last executing test programs: 50.891271706s ago: executing program 2 (id=208): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x200000, 0x1a000}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x8, 0x85d7, 0x9, 0x9, 0x7f, 0xc, 0x72, 0x80, 0x8, 0x4, 0x4a, 0xb, 0x430f}, {0x1, 0x2324, 0x7, 0x4, 0x9, 0x0, 0x7f, 0xbd, 0x7, 0x0, 0x7, 0x1, 0x2}, {0x4, 0x3ff, 0x40, 0x6e, 0x8, 0xb4, 0x45, 0xb9, 0x8, 0x3, 0x1, 0x5, 0x5}], 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r4, 0x2, 0x13, r3, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 50.773387853s ago: executing program 2 (id=211): ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0/../file0\x00'}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)={0xfec00000, 0x14000, 0x1}) fsetxattr$security_selinux(r0, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000180)={0x6000, 0x6000}) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x9100) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x14000840) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r3, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000001900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000018c0)={&(0x7f0000000500)={0x13a4, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x1324, 0x8, 0x0, 0x1, [{0xa08, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50c, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bf4dc2724c604d223b8aa323d41ed3d551ff7956a0610f7f4232ac8211f897bb"}, @WGPEER_A_ALLOWEDIPS={0x4b8, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0xd}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff01}]}, {0x2cc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x298, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x900000}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x388, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2ec, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x8f34, @broadcast}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffff01}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "56aad31219f1e7999e49ac81edd7ed761a2a8026c0bfe0bc8bdcd468cb1fc63a"}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0caada9c79296fe16f9e4087777e3c66e6214e9f2811a9a7cca37f8f43018059"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "48229dd35c144efdfcec2b4281faec336cba3f0cef9cb3dd1f1ab6b3454979b5"}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x0, @private2, 0xd3}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010100}}]}, {0x1c8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x52b, @dev={0xfe, 0x80, '\x00', 0x39}, 0xf}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x170, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x13a4}, 0x1, 0x0, 0x0, 0x48001}, 0x4000000) ioctl$MEMGETINFO(r3, 0x80204d01, &(0x7f0000001940)) ioctl$HIDIOCGREPORTINFO(r3, 0xc00c4809, &(0x7f0000001980)={0x2, 0xffffffff, 0x8}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000019c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000001a00)={0x18, r9, 0xffffffffffffffff, 0x8001}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000001a40)) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000001b80)={r2, &(0x7f0000001a80)='-\x00', 0x105000, &(0x7f0000001ac0)={@_ha_fsid={[0xaa2, 0x80000000]}, {0x1ff, 0x5, 0x0, 0x9}}, 0x5, &(0x7f0000001b00)={@_ha_fsid}, &(0x7f0000001b40)=0xc9}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000001c00)={&(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r10, 0xc01c64ad, &(0x7f0000001c80)={r11}) r12 = inotify_init() close(r12) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000001cc0)={0x6, r1}) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001d00), 0x8202, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r13, 0x3b89, &(0x7f0000001d80)={0x28, 0x0, 0x0, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000001d40)}) bind$bt_rfcomm(r1, &(0x7f0000001dc0)={0x1f, @any, 0x4}, 0xa) 50.70902295s ago: executing program 2 (id=213): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)='debugfs\x00', 0x200010, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) 50.642636947s ago: executing program 2 (id=214): mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r2, 0x18, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000880)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f00000007c0)=0xe8) timer_create(0x8, 0x0, &(0x7f0000000080)) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setreuid(r3, r4) chdir(&(0x7f0000000080)='./file0\x00') r5 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9, 0x9, 0x20010, 0xffffffffffffffff, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x4000800}, 0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r8, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0x6}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x0, 0x810, 0xffffffffffffffff, 0x0) r10 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000800)={0x0, 0x0, 0x80200, 0x40001, 0x7c}, &(0x7f0000000600)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f00000003c0)=@IORING_OP_FTRUNCATE={0x37, 0x2c, 0x0, r6, 0x7}) syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000000640)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x1068ba, 0x0, 0x0, 0x186}}}, &(0x7f0000000440)) syz_io_uring_submit(r5, r9, r13, &(0x7f0000000540)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd, 0x81, &(0x7f00000006c0)=""/252, 0xfc, 0x1b, 0x0, {0x1, 0x0, 0x9, '\x00', &(0x7f0000000500)={0x2, 0x60, 0x20, &(0x7f00000004c0)="8bff3cb9969cd7548218a35ebd5811d0ac1ffa55f2c4b77045a2248f1e89df25", 0x8}, 0x2d}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 50.562457994s ago: executing program 2 (id=216): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f00000013c0)={0x2, 0x1, 0x3, 0x15, 0xc4, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c00000001900000827bd7000fbdbdf251c140009ff04ff07001000008400130000005d2f000000000b00000003000000000000000000000001000000090000000f000000000000000000000000000000000000000000000000000000000000080000000c00000000000000000000000f0f00000000000029ee326100000000000400000009000000000000000000000007000000000000000f00000000000000000000000000140012001f0074f9ed7ce216fa1bff9a8c58c5010c000900ddd0f369760dc1121a22e194882bd955b4bd674bcd916e3b72e1b2992bb36e6d630a94ece71f74028cae62f32f254954bb96453be88536b3765f710610e9bb86d0f5ce011df2983d75193e", @ANYRES32=r3, @ANYBLOB], 0xc0}, 0x1, 0x0, 0x0, 0x600}, 0x0) 50.082898242s ago: executing program 2 (id=221): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) write(0xffffffffffffffff, &(0x7f0000000300)='0', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000001c40), 0x4) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x39d}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, 0x8013, 0x8b00f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008806}, 0xc094) 50.024395565s ago: executing program 32 (id=221): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) write(0xffffffffffffffff, &(0x7f0000000300)='0', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000001c40), 0x4) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x39d}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, 0x8013, 0x8b00f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008806}, 0xc094) 24.372503224s ago: executing program 3 (id=616): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) (async) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) ppoll(&(0x7f0000000940), 0x0, &(0x7f0000000980), 0x0, 0xfffffffffffffefb) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}], 0x10) (async) mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, 0x0) (async) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x8100}, {r1, 0x660}, {r3, 0xc248}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000280)={[0x8]}, 0x8) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r5, 0x0) (async) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x2fdff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0), 0x48) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0xa4, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84014}, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r6, r8, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5}}, 0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0, r9}, 0x68) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000280)=r9, 0x4) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="0001000000004c6d606b00"], 0x1c}}, 0x0) 24.371451877s ago: executing program 3 (id=617): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x802, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000000080)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000100)={'syz0\x00', {0x3b, 0xdeb4, 0x0, 0x1}, 0x2e, [0x7, 0x9, 0x9, 0xa, 0x7fffffff, 0x8, 0x7, 0x10, 0x8, 0x5, 0x40000, 0x8, 0xfffffff9, 0x2, 0x0, 0x0, 0x5, 0x46, 0x5, 0x8, 0x5, 0x3, 0x2, 0xffff, 0x2, 0x6, 0x4, 0x0, 0x327, 0x7, 0x5a15, 0x2, 0x1, 0x8d53, 0x1, 0x4, 0x0, 0x782c, 0x40, 0x5f2a416f, 0x7, 0x3, 0x4, 0x1, 0xda0, 0x1, 0x515f, 0xfff, 0x7fff, 0x9, 0x9, 0x2, 0xfffff3e0, 0x7fff, 0x4, 0x7, 0x4e94, 0x2c, 0x5ede, 0x8, 0x3, 0x80000000, 0x3, 0x2f78], [0xfffffffe, 0x7, 0x3ff, 0x101, 0x8, 0x0, 0x4, 0x7f, 0x6, 0x1, 0x80000001, 0x1ff47685, 0x3, 0x7, 0xd, 0x5, 0x1, 0xda, 0x6, 0xff, 0xa7c, 0x715, 0x0, 0x8, 0x6, 0x5, 0x91, 0xd, 0x6, 0x3, 0x800, 0x5, 0x9, 0x6, 0x6, 0xd536, 0x1, 0xc86f, 0x3, 0x7, 0x7, 0x4, 0x8, 0x5, 0xffffffff, 0x6, 0x9, 0x8001, 0x9, 0x3b, 0x8, 0x7, 0x3, 0x80000001, 0x400, 0x1ff, 0x6, 0xff, 0x200, 0x6, 0x81, 0x81, 0x2, 0x3], [0x7fffffff, 0x0, 0x800, 0x80000000, 0xf529, 0x9, 0x2, 0x6, 0xffffffff, 0x1, 0x9, 0x2c23571c, 0x441c60b2, 0x8e0, 0x6, 0xe, 0x6, 0x8, 0x427358b8, 0x9, 0x5, 0xff, 0x3, 0x7, 0xf4, 0x81, 0x4, 0x0, 0x90c8, 0x9, 