread+0x10/0x10 [ 194.132845][ T5939] ? rcu_is_watching+0x12/0xc0 [ 194.134935][ T5939] ? __pfx_kthread+0x10/0x10 [ 194.136925][ T5939] ret_from_fork+0x675/0x7d0 [ 194.138905][ T5939] ? __pfx_kthread+0x10/0x10 [ 194.140917][ T5939] ret_from_fork_asm+0x1a/0x30 [ 194.142833][ T5939] [ 194.144071][ T5939] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 194.147078][ T5939] CPU: 0 UID: 0 PID: 5939 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 194.151045][ T5939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.155517][ T5939] Workqueue: hci3 hci_conn_timeout [ 194.157718][ T5939] Call Trace: [ 194.159162][ T5939] [ 194.160461][ T5939] dump_stack_lvl+0x3d/0x1f0 [ 194.162381][ T5939] vpanic+0x640/0x6f0 [ 194.164128][ T5939] ? hci_conn_timeout+0x11a/0x210 [ 194.166248][ T5939] panic+0xca/0xd0 [ 194.167886][ T5939] ? __pfx_panic+0x10/0x10 [ 194.169779][ T5939] ? check_panic_on_warn+0x1f/0xb0 [ 194.171971][ T5939] check_panic_on_warn+0xab/0xb0 [ 194.174020][ T5939] __warn+0xf6/0x3c0 [ 194.175687][ T5939] ? hci_conn_timeout+0x11a/0x210 [ 194.177841][ T5939] report_bug+0x3c3/0x580 [ 194.179692][ T5939] ? hci_conn_timeout+0x11a/0x210 [ 194.181818][ T5939] handle_bug+0x184/0x210 [ 194.183804][ T5939] exc_invalid_op+0x17/0x50 [ 194.185366][ T5939] asm_exc_invalid_op+0x1a/0x20 [ 194.186903][ T5939] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 194.188724][ T5939] Code: 00 e8 4a 6b 63 f7 4c 89 f1 4c 89 e2 48 c7 c6 20 64 d7 8c 48 c7 c7 e8 bc 7d 90 e8 d1 e9 7d fa e9 4d ff ff ff e8 27 6b 63 f7 90 <0f> 0b 90 e8 1e 6b 63 f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 194.195791][ T5939] RSP: 0018:ffffc90003a2fc20 EFLAGS: 00010293 [ 194.198005][ T5939] RAX: 0000000000000000 RBX: ffff88805aa28948 RCX: ffffffff8a597c0f [ 194.200555][ T5939] RDX: ffff888023c3a480 RSI: ffffffff8a597cb9 RDI: 0000000000000005 [ 194.203196][ T5939] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 194.205825][ T5939] R10: 00000000ffffffff R11: 0000000000000001 R12: ffff88805aa28000 [ 194.208286][ T5939] R13: 0000000000000000 R14: ffffffff90824e54 R15: ffffc90003a2fd00 [ 194.210740][ T5939] ? hci_conn_timeout+0x6f/0x210 [ 194.212306][ T5939] ? hci_conn_timeout+0x119/0x210 [ 194.213894][ T5939] process_one_work+0x9cf/0x1b70 [ 194.215466][ T5939] ? __pfx_process_one_work+0x10/0x10 [ 194.217132][ T5939] ? assign_work+0x1a0/0x250 [ 194.218609][ T5939] worker_thread+0x6c8/0xf10 [ 194.220050][ T5939] ? __pfx_worker_thread+0x10/0x10 [ 194.221709][ T5939] kthread+0x3c5/0x780 [ 194.223028][ T5939] ? __pfx_kthread+0x10/0x10 [ 194.224511][ T5939] ? rcu_is_watching+0x12/0xc0 [ 194.226053][ T5939] ? __pfx_kthread+0x10/0x10 [ 194.227561][ T5939] ret_from_fork+0x675/0x7d0 [ 194.229049][ T5939] ? __pfx_kthread+0x10/0x10 [ 194.230607][ T5939] ret_from_fork_asm+0x1a/0x30 [ 194.232155][ T5939] [ 194.233824][ T5939] Kernel Offset: disabled [ 194.235198][ T5939] Rebooting in 86400 seconds..