0xfffffffb, 0x7f, 0x8, 0x7f, 0xffff9b71, 0x2, 0x59, 0x8, 0x7, 0x7, 0xfff, 0x8, 0xe27, 0x9, 0x5, 0x21a7, 0x2, 0xec72, 0xf6eb, 0x8, 0x136, 0x2, 0xffffff81, 0xb, 0x1, 0x7, 0x1000, 0xfffffff5, 0x7, 0xa, 0x9, 0x7, 0x9], [0x1, 0x8, 0x7, 0x6ab, 0x4b, 0x0, 0x0, 0x0, 0x500000, 0x9, 0x6, 0x0, 0x7, 0x2, 0x644ec36e, 0x3, 0x4, 0x0, 0x5, 0x2, 0xe0aa, 0x5, 0x6, 0xffffc6f3, 0x5, 0x8, 0x8, 0x2, 0x0, 0x6, 0x99, 0x1, 0x8001, 0x1, 0xfff, 0xf7600000, 0x9, 0x8001, 0xecf1, 0x0, 0x8, 0xfffffffd, 0x401, 0x7, 0x1, 0xa6a1, 0xc63f, 0x8, 0x3, 0x7, 0x198e, 0xb, 0x5, 0x440, 0x3, 0x8000, 0x1ff, 0x9, 0x1, 0x76f, 0x0, 0xc96, 0x86, 0x1]}, 0x45c) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000005c0), 0x4) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000600)={0x8, 0x10000, 0x5, 0x20, 0x9}) r4 = dup3(r2, r3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000000640)={0xdcb3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1c, "b0f2b293abf70b"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001640)={r5, 0x2}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/address_bits', 0x1a500, 0x10) tee(r0, r6, 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000002680)={0x2}) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f00000026c0)={0x408, 0xfffffffffffffffe, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000008880)={r4, 0x58, &(0x7f0000008800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000088c0)={0x0, 0x0}, &(0x7f0000008900)=0xc) sendmsg$nl_xfrm(r6, &(0x7f0000008b80)={&(0x7f00000087c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000008b40)={&(0x7f0000008940)=@expire={0x1d8, 0x18, 0x800, 0x70bd29, 0x25dfdbff, {{{@in6=@loopback, @in=@empty, 0x4e21, 0x3, 0x4e22, 0x4, 0xa, 0x100, 0x20, 0x73, r7, r8}, {@in6=@local, 0x4d4, 0x6c}, @in=@rand_addr=0x64010100, {0xe55, 0x5000000, 0x8, 0x6e, 0x0, 0x1, 0x0, 0x8}, {0x2c, 0x101, 0x7, 0x4}, {0xd, 0x9c, 0x6}, 0x70bd25, 0x0, 0xa, 0x2, 0x2, 0x20}, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @tmpl={0xc4, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x32}, 0x2, @in=@rand_addr=0x64010101, 0x3502, 0x3, 0x2, 0xf9, 0x6, 0x5, 0xcba}, {{@in6=@remote, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3502, 0x1, 0x1, 0x0, 0x5, 0x2, 0x3}, {{@in6=@remote, 0x4d3, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4, 0x1, 0x3, 0x3000000, 0x6c, 0x80}]}, @coaddr={0x14, 0xe, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000001}, 0x4010) bpf$MAP_CREATE(0x0, &(0x7f0000008bc0)=@base={0x12, 0x1, 0x9, 0xa97, 0x440, r6, 0x0, '\x00', r7, r3, 0x1, 0x0, 0x3}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000008c40), r6) setsockopt$MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000008c80)={{0xa, 0x3, 0x1b0487ed, @mcast1, 0x1000}, {0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}, 0x7fff}, 0x0, {[0x8, 0x8000, 0x1, 0x5, 0x66e74bb4, 0x10001, 0x40, 0x1ff]}}, 0x5c) ioctl$FITHAW(r1, 0xc0045878) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000008d00), 0x10000, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000008d40), 0x404202, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000008d80)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r9, 0xc0505405, &(0x7f0000008dc0)={{0x1, 0x0, 0x18, 0x3, 0xfffffc01}, 0x400, 0x6, 0x4}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f0000008f40)={&(0x7f0000008e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000008f00)={&(0x7f0000008e80)={0x58, 0x1411, 0x8, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x480}, 0x4000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000008f80), 0x125000, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000008fc0)={0x1, 0x8001}, 0x8) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r3, 0xc0205866, &(0x7f00000092c0)={&(0x7f0000009000)=0x8000000000000001, 0xe3d2, &(0x7f0000009040)=[{}, {}, {}], &(0x7f0000009280)}) 24.282935351s ago: executing program 3 (id=618): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000007f000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.212739895s ago: executing program 3 (id=619): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007600090700000000000000000702e1ff", @ANYRES32=0x0, @ANYBLOB="0c000d80080003"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x10, 0x40, 0x8, 0x9, {{0xd, 0x4, 0x2, 0x24, 0x34, 0x64, 0x0, 0xbb, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0x95, [@rand_addr=0x64010101, @rand_addr=0x64010102, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x44}]}, @timestamp={0x44, 0xc, 0x33, 0x0, 0x3, [0x7, 0x3]}, @noop]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES32=r5, @ANYRESDEC=r1], 0x38}, 0x1, 0x0, 0x0, 0x2400c0c4}, 0x4000000) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'bond0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0}, &(0x7f0000000480)=0x14) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000380)=@newqdisc={0xfffffffffffffd42, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xb, 0xffff}, {0x6, 0xe}}}, 0x40}, 0x1, 0x0, 0x0, 0x4000014}, 0x20004000) sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="d8000000550000022cbd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="00020000ff0100000000000000000000000000010000000020000100", @ANYRES32=r3, @ANYBLOB="0100040020010000000000000000000000000002080000002000010002b46b434a863a95e8b9ec903daf228ee1bb3ddae7cd8a7e891b8c61a6141fe7c9a7b1b99e017646319bf2d625ab829458bdfb125514dbce3bf23513d64df3273eac20d5bcd4f03966822a4f701408a0f9519225542feb960944a16638ac3adc5435c755afb3acddc639464efeeda524234cfdb7a607488a546297ce0928888ba6b06a18c1466b410e952dddb689a4d16f7bd62d046bbddaa47d4e815a9aca", @ANYBLOB="22ac75443794301e08a4f01c546a5d9edcf8035dad5b5a67c7b04dece8c2", @ANYBLOB="01030200ff0200000000000000000000000000018edd000020000100", @ANYBLOB="a188656407afa1d6cf26466983aca5a0fd9ad81bb0ea4b08c2c016daf7cf4ee7850563a624b4ff4ba9cc4f172a3fd1ff44b0d38cdbc363e6588dd0367458694cf84c81ba7ae68123136dee55f76c9b982431d68430920aec3e20fa3b5bc8ac29b5ee9acee6df4d551513abca1fd4790b5b0ea963bc2dd15024dd470c8893f7ec745c5fbcc19997a073cfce13a48fda66089600d29f513ea7489a8b22e70d7582", @ANYBLOB="010200007f00000100000000000000000000000086dd000020000100", @ANYRES32=r8, @ANYBLOB="01030100ac1414bb0000000000000000000000000000000020000100", @ANYRES32=r10, @ANYBLOB="01000000ac1414aa00000000000000000000000008000000"], 0xd8}, 0x1, 0x0, 0x0, 0xd7c9db0096fa1819}, 0x4000000) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000003b40)={{{@in6=@rand_addr=' \x01\x00', @in6=@remote, 0x4e21, 0x9, 0x4e20, 0x0, 0xa, 0x0, 0x20, 0x2b}, {0x0, 0xfc00000000000000, 0x7, 0xffffffff, 0xad0a, 0xffffffff, 0x0, 0x8}, {0x2, 0x4, 0x2, 0x401}, 0x7fff, 0x6e6bb9, 0x2, 0x76464fa9d804edb4, 0x1}, {{@in=@broadcast, 0x4d2, 0x2b}, 0x2, @in=@multicast2, 0x3502, 0x1, 0x2, 0x8, 0xa, 0xfffffffb, 0x9}}, 0xe8) r11 = socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0x78}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 24.132924859s ago: executing program 3 (id=620): preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/166, 0x3f}, {&(0x7f00000003c0)=""/89, 0x59}], 0x2, 0x7fff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) pread64(r1, &(0x7f0000000880)=""/4096, 0x1000, 0x8) socket$inet(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400003, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15880400020404000500230003000000"], 0x28}, 0x1, 0x0, 0x0, 0x46801}, 0x4000804) 23.712017185s ago: executing program 3 (id=626): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @dest_unreach={0x1, 0x6, 0x0, 0x6, '\x00', {0x0, 0x6, "317413", 0x10, 0x0, 0x0, @empty, @rand_addr=' \x01\x00'}}}}}}}, 0x0) shutdown(r2, 0x0) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x101) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/3:0:0:0\x00', 0x80400, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000140), &(0x7f0000000180)=r5}, 0x20) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000080)={0x41, 0x6, 0x3ff, "6b05d9ac9c4e93849e78c5490c65c6a060942047ab13afa9cf364f849b701b1db5d2288f2c8c22924b8bf1b4355c5b3620c088fcfd86554a98d579f18f1aaa6680"}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r7, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000400)={0x5e0, r8, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0x14c, 0x13, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [{0x5, 0x1, '/'}, {0x5, 0x1, '&'}, {0x6, 0x1, '%)'}, {0x5, 0x1, '('}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}]}, {0x50, 0x0, 0x0, 0x1, [{0x6, 0x1, '$.'}, {0x7, 0x1, ']}$'}, {0x6, 0x1, '*,'}, {0xa, 0x1, '\xa8^j[@\xe9'}, {0xe, 0x1, '!]]*^-!)[\\'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x6, 0x1, '$\xe7'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x5, 0x1, '\x00'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x5, 0x1, ':'}]}, {0x48, 0x0, 0x0, 0x1, [{0x6, 0x1, '\x13%'}, {0x8, 0x1, '/[\x10%'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x5, 0x1, '\x00'}, {0x8, 0x1, 'GPL\x00'}, {0xa, 0x1, '\xa1:-&@)'}]}, {0x34, 0x0, 0x0, 0x1, [{0x6, 0x1, ')\\'}, {0x9, 0x1, '\'[^\\\\'}, {0x8, 0x1, 'GPL\x00'}, {0x8, 0x1, 'GPL\x00'}, {0xa, 0x1, '!@@}!-'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_LLC_SDP={0x25c, 0x13, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [{0xb, 0x1, '\\B+/:,+'}, {0x4}, {0x7, 0x1, ' \x01\x00'}, {0x5, 0x1, '#'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x6, 0x1, '])'}]}, {0x60, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x4}, {0x4}, {0x8, 0x1, 'GPL\x00'}, {0x7, 0x1, ' \x01\x00'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x9, 0x1, '#\\]\\!'}, {0x8, 0x1, 'GPL\x00'}, {0x6, 0x1, ')\x1a'}, {0x5, 0x1, '\x00'}]}, {0x84, 0x0, 0x0, 0x1, [{0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x5, 0x1, '\x00'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}]}, {0x58, 0x0, 0x0, 0x1, [{0x8, 0x1, '.:@\x8e'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x15, 0x1, '@*!-/%]*^\xa4\'%/I/{('}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x4}]}, {0x2c, 0x0, 0x0, 0x1, [{0x11, 0x1, '$%@\\[/:&.):(/'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x5, 0x1, '+'}]}, {0x30, 0x0, 0x0, 0x1, [{0x4}, {0x5, 0x1, '\x00'}, {0x8, 0x1, 'GPL\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}]}, {0x70, 0x0, 0x0, 0x1, [{0x13, 0x1, '.@\xfb:B%/:-E{!{+)'}, {0x7, 0x1, '}\\+'}, {0x5, 0x1, '*'}, {0x8, 0x1, 'GPL\x00'}, {0x5, 0x1, ')'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0xa, 0x1, '(.%/{/'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x8, 0x1, 'GPL\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x164, 0x13, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x6, 0x1, ',/'}, {0x8, 0x1, 'GPL\x00'}]}, {0x24, 0x0, 0x0, 0x1, [{0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x5, 0x1, '}'}, {0x9, 0x1, '&)(H$'}]}, {0x4c, 0x0, 0x0, 0x1, [{0x9, 0x1, ',{}#{'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x7, 0x1, ' \x01\x00'}, {0x8, 0x1, 'M%-%'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x7, 0x1, '^%('}]}, {0x58, 0x0, 0x0, 0x1, [{0x9, 0x1, '\xd4%))@'}, {0x8, 0x1, '$x))'}, {0x7, 0x1, '(\'('}, {0x5, 0x1, '['}, {0xd, 0x1, '&*}{-\\-##'}, {0x7, 0x1, '!)+'}, {0x4}, {0x7, 0x1, ' \x01\x00'}, {0x5, 0x1, '.'}, {0x4}]}, {0x58, 0x0, 0x0, 0x1, [{0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x4}, {0x8, 0x1, 'GPL\x00'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0x5, 0x1, '}'}, {0x9, 0x1, '&%,)-'}]}, {0xc, 0x0, 0x0, 0x1, [{0x6, 0x1, '$^'}]}]}, @NFC_ATTR_LLC_SDP={0xb0, 0x13, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [{0x4}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x8, 0x1, '.^\\\''}, {0x7, 0x1, '{/@'}]}, {0x28, 0x0, 0x0, 0x1, [{0x7, 0x1, ' \x01\x00'}, {0x8, 0x1, 'GPL\x00'}, {0x9, 0x1, '\'(&#&'}, {0x8, 0x1, '!,^\\'}]}, {0x1c, 0x0, 0x0, 0x1, [{0x5, 0x1, ','}, {0x8, 0x1, 'GPL\x00'}, {0x7, 0x1, ' \x01\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x4}, {0x6, 0x1, '#\\'}, {0x4}, {0x8, 0x1, '@&($'}, {0x4}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x5e0}, 0x1, 0x0, 0x0, 0x24008001}, 0x4000044) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x8) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000140)={0x2000200b}) 23.671344182s ago: executing program 33 (id=626): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @dest_unreach={0x1, 0x6, 0x0, 0x6, '\x00', {0x0, 0x6, "317413", 0x10, 0x0, 0x0, @empty, @rand_addr=' \x01\x00'}}}}}}}, 0x0) shutdown(r2, 0x0) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x101) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/3:0:0:0\x00', 0x80400, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000140), &(0x7f0000000180)=r5}, 0x20) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000080)={0x41, 0x6, 0x3ff, "6b05d9ac9c4e93849e78c5490c65c6a060942047ab13afa9cf364f849b701b1db5d2288f2c8c22924b8bf1b4355c5b3620c088fcfd86554a98d579f18f1aaa6680"}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r7, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000400)={0x5e0, r8, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0x14c, 0x13, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [{0x5, 0x1, '/'}, {0x5, 0x1, '&'}, {0x6, 0x1, '%)'}, {0x5, 0x1, '('}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}]}, {0x50, 0x0, 0x0, 0x1, [{0x6, 0x1, '$.'}, {0x7, 0x1, ']}$'}, {0x6, 0x1, '*,'}, {0xa, 0x1, '\xa8^j[@\xe9'}, {0xe, 0x1, '!]]*^-!)[\\'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x6, 0x1, '$\xe7'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x5, 0x1, '\x00'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x5, 0x1, ':'}]}, {0x48, 0x0, 0x0, 0x1, [{0x6, 0x1, '\x13%'}, {0x8, 0x1, '/[\x10%'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x5, 0x1, '\x00'}, {0x8, 0x1, 'GPL\x00'}, {0xa, 0x1, '\xa1:-&@)'}]}, {0x34, 0x0, 0x0, 0x1, [{0x6, 0x1, ')\\'}, {0x9, 0x1, '\'[^\\\\'}, {0x8, 0x1, 'GPL\x00'}, {0x8, 0x1, 'GPL\x00'}, {0xa, 0x1, '!@@}!-'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_LLC_SDP={0x25c, 0x13, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [{0xb, 0x1, '\\B+/:,+'}, {0x4}, {0x7, 0x1, ' \x01\x00'}, {0x5, 0x1, '#'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x6, 0x1, '])'}]}, {0x60, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x4}, {0x4}, {0x8, 0x1, 'GPL\x00'}, {0x7, 0x1, ' \x01\x00'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x9, 0x1, '#\\]\\!'}, {0x8, 0x1, 'GPL\x00'}, {0x6, 0x1, ')\x1a'}, {0x5, 0x1, '\x00'}]}, {0x84, 0x0, 0x0, 0x1, [{0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x5, 0x1, '\x00'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}]}, {0x58, 0x0, 0x0, 0x1, [{0x8, 0x1, '.:@\x8e'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x15, 0x1, '@*!-/%]*^\xa4\'%/I/{('}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x4}]}, {0x2c, 0x0, 0x0, 0x1, [{0x11, 0x1, '$%@\\[/:&.):(/'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x5, 0x1, '+'}]}, {0x30, 0x0, 0x0, 0x1, [{0x4}, {0x5, 0x1, '\x00'}, {0x8, 0x1, 'GPL\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}]}, {0x70, 0x0, 0x0, 0x1, [{0x13, 0x1, '.@\xfb:B%/:-E{!{+)'}, {0x7, 0x1, '}\\+'}, {0x5, 0x1, '*'}, {0x8, 0x1, 'GPL\x00'}, {0x5, 0x1, ')'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0xa, 0x1, '(.%/{/'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x8, 0x1, 'GPL\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x164, 0x13, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x6, 0x1, ',/'}, {0x8, 0x1, 'GPL\x00'}]}, {0x24, 0x0, 0x0, 0x1, [{0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x5, 0x1, '}'}, {0x9, 0x1, '&)(H$'}]}, {0x4c, 0x0, 0x0, 0x1, [{0x9, 0x1, ',{}#{'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x7, 0x1, ' \x01\x00'}, {0x8, 0x1, 'M%-%'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x7, 0x1, '^%('}]}, {0x58, 0x0, 0x0, 0x1, [{0x9, 0x1, '\xd4%))@'}, {0x8, 0x1, '$x))'}, {0x7, 0x1, '(\'('}, {0x5, 0x1, '['}, {0xd, 0x1, '&*}{-\\-##'}, {0x7, 0x1, '!)+'}, {0x4}, {0x7, 0x1, ' \x01\x00'}, {0x5, 0x1, '.'}, {0x4}]}, {0x58, 0x0, 0x0, 0x1, [{0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x4}, {0x8, 0x1, 'GPL\x00'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0x5, 0x1, '}'}, {0x9, 0x1, '&%,)-'}]}, {0xc, 0x0, 0x0, 0x1, [{0x6, 0x1, '$^'}]}]}, @NFC_ATTR_LLC_SDP={0xb0, 0x13, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [{0x4}, {0x15, 0x1, '/dev/bsg/3:0:0:0\x00'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x8, 0x1, '.^\\\''}, {0x7, 0x1, '{/@'}]}, {0x28, 0x0, 0x0, 0x1, [{0x7, 0x1, ' \x01\x00'}, {0x8, 0x1, 'GPL\x00'}, {0x9, 0x1, '\'(&#&'}, {0x8, 0x1, '!,^\\'}]}, {0x1c, 0x0, 0x0, 0x1, [{0x5, 0x1, ','}, {0x8, 0x1, 'GPL\x00'}, {0x7, 0x1, ' \x01\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x4}, {0x6, 0x1, '#\\'}, {0x4}, {0x8, 0x1, '@&($'}, {0x4}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x5e0}, 0x1, 0x0, 0x0, 0x24008001}, 0x4000044) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x8) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000140)={0x2000200b}) 7.760980577s ago: executing program 1 (id=894): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf251b1800000700210030"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000002c0)=@ethtool_eeprom={0x30, 0x4d, 0xd832}}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(0x0, 0x2) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000080)="7cf94d", 0x3}, {&(0x7f0000002740)="fe1334963b86c1b24494af2b78d38d", 0xf}], 0x2, 0x0, 0x0, 0x200480c0}], 0x1, 0x4) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b02, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[], 0x0) mkdirat(r0, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1, 0x0, 0x50}, 0x0) fstat(r10, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) read(r5, 0x0, 0x0) sendfile(r4, r4, &(0x7f00000000c0)=0x8b, 0x3) 4.540728952s ago: executing program 1 (id=924): r0 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) 4.455958674s ago: executing program 1 (id=925): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffffa1, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008040) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.336694568s ago: executing program 1 (id=926): r0 = socket$alg(0x26, 0x5, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='ufs\x00', 0x204001, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) syz_80211_inject_frame(0x0, 0x0, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x55, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f80)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x4) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r6, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)=ANY=[@ANYRES64=r1, @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="b702000007000000bfa300000000000007030000f0ffffff7a0af0ff0000008179a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000b5000000b700000000000000950000000000000000e154cd8445974b26ffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a55b000000c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2d90addedc28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000801989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c1f860d050d694cc7806d294d3665016a7b29da0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d40887c58559b7dcb98a6273b8c651e57f727041c62cea5b7bd24d9f679e4fbe948dfb4cc4a389469608241630459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b83720eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb89872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebed161980f2fde4f9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e4bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802c8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99e85b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5359dbdfbf31a562395020becaf3fd1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4b28288e78980c1184d8223edbc4bf9258b7374e79a8f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b5524642c248aa813edaa626f0000000000000000000000000000000003ba5bac34b611569a451564d3a5400f9097ffe7a37e765bc652be71ee24250d6d9cf19878dd62c53062d6000c40bde6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89ad07963acbd4dd4dc5b4552591edde7a22ad06f7567e6fec2f65011b579bf609d61a3ff4d6f490824bb035995449fc34106ae6889f036d67b6aaee784f855ebc746ac871b5d2031ac0a252ac1f86e93e245f3793cea80b6de773899d49d11d3b1ed79163b111c976cf840a2ef6214a43338fba8c9edb6be26e68fcc5d47ed74a66ce8aba726ab955b9b32ab1890e84a5e2d7476252af25e5c95c5a8b2b1b5c8a2645b01b823c0f169d6ab529cc889bb07889d9e155114cf3e26a50c527ec6d4021cd2cacfea6d7e41e39e26b3967cad65c648b170f12ea9cc69dcee64be0c27b1f4f7f5ce3e62c35602c9d2921326891901661c85b988494f094abb91ed813b42828aa93105896e0aee851a8087e169a1d69e841257d9053d0cdc3a6ac4f12084cc6470abebe8b344b1f56690a2687b428686c854c21831da277e8b8a21b7b91a46d22ba083eca7b1f8268048cde7d6f237dca42035881b29ca9c8c2937971821b613894297ff6f7796053a4de1fd77e180cc22b205d43bb4a1b59962c1f605ea1b74585cf5e8d579f157cb45561c357f9976cec6a43388b3049a0d9c171ff6145266ba119d00000000001ef3794a930eb12f3a6215c510bf0bca70c127e9c70cc7bef921249a7f18a0034ce3264a9e96656b47233e2ed7c76520e649c3fd550bdafd77c5cd72b4446d3e157ddd97e7622a6891fb739acd3b2cdaf65ac78490f0641be6e8c6f55bf3d228786895ff5fd5970faacd8a5025aca0aa1931f477ba06aa60051298c8bf7f3b399194f98dc3f4e8513ad06da09dc393c1284515986b8c70ac69512f6c0c04f42edb3a097a11f2ab480e3e391abffae097752300576337c6dd24c4a98280684aa1fe8c7b43ee8bce05fe979b34da18cdb44dbb030b8009cd3b3b44fd8e7b534acd3f1839cb54817668ab446d3d47848429ea831a57f222c714870582a8832c2a326c5d1e406c8b05dedddceb24483f8f998b05c3ddf85c3799c9000000000000000000000000001e57cf839eb3150d6a076fb7b86fae98dbb46014f483aecb4ec4f0877371bcae8912c78aff857c669760f0e55041563c5c3e8ee4a0eef885fd43fe34a1febc82370d1d07fdfe705ada47288e41e7e6ee82d66b99ae4b0889fe949e7342ca97c1a64dcc7f6a0c0da07de8c808b4caec54820f856889fc5f1af3d675206e3257f974d6e45ff1e905c2f0fc0173ac6714acaaca2397bee23630ecaa2c1c6ddc3085689a033d6d41a1a7ac59baec299158faa52308856805f2130863f4668e27b8bbef4f4cd43a2fd294b5b0bf2b0e4afbe570c54aa214579ca0caf54231d00a94eda2be6f037e2befdd03bf152f696ca1d1ea86eb7ee1f021062ad71246dae1580c4f959a320912032ed468a8ed9f27a2258ddf465de77a51b4713bc6b789a0e8b203f0f592ddb27aa90989a9e0cb624bc34e7d6ebf156ea251e3a2f83ada9f0b70035e8ed200a52b00"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0}) r8 = syz_usb_connect$uac1(0x1, 0xf2, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x2b53, 0x31, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x3, 0x1, 0x1, 0x0, 0x40, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x50}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x403, 0x2, 0x2, 0x0, 0xa, 0xfb}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x405, 0x3, 0x4, 0xf7}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x402, 0x3, 0x80, 0x7, 0x7}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x2, 0x6, "c5e7e248e1bb"}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x4, 0x2, "e860f7ff97"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x204, 0x6, 0x9, 0x4, 0xd9, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xc}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0x40, 0x5, "968558", "b6269a"}, @as_header={0x7, 0x24, 0x1, 0x9, 0xf0, 0x2}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x2, 0x5, 0xf0, "db6a97"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0xc, 0x4, {0x7, 0x25, 0x1, 0x4, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x2, 0x1, 0x81}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x0, 0xe, 0x3, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x4, 0x7, {0x7, 0x25, 0x1, 0x0, 0x6, 0x5}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x4, 0x7, 0x55, 0x8, 0x40}, 0x13, &(0x7f00000003c0)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x29, 0x1, 0xfc, 0x5, 0x4}]}, 0x2, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x816}}, {0x57, &(0x7f00000004c0)=@string={0x57, 0x3, "921e0ea66c993a7ac0b8ddab68fcd2e95d3d13d9066852d68fd0fd41b9da9bcec0e398a152432a4aa69f3d0cb4fbb50b617f9cf8d84ec2fe65a42aa20d7da0298b1e483fa0529f7379ed65e6783c848ddef8f86330"}}]}) syz_usb_control_io(r8, &(0x7f0000000740)={0x2c, &(0x7f0000000580)={0x40, 0xc3b0c1b8b25c9d23, 0xb1, {0xb1, 0xc, "9d9bbe87c049ff20c5814cab0ab142524ba8f6c537b080a6140eca1cc3a12f84d60df908a7e494e088a0d2ca6128bbc09f010ecc7c3aca40ff61a4600af8972eac797d609ca4c1decd38e16a9d732b1eb1486e079032b3755d203bfc5dcb8881556f8225c261ccc8467f7cf0062c8161c802402e281fd658f6f4276cb286d85fe6d80bde6ee0205053c609003c2dd4c60234330d220f6c2a7d77103aff5ab00d2123e33421d5da8e68930c77f4fad7"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}, &(0x7f0000000680)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x80, 0x40, 0x94, "945c0d55", "16e8a2ea"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x18, 0x2, 0xc4, 0x3, 0x471c, 0x6b}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000780)={0xa917d56f0729f8af, 0x31, 0xed, "6003ba5d003805d20d52c19e281d92a101382eb54014d8b7db972f3330a1e2941c218651dea0048f4f9980aa3fe8c7154f40f96b2071f093fc03ccf6a58554a3472ab79d0b1ab95ea91a3cbe1bfc18c706a69cb9e34e17fe0182a7c3147940da3d7e31a9a1a4e82f7338a4cca1ad28ef707166fce81b2596c133f12c9ce1bfbde639927760f6df1c7f0b2f9c24d88a464bd7cd09f566805fc6d9bdb6e4963d919a7b193e54cab756ceab3c3253bb4d90dbf70e0c97ada8ba13cf130c782d7f650268343f50be39965cd6d748878349168e1d8bc1e27388cb8c20409b30f0949275dd56bed358da540291dfa644"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000940)={0x20, 0x0, 0x8, {0x100, 0x20, [0xf000]}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0xb}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000a00)={0x40, 0xb, 0x2, '7L'}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0x10}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "61e4"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0xa}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0xf8}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x3]}, 0x8, 0x800) 2.424275795s ago: executing program 0 (id=963): r0 = getpid() ioprio_set$pid(0x1, r0, 0x2000) (async) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0xfff) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0], 0x5c}}, 0x0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000280)={'syz1\x00', {0x2, 0x5, 0x5c, 0x2}, 0x33, [0x0, 0x1, 0xffff0000, 0x0, 0x101, 0x5, 0x8, 0x80000001, 0x2aa9fa9c, 0x6, 0x60000, 0xa183, 0xffffff28, 0x5, 0x8001, 0x50000000, 0xb, 0x401, 0xb89, 0x9, 0x1, 0x5, 0x8, 0x3, 0x10001, 0x3, 0x1, 0xd90, 0x3, 0x3, 0x81, 0x9, 0x8, 0x1, 0x6, 0x6, 0x7ff, 0x8000, 0x2, 0x7, 0x4, 0xe, 0x1, 0x9, 0x2, 0x8, 0xe0e6, 0x5, 0x6, 0x0, 0x4, 0x393, 0x1, 0x2, 0xb, 0x101, 0x5, 0x5, 0x935, 0x6, 0xfffffffd, 0x4, 0x8001, 0x9], [0x1ff, 0x1, 0xffff, 0x7, 0x2, 0x1, 0x6, 0xb5, 0xffffffff, 0x2, 0xf, 0x2, 0x8ef, 0x0, 0x9, 0x7, 0x401, 0x1, 0x40, 0x200, 0x6, 0x2, 0x5, 0xffffffff, 0x8, 0x6, 0x8001, 0x4, 0x2, 0x9, 0x8, 0x703, 0x200, 0xb9, 0x800, 0x666, 0x6, 0xb, 0x10001, 0x6, 0x7fef, 0x10000, 0x5, 0x2, 0x318, 0x1, 0xe, 0xb5, 0x9, 0x9, 0x3931, 0x8, 0x6, 0xf1, 0x40, 0x5, 0x7, 0xd, 0xffff0000, 0x1, 0x7ff, 0x2, 0x4, 0x8], [0x6, 0x0, 0x2, 0xeab, 0x4, 0x4, 0x3, 0x6, 0x4, 0x100, 0x101, 0x5a65, 0x3, 0x35, 0xfffffe01, 0x0, 0x8, 0x10000000, 0x1, 0x0, 0xa, 0xc6e, 0x3, 0xbfc1, 0x1, 0x4, 0x3, 0xf, 0x3, 0x10, 0x3, 0x0, 0x3, 0x3, 0x40, 0x2, 0x8, 0x6, 0x8, 0xc, 0x401, 0x6, 0x0, 0x7, 0x101, 0x3ff, 0x101, 0x2, 0x7, 0x8000, 0x10, 0x5, 0x1, 0x5b, 0x6, 0xd3, 0x5, 0xbdc, 0x4, 0x6, 0x0, 0xfffffff7, 0x9, 0x8], [0xe, 0x9, 0x9, 0x5a, 0x9, 0xbb7, 0x2, 0x7fff, 0x0, 0x2, 0x9, 0x1ff, 0x9, 0x13, 0x3, 0x23, 0x80000000, 0x800, 0x2, 0x7ff, 0x3, 0x3, 0x642, 0x9, 0x5, 0xffffffff, 0x2, 0x5, 0x5, 0xd9, 0x401, 0x8, 0x10000, 0x8, 0x6, 0x9, 0x3, 0x7, 0x4, 0xa, 0x5, 0x3b, 0x3ff, 0x2, 0x3, 0x4, 0x861, 0x7, 0xffffffff, 0xd5, 0xd64c, 0x0, 0x6, 0xffffffff, 0x8, 0xfff, 0x6, 0x10000, 0x1b7c000, 0x8, 0x7, 0x0, 0xfffffffe, 0x6]}, 0x45c) (async) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000019080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2.423371508s ago: executing program 0 (id=965): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x180}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8], 0x7c}}, 0x0) 2.423160551s ago: executing program 0 (id=966): r0 = socket$netlink(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0xb}, 0x2, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="41c2cb909beb39ca5800000010001fff7bffffff", @ANYRES32=0x0, @ANYBLOB="2010000000810000380012800b00010067726574617000002800028004001200060010004e200000060002000300000006000e000000000006000f0000100000"], 0x58}}, 0x40804) chdir(&(0x7f00000001c0)='\x00') 2.420159889s ago: executing program 0 (id=968): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0xfff8}]}]}]}, 0x74}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000025, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback}, 0x1c) io_setup(0x1, &(0x7f00000000c0)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a84000000060a010400000000000000000a00000409e7000073797a3100000000280004801800018007000100727400000c00028008000240000000000c00018008000100647570003c000480380001800e000100696d6d65646961746500000024000280180002801100010038bf72941d484c506bcf7ba36c0000000800014000000015140000001100010000000000000000000100000a"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) lseek(r3, 0x7fff, 0x1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300020c00000027bd70000000000003000600000000000000000200010000000000000005fc01e2ffdf030005000000000002000000aca14e38c00000000000000002000800080000003400000000000000"], 0x60}, 0x1, 0x7}, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r5, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x3, 0xe9, 0xfffffe00}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) 2.287023751s ago: executing program 5 (id=972): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) creat(&(0x7f0000000440)='./file0\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x20000003}) close_range(r3, 0xffffffffffffffff, 0x0) 2.190466284s ago: executing program 5 (id=973): socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x90, r1, 0x5, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x3, 0x4400, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1000, 0x0, 0x4, 0x0, {0x7, 0x1f81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x1, 0xfff, 0x8}}, @void, @void, @void}}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xbc}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x27}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}]}, 0x90}}, 0x0) 2.190125728s ago: executing program 5 (id=974): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x27c, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x1cc, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty, 0x6c, 0x0, 0x0, 0x3506, 0x2, 0x2}, {@in=@empty, @in=@private=0xa010100, @in6=@remote, @in6=@mcast2, 0x33, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2, 0xff, 0x3, 0x0, 0x3503, 0x8, 0x2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev, 0x0, 0x1, 0x0, 0x3506, 0x2, 0xf}, {@in6=@mcast2, @in=@broadcast, @in6=@private2, @in6=@remote}]}, @policy_type={0xa}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd29, 0x70bd2d, 0x70bd27, 0x70bd28, 0x7f, [0x0, 0x7, 0x7, 0x5, 0x80, 0x0, 0x5, 0xfffffff7, 0x6]}}, @proto={0x5, 0x19, 0x6c}, @mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0x27c}}, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000040)={0x0, 0x6}, 0x2) 2.115967009s ago: executing program 0 (id=975): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) syz_ublk_setup_io_uring(0x2928, &(0x7f0000000480)={0x0, 0xcfed, 0x4, 0x2, 0x1d0, 0x0, r2}, &(0x7f0000000300)=0x0, &(0x7f00000001c0), &(0x7f0000000240)) r4 = mmap$IORING_OFF_CQ_RING(0x0, 0x2, 0x0, 0x10, r2, 0x8000000) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10}) r8 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, r7, &(0x7f0000000280)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0xf, 0x0, r8, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r9}}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/custom1\x00', 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r12, r13, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000340)={0x10004, 0x2, 0x9000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_RUN(r13, 0xae80, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) r15 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r15, 0x7a7, &(0x7f0000000040)=0xa0000) r16 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r17, r17, 0x0) 2.115710801s ago: executing program 5 (id=976): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)='%pK \x00'}, 0x20) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x5}}, 0x30) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x1e, &(0x7f0000000200)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x574}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x13}, 0x94) 1.98831006s ago: executing program 5 (id=977): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 1.933528377s ago: executing program 0 (id=978): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x400000000000222, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000640)={0x1, @io_capability_reply={{0x42b, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1, 0x7}}}, 0xd) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584", @ANYRESOCT=r0], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1}) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000002d40), 0x3, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000003c0)={'pcl812\x00', [0x140, 0xffffffff, 0x3, 0x2, 0x3, 0x10000, 0x7fff, 0x806, 0x1007, 0xc72d, 0x4, 0xf, 0x2009, 0x8, 0x4ce, 0x9e9b, 0x101, 0x632, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) ioctl$COMEDI_POLL(r4, 0x640f) preadv(r4, 0x0, 0x0, 0x5, 0x7) 1.03653423s ago: executing program 5 (id=986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000019300)='./file0\x00', 0x189940, 0x70) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000780)={0x50, 0x0, r5, {0x7, 0x1f, 0x80003, 0xc0004, 0x3, 0x4, 0x8, 0x5, 0x0, 0x0, 0x1, 0x1}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x4401, 0x8e) dup3(r6, r4, 0x0) syz_open_dev$usbmon(&(0x7f0000000180), 0x1, 0x2140) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000240)={0x0, 0xfffffffffffffe23, 0x4}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0x20f) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r9, &(0x7f0000000140)="61646420666f6f73797a2031320f", 0xe) ioctl$SG_GET_COMMAND_Q(r8, 0x2270, &(0x7f0000000140)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x28) r10 = syz_usb_connect(0x3, 0x29e, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x46, 0x93, 0xbf, 0x8, 0x1b3d, 0x17a, 0x27cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28c, 0x1, 0x0, 0x4, 0x40, 0x55, "", [{{0x9, 0x4, 0x88, 0xfb, 0x7, 0xea, 0xa5, 0x83, 0x20, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "b004abfc2b82"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xa38, 0x8000, 0x1, 0x1}, [@acm={0x4, 0x24, 0x2, 0x8}, @obex={0x5, 0x24, 0x15, 0x2}, @mbim={0xc, 0x24, 0x1b, 0xf, 0x1619, 0x7, 0x7, 0x0, 0x9}]}], [{{0x9, 0x5, 0xa, 0x10, 0x400, 0x27, 0xf4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xfff}, @generic={0x5f, 0x23, "92ec4555c34c83335841bff2d5338b12d3e36a1c91706edc9cb7dddca4d605e70f1463102e44a7916fb8b274d6525d24f5296e156d12140466e8f73814fd661d30c630575a0053560e5028887554b250bab537f6def06defa1ea328ca2"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x20, 0x7, 0x18, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7f, 0x1dfd}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x9, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7f, 0x4}]}}, {{0x9, 0x5, 0x3, 0x4, 0x0, 0xf7, 0xfc, 0x42, [@generic={0xde, 0x21, "e027f52fc0664b399d3f29efa6a22194450d392097915b336d0b318e094b290659258a636ee7ef6cebcb9d82904429d5133510ac75949624b396f532aa46228cca1bbfe48fb3e0a34808438030a68080f0b1da56c88aaad011d760d43db6185af670e5c074258ed727bc6cc7b7448e747cd8242f060049d7908b869e58754bbd23559aa65bdd3bc5cfb7aac9205b75c8df22b54e767ace9468d9f65029e0b7a5570eadb149cfa83cc29a210ac4464a6750670ebb3c2bb811466962e059688eebf4bddcf265d88c5ab6c921b8e70b5757b990cdcb9033ee1e81416876"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xfb, 0x3, 0x24, [@generic={0x4d, 0x11, "4629d62f5df28e484af6b3282dca57db0b0b999762506e6ed25f9ec7d3b7f80ea42d3a0c1118886dda0ca71c50dfcc240003117d34f9269854833542b2ee3f0ee983ff3a0f54ad964109d3"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x0, 0x1, 0x5, 0x3, [@generic={0x14, 0x23, "11662afb6d1d42f41818b6e480ad5a487f9b"}, @generic={0x18, 0x21, "bedd257b66906dad6dd95bec67fc2c15148faf9c2115"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x1, 0x8, 0x6, [@generic={0x37, 0x11, "c4797e404641d5fd5c275e45b32cbf3d4ff639f3e595873bd1e27cc8d7fd3d4fcb0f57a1505cba57638d518f45d0546df6f8fba98c"}]}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x310, 0xfb, 0x5, 0x2, 0x40, 0x10}, 0x8, &(0x7f0000000b00)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0xa, [{0x39, &(0x7f0000000b40)=@string={0x39, 0x3, "e8a7b021ac702d303266fc61fcf1228a931298717cdabee83382a0c3509f3903d3c66942f127f85e39c6b19eae358a15e541efe14f4f47"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0xc04}}, {0x7b, &(0x7f0000000c00)=@string={0x7b, 0x3, "0f083191a83b0719c95d7c09c55783d0228264618f022a8a485d90315493a8a562000822d04c4bddd8c4c56fc2e01699bc9662e390bc71983ab4d0f9a377ab4c8be0f6b8d8b8e0a2457640caba3b0f48ff455f2f83de0a3b7dca984a067fe418d6294e701fed1ede04b653eefb186b70dcfda5feeed039ca18"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4}}, {0x67, &(0x7f0000000d00)=@string={0x67, 0x3, "7f81c65daa40d836c306aa31d23122ba683c207d4dad9e52b73a988f626727681daad633b460f7e1de09049d14eeff3d0a6c5977c7139151b6496b22a2ac56379b0bd6964ccd78a1387eed3da31b4eb4a864d8dc4d67fd58183400d784488793eb9daf9501"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x447}}, {0x9f, &(0x7f0000000dc0)=@string={0x9f, 0x3, "6ef4fa4e79ff738c75068819b77fac394be0f1a705b1276f2063a721a2d271589fff7b9aa5e09c1475176985bddd339aedce6a0fd2a7983c5d555496b92397f92ebb24d0801f8bb3047eab6416d3ccea0f79d1c5443fdf6fbe0caec64d31e4ebf19502dc9bfdbaf6891369c600512d6756287f1c1ba2a8c505674973fd318c0ecf1e7a359e7a9e65fef3e85f6c3d9adacb795461a778858bf6a0c445ad"}}, {0xb5, &(0x7f0000000e80)=@string={0xb5, 0x3, "446d945185a774ca0d28fac15f904439cb21a850a16e5ebb9daa183e58285a98d97f6b1c9bad33a13d22b40661c57233b36acaaaa86d010776e73d853c051e742d35d85aa1a6a36ec8fef3d650cbf5aa9484fcd2ced44810893e5ec7c0c12acb0f5f5b0bc52491583b816f253b632ede786c18acfea5d085e27f45e3d77b2d0b35fda0e87bd21017d0845491cf02a4bf9b61778cc76b30260d88e65f7cc6661d8d92baae0baa6b02c69845bdb181d1bfe05ad3"}}]}) syz_usb_control_io(r10, &(0x7f0000001200)={0x2c, &(0x7f0000001000)=ANY=[@ANYBLOB="202160000000600a07662bd315e8d5556375942d9d1ca5f879c3bbe1963ae883b68ef658530a647832d919980fefd5fd39afde1c69570e623f0e28df0a821c039f7e6a88eaed9c5c497e2f6d4b10d18d47af82752410dac8c6722e051d71f906bfbfc717d55c"], &(0x7f00000002c0)={0x0, 0x3, 0x25, @string={0x25, 0x3, "646e3c52986a31a8f9d9309e837d2e2a5593204bcaf8171c60cc9999361770a9495b28"}}, &(0x7f00000010c0)={0x0, 0xf, 0x80, {0x5, 0xf, 0x80, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x0, 0x3, 0xf755, 0x7f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x6, 0x3, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xf, 0x3, 0x1}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0xff, 0xf0f, 0x2, [0x0, 0xc0, 0x3fff, 0xff003f]}, @generic={0x38, 0x10, 0x1, "97aa777c0d177a6097dc448369d10be65928cab3f4b7bb47ad02750fc742fd04000000256654171b1ea35d606725b2fdb5902f6e2f"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3, 0x9, 0x8, 0x3}]}}, &(0x7f0000001180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x0, 0x1, 0x40, "15e84734", "df4020af"}}, &(0x7f00000011c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x80, 0x3, 0x9, 0x5, 0x8, 0x6}}}, &(0x7f0000001680)={0x84, &(0x7f0000001240)={0x20, 0x15, 0x3c, "9008b4edbbb9d0bb2147e87e371045e0022f1585c0c11254d6d13df2c75995ea4ce7d1ab5e16d6b38f6efd7518ad0978b1276da5f7009b7f9b75ddd7"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000001340)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000001380)={0x20, 0x0, 0x8, {0x60, 0x8, [0xf0]}}, &(0x7f00000013c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001400)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001440)={0x40, 0xb, 0x2, "def6"}, &(0x7f0000001480)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f00000014c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000280)={0x40, 0x17, 0x6, @random="7233fb630bc6"}, &(0x7f0000001540)={0x40, 0x19, 0x2, "31ef"}, &(0x7f0000001580)={0x40, 0x1a, 0x2, 0x800}, &(0x7f00000015c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001600)={0x40, 0x1e, 0x1, 0x71}, &(0x7f0000001640)={0x40, 0x21, 0x1, 0xb}}) close(0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000f8dbdf25030000000500020009000000180001801400020073797a5f74756e000000000000000000050005"], 0x3c}, 0x1, 0x0, 0x0, 0x20009805}, 0x40010) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x400d0}, 0x26040090) 1.036030159s ago: executing program 1 (id=987): r0 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x4e23, 0x4e22, 0x2, 0x1, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 179.725946ms ago: executing program 4 (id=989): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000030000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 179.28945ms ago: executing program 4 (id=990): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) getsockname$l2tp(r1, 0x0, &(0x7f0000000e40)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000400)={{'\x00', 0x2}, {0x9}, 0x64, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="ecb57cd2d3e7ae3e3e3050c6716eccd77957c5c2d47d2104700db0d08ec8e8efb395c236368b376f5db47dd37b754d9faead5b44db0aa05fbf79c15c38edccef77f77b728827ed1691c8f25aad2bf0b75802c31b5a2fb2e4b326ddfff0b4784774424ef93fe27e6cb0070a6671ce65ea2394520bb4e0466a9ef41a2cc95acb52e1c5e5f2c0820619510556d0f226817801fe99bb7cccf50ac0bd99226eaf7ccd889a79c794a59bd1573511c8be79a7cc9c7f4c006a0c36ecef9c05c5dbbe485c4b958cf2422964e7de7e5f2449ef3c0dbf7b44e33ce73906674bc13effa97a94948cf92937365a3b8b1588d3ed039dd8847e85c28fdf6c4bf0ba6f17c8b0b27618e672aa20d48121b9a2569e162c77f4edf34c04ca31113ad45d8272d4445c9ddab60e3d6e3846d5eeadd1", 0x12b, 0x0, &(0x7f00000001c0)={0x2, 0x13e, {0x0, 0xc, 0xf0, "00796abee633351bddb1f978c46371c1cbfe7ea0b34c9e6c05c4b5c8b6766378e32c959d072bb013ccb2e2e0f6e0f1a54294a7c6a99e702c453e4027e0231157a5155a89b632cc5322b61f52771df878e7ed4220bd78cfd1c8a193de74fe358f2fcf375fda1f39b96b5f7751005acb6d3a9dae3fb45e9e8e24fa1a0226b884522475cee166a27dddb01d243eb8dbe49d9a94dc9beac6bb9c53f9026f7becd20583c06625166007a80f12c3a8b6bc8083675e3bec481c4855d28e5dcac7b4080aa1d687291389bb6a9727f5ef9e4017dd6eb56e2ac7ac87966cbd427637f0b71244b0b08adf4f5fa08e3efdfe26a356e1", 0x41, "ed84fb249035842905dc97be9355dc78650c7fd4824b48c0e510ce1e96501d3ea35cb9a09fadbb792b83848cf638aadbf5b60ab3b817ad5c8c6b8ea32bdf4bb613"}, 0xdc, "455c01d93e21afb77038b6681712c8cb19ac21fcd407281693b9d38edca092f814e74a279d2b6df226ca53bcc2f7e3807df1902d018e5fceecf5b002b8f725756ce72b13198a6808595c8f8995cc602367857c8d14ae934a9bfbd34b64584d4e17a9884421eb8928db7036a84f74220589bad5c91d54cec15db2b7f744426c3e68655e7902394420b7bb193fe32b30f708dae178413eda974f4e81d2367b23fb6bbecc3256a19cbb3abf63ded8c1a417b6488c5b487b8ad38386430587da1571becdbfc4d72e390ce51e9ac4ce28278a6370527383d27f702b4a8c7f"}, 0x226}) getsockopt$inet6_tcp_int(r2, 0x6, 0x19, 0xfffffffffffffffd, 0x0) 126.85602ms ago: executing program 4 (id=991): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x77) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, 0x0, 0x0, 0x4000000}], 0x1, 0x400c0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x2) r2 = socket$inet6(0xa, 0x3, 0x81) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r4, 0x164, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="54000000020601020000000000000000006bc88b6c00000105000100070000000900020073797a30000000000c0007800500150001000000050004000000000010000300686173683a69702c6d616300050005000a000000"], 0x54}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000340)={0x0, 0x8004}, 0x8) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x3, @remote, 0x2}, 0x1c) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r9, r10, 0x3, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r11, 0x40045613, &(0x7f0000000200)=0x1) 125.368972ms ago: executing program 1 (id=992): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000040)="0f20c035100000000f22c0c443515dd9d8640f350f300f01790048b829510000000000000f23d00f21f835100000080f23f8460fc77d0248b857fe0000000000000f23c00f21f835010004000f23f8b9180900000f32c4e22d2907"}], 0x1, 0x4, 0x0, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000010c0)="0f01f60faa66b9430b00000f320f01c83e0f017a0b66b8000000000f23c80f21f866350c00f0000f23f80f20c06635000001000f22c00f01ca66b9ad0b000066b8a000000066ba000000000f30b8200c8ee0", 0x52}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 64.017726ms ago: executing program 4 (id=993): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4e00, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$DVD_WRITE_STRUCT(r0, 0x5390, &(0x7f0000000040)=@physical={0x0, 0x3, [{0x6, 0x8, 0x1, 0x2, 0x3, 0x1, 0x1, 0xf, 0x8, 0x1, 0x4, 0x6, 0x9}, {0x2, 0xe, 0x9, 0x4, 0x2, 0x0, 0x3, 0xd, 0x1, 0x1, 0x8000, 0x9, 0xfff}, {0x4, 0x0, 0x4, 0x3, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x7, 0x5}, {0x6, 0x2, 0xd, 0x9, 0xb, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000, 0xa8d2, 0x3}]}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001240)={'ip6_vti0\x00', &(0x7f00000011c0)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x2, 0x8, 0x48, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, 0x700, 0x8000, 0x6, 0x475}}) r3 = syz_io_uring_setup(0x28b5, &(0x7f0000000480)={0x0, 0xf6dd, 0xc0000, 0x3, 0x51}, &(0x7f0000000380)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_NOP128={0x3f, 0x48, 0x0, 0xffffffffffffffff, 0x2, 0x8001, 0x4, 0x0, 0x0, {0x86}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000001380)=""/147, 0xdb, 0x93, 0x1, 0x5e2}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8000, '\x00', r2, r7, 0x0, 0x1, 0x3}, 0x50) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f00000015c0)={@lba=0x6, 0x0, 0x48, &(0x7f0000001540)=""/72}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001500)={0x10201, 0x4, 0x6000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) 2.831322ms ago: executing program 4 (id=994): socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x90, r1, 0x5, 0x0, 0x0, {{0xf, 0x0, 0xc00}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x3, 0x4400, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1000, 0x0, 0x4, 0x0, {0x7, 0x1f81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x1, 0xfff, 0x8}}, @void, @void, @void}}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xbc}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x27}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}]}, 0x90}}, 0x0) 0s ago: executing program 4 (id=995): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x80, 0x0, 0xffffffffffffffff, 0x87}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x1010108, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) (rerun: 32) read$FUSE(r1, &(0x7f00000035c0)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000000200)="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", 0x2000, &(0x7f0000005900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, &(0x7f0000001780)=""/4096}, 0x20) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x40000) (async, rerun: 64) write(r1, &(0x7f0000000100)="fd787891eab9d4015f656761a527551fbd7e079d", 0x14) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r5}) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0xf}, {0x1, [{@none, 0x40, 0x10, 0xac, "909be5", 0xd}]}}}, 0x12) (async, rerun: 32) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={0x0}, &(0x7f0000002780)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000027c0)={r7, 0xffffb360, 0x20}, 0xc) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000040)={0x500, 0x1, &(0x7f0000000180)=[r5], &(0x7f0000000180), &(0x7f0000000240)=[r6], &(0x7f0000000d40), 0x0, 0xff}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0xfffffffd}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) kernel console output (not intermixed with test programs): luetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.671193][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.682517][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.683643][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.685912][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.693180][ T6597] kvm: emulating exchange as write [ 66.693683][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.742606][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.830100][ T6607] bridge0: entered allmulticast mode [ 66.881628][ T6611] No such timeout policy "syz1" [ 66.882889][ T6616] /dev/sr0: Can't open blockdev [ 66.928383][ T6594] xfrm0 speed is unknown, defaulting to 1000 [ 66.996313][ T12] bridge_slave_1: left allmulticast mode [ 66.998249][ T12] bridge_slave_1: left promiscuous mode [ 67.001442][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.009632][ T12] bridge_slave_0: left allmulticast mode [ 67.011530][ T12] bridge_slave_0: left promiscuous mode [ 67.014264][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.135277][ T12] bond3 (unregistering): (slave ipip0): Releasing backup interface [ 67.137826][ T12] ipip0 (unregistering): left promiscuous mode [ 67.178490][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.187095][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.197821][ T12] bond0 (unregistering): Released all slaves [ 67.202634][ T12] bond1 (unregistering): Released all slaves [ 67.203454][ T24] usb 5-1: USB disconnect, device number 3 [ 67.211935][ T12] bond2 (unregistering): Released all slaves [ 67.240774][ T12] bond3 (unregistering): Released all slaves [ 67.372869][ T6629] jffs2: notice: (6629) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 67.530563][ T5440] 8021q: adding VLAN 0 to HW filter on device eth2 [ 67.656715][ T6594] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.661305][ T6594] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.663681][ T6594] bridge_slave_0: entered allmulticast mode [ 67.667520][ T6594] bridge_slave_0: entered promiscuous mode [ 67.693959][ T6594] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.697705][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.700258][ T6594] bridge_slave_1: entered allmulticast mode [ 67.702990][ T6594] bridge_slave_1: entered promiscuous mode [ 67.720196][ T6594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.732331][ T6594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.809394][ T6656] No such timeout policy "syz1" [ 67.834456][ T5440] 8021q: adding VLAN 0 to HW filter on device eth3 [ 67.841274][ T6594] team0: Port device team_slave_0 added [ 67.846238][ T6594] team0: Port device team_slave_1 added [ 67.873892][ T6594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.878036][ T6594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.887263][ T6594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.893561][ T6594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.895885][ T6594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.905588][ T6594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.951903][ T6594] hsr_slave_0: entered promiscuous mode [ 67.957176][ T6594] hsr_slave_1: entered promiscuous mode [ 67.960245][ T6594] debugfs: 'hsr0' already exists in 'hsr' [ 67.962159][ T6594] Cannot create hsr debugfs directory [ 67.988067][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 67.988085][ T42] audit: type=1400 audit(2000000271.283:484): avc: denied { setopt } for pid=6665 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.031981][ T42] audit: type=1400 audit(2000000271.323:485): avc: denied { write } for pid=6667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.067715][ T12] hsr_slave_0: left promiscuous mode [ 68.076458][ T12] hsr_slave_1: left promiscuous mode [ 68.088696][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.095529][ T42] audit: type=1400 audit(2000000271.393:486): avc: denied { write } for pid=6672 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.095941][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.127310][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.135034][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.155749][ T12] veth1_macvtap: left promiscuous mode [ 68.157681][ T12] veth0_macvtap: left promiscuous mode [ 68.158304][ T42] audit: type=1400 audit(2000000271.453:487): avc: denied { create } for pid=6682 comm="syz.0.244" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.159964][ T6683] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 68.161850][ T12] veth1_vlan: left promiscuous mode [ 68.161912][ T12] veth0_vlan: left promiscuous mode [ 68.172818][ T42] audit: type=1400 audit(2000000271.453:488): avc: denied { map } for pid=6682 comm="syz.0.244" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.190982][ T42] audit: type=1400 audit(2000000271.453:489): avc: denied { read write } for pid=6682 comm="syz.0.244" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.201843][ T42] audit: type=1400 audit(2000000271.503:490): avc: denied { read } for pid=6681 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.301170][ T42] audit: type=1400 audit(2000000271.603:491): avc: denied { override_creds } for pid=6682 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.311457][ T42] audit: type=1400 audit(2000000271.603:492): avc: denied { append } for pid=6682 comm="iou-wrk-6687" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 68.324041][ T6684] kvm: kvm [6682]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 68.324697][ T6684] kvm: kvm [6682]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 68.346439][ T6684] kvm: kvm [6682]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 68.366643][ T6684] kvm: kvm [6682]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 68.370576][ T6684] kvm: kvm [6682]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 68.372307][ T12] team0 (unregistering): Port device team_slave_1 removed [ 68.381903][ T12] team0 (unregistering): Port device team_slave_0 removed [ 68.464296][ T5440] 8021q: adding VLAN 0 to HW filter on device eth4 [ 68.555973][ T6692] No such timeout policy "syz1" [ 68.599758][ T42] audit: type=1400 audit(2000000271.903:493): avc: denied { write } for pid=6693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.614239][ T6594] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.637229][ T6594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.643031][ T6594] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.657736][ T6594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.666266][ T6594] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.677901][ T6594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.680939][ T6594] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.685465][ T6594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.711237][ T5440] 8021q: adding VLAN 0 to HW filter on device eth5 [ 68.774999][ T6594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.779539][ T5731] Bluetooth: hci3: command tx timeout [ 68.786512][ T6594] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.792674][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.794991][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.801133][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.803802][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.940675][ T12] IPVS: stop unused estimator thread 0... [ 68.950456][ T6725] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 69.011436][ T6730] xt_hashlimit: size too large, truncated to 1048576 [ 69.035671][ T6733] netlink: 144 bytes leftover after parsing attributes in process `syz.1.251'. [ 69.120065][ T6594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.231638][ T6750] IPv6: addrconf: prefix option has invalid lifetime [ 69.252477][ T6753] No such timeout policy "syz1" [ 69.364854][ T6594] veth0_vlan: entered promiscuous mode [ 69.371418][ T6761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.257'. [ 69.380222][ T6594] veth1_vlan: entered promiscuous mode [ 69.424203][ T6767] netlink: 72 bytes leftover after parsing attributes in process `syz.0.258'. [ 69.441792][ T6594] veth0_macvtap: entered promiscuous mode [ 69.463966][ T6594] veth1_macvtap: entered promiscuous mode [ 69.485869][ T6594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.492611][ T6594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.530017][ T5776] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.533084][ T5776] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.535783][ T5776] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.571308][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.581734][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.600681][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.601547][ T6784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6784 comm=syz.0.263 [ 69.603180][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.609122][ T5776] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.660654][ T6787] No such timeout policy "syz1" [ 69.735972][ T6782] mtrr: base(0x20c5968000021008000) is not aligned on a size(0x10002000) boundary [ 69.835263][ T6797] netlink: 'syz.0.267': attribute type 10 has an invalid length. [ 69.838200][ T6797] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.840926][ T6797] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.851587][ T6797] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.854106][ T6797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.856921][ T6797] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.859361][ T6797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.865492][ T6797] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 69.874985][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.267'. [ 69.882269][ T6797] bridge_slave_1: left allmulticast mode [ 69.884103][ T6797] bridge_slave_1: left promiscuous mode [ 69.887809][ T6797] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.911199][ T6797] bridge_slave_0: left allmulticast mode [ 69.913213][ T6797] bridge_slave_0: left promiscuous mode [ 69.916122][ T6797] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.926094][ T6797] bond0: (slave bridge0): Releasing backup interface [ 70.007329][ T6805] CIFS: VFS: bad security option: krb5i [ 70.016696][ T6805] e1000e 0000:00:02.0 eth1: removed PHC [ 70.138552][ T40] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 70.174120][ T6805] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 70.234851][ T6819] netlink: 56 bytes leftover after parsing attributes in process `syz.0.272'. [ 70.278259][ T6823] No such timeout policy "syz1" [ 70.280338][ T40] usb 6-1: device descriptor read/64, error -71 [ 70.528746][ T40] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 70.553726][ T6851] IPVS: lc: FWM 3 0x00000003 - no destination available [ 70.556881][ T5878] IPVS: starting estimator thread 0... [ 70.558817][ T6849] IPVS: lc: FWM 3 0x00000003 - no destination available [ 70.562156][ T6849] ): renamed from hsr0 (while UP) [ 70.648622][ T6852] IPVS: using max 42 ests per chain, 100800 per kthread [ 70.658512][ T40] usb 6-1: device descriptor read/64, error -71 [ 70.771960][ T40] usb usb6-port1: attempt power cycle [ 70.835513][ T6872] No such timeout policy "syz1" [ 71.008313][ T6885] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 71.058596][ T6892] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 71.063189][ T6892] netlink: 'syz.3.288': attribute type 1 has an invalid length. [ 71.080494][ T6892] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.094802][ T6892] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.097235][ T6892] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 71.101385][ T6892] bond2: (slave gre1): Error -95 calling set_mac_address [ 71.118703][ T40] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 71.139975][ T40] usb 6-1: device descriptor read/8, error -71 [ 71.141260][ T6891] capability: warning: `syz.4.287' uses deprecated v2 capabilities in a way that may be insecure [ 71.141570][ T6896] gretap1: entered promiscuous mode [ 71.147205][ T6896] bond2: (slave gretap1): making interface the new active one [ 71.149905][ T6896] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 71.155464][ T6896] macvlan2: entered promiscuous mode [ 71.158487][ T6896] macvlan2: entered allmulticast mode [ 71.162823][ T6896] bond2: entered promiscuous mode [ 71.167922][ T6896] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 71.174326][ T6896] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 71.181655][ T6896] bond2: left promiscuous mode [ 71.209630][ T6901] netlink: 96 bytes leftover after parsing attributes in process `syz.4.291'. [ 71.275168][ T6903] No such timeout policy "syz1" [ 71.284539][ T6899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.290'. [ 71.334554][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.337041][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.370309][ T6908] CIFS: VFS: bad security option: krb5i [ 71.390852][ T40] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 71.419371][ T40] usb 6-1: device descriptor read/8, error -71 [ 71.531554][ T40] usb usb6-port1: unable to enumerate USB device [ 71.712007][ T6926] xt_hashlimit: size too large, truncated to 1048576 [ 71.738507][ T5731] Bluetooth: hci3: command tx timeout [ 71.762365][ T6927] ip_tables: iptables: counters copy to user failed while replacing table [ 71.817617][ T6932] No such timeout policy "syz1" [ 71.932982][ T6934] kvm: pic: level sensitive irq not supported [ 71.933352][ T6934] kvm: pic: level sensitive irq not supported [ 71.936612][ T6934] kvm: pic: single mode not supported [ 71.938933][ T6934] kvm: pic: level sensitive irq not supported [ 71.942905][ T6934] kvm: pic: single mode not supported [ 71.945981][ T6934] kvm: pic: non byte read [ 72.000428][ T6892] syz.3.288 (6892): drop_caches: 1 [ 72.031889][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 72.034816][ T6942] netlink: 'syz.3.304': attribute type 6 has an invalid length. [ 72.080253][ T6947] ISOFS: Unable to identify CD-ROM format. [ 72.102957][ T6950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.306'. [ 72.157084][ T6947] netlink: ct family unspecified [ 72.157930][ T6948] netlink: ct family unspecified [ 72.159710][ T6947] openvswitch: netlink: Actions may not be safe on all matching packets [ 72.165722][ T6948] openvswitch: netlink: Actions may not be safe on all matching packets [ 72.222856][ T6958] No such timeout policy "syz1" [ 72.288525][ T5832] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 72.390286][ T6971] netlink: 'syz.0.315': attribute type 1 has an invalid length. [ 72.404500][ T6971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.421428][ T6971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.424412][ T6971] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 72.429666][ T6971] bond1: (slave vti0): Error -95 calling set_mac_address [ 72.436716][ T6970] netlink: 40 bytes leftover after parsing attributes in process `syz.4.314'. [ 72.451192][ T5832] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 72.455088][ T5832] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 72.459531][ T5832] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 72.465435][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.468066][ T5832] usb 8-1: Product: syz [ 72.470481][ T5832] usb 8-1: Manufacturer: syz [ 72.472002][ T5832] usb 8-1: SerialNumber: syz [ 72.477486][ T5832] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 72.483055][ T5832] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 72.503181][ T5832] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 72.526647][ T6981] rdma_rxe: rxe_newlink: failed to add vcan0 [ 72.556277][ T6983] No such timeout policy "syz1" [ 72.588326][ T6987] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 72.637375][ T6992] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 72.640874][ T6991] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 72.643800][ T6991] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 72.653296][ T6992] CIFS mount error: No usable UNC path provided in device string! [ 72.653296][ T6992] [ 72.656617][ T6992] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 72.658519][ T6991] CIFS mount error: No usable UNC path provided in device string! [ 72.658519][ T6991] [ 72.662567][ T6991] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 72.997172][ T7010] No such timeout policy "syz1" [ 73.054300][ T7018] smc: net device lo applied user defined pnetid SYZ0 [ 73.056739][ T7018] smc: smcd device lo applied user defined pnetid SYZ0 [ 73.062649][ T42] kauditd_printk_skb: 64 callbacks suppressed [ 73.062667][ T42] audit: type=1400 audit(2000000276.363:558): avc: denied { bind } for pid=7017 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.078665][ T42] audit: type=1400 audit(2000000276.373:559): avc: denied { listen } for pid=7017 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.084750][ T42] audit: type=1400 audit(2000000276.373:560): avc: denied { connect } for pid=7017 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.096270][ T42] audit: type=1400 audit(2000000276.383:561): avc: denied { accept } for pid=7017 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.271431][ T42] audit: type=1400 audit(2000000276.573:562): avc: denied { audit_read } for pid=7041 comm="syz.1.337" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.289616][ T7039] syzkaller0: entered promiscuous mode [ 73.291774][ T7039] syzkaller0: entered allmulticast mode [ 73.451248][ T7051] jffs2: notice: (7051) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 73.818515][ T5731] Bluetooth: hci3: command tx timeout [ 73.821064][ T6941] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 73.827806][ T6941] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 73.838305][ T6941] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 73.896042][ T5832] usb 8-1: USB disconnect, device number 3 [ 73.910382][ T5832] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 73.921723][ T5832] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 73.929195][ T5832] ti_usb_3410_5052 8-1:2.0: device disconnected [ 74.214403][ T42] audit: type=1400 audit(2000000277.513:563): avc: denied { create } for pid=7081 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 74.231107][ T42] audit: type=1400 audit(2000000277.513:564): avc: denied { connect } for pid=7081 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 74.319509][ T42] audit: type=1400 audit(2000000277.623:565): avc: denied { bind } for pid=7092 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.359648][ T7097] netlink: 'syz.1.355': attribute type 1 has an invalid length. [ 74.369830][ T7097] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 74.398552][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 74.419864][ T42] audit: type=1400 audit(2000000277.723:566): avc: denied { map } for pid=7109 comm="syz.3.358" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 74.435974][ T42] audit: type=1400 audit(2000000277.723:567): avc: denied { execute } for pid=7109 comm="syz.3.358" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 74.561794][ T24] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 74.568276][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 74.575805][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 74.579524][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 74.584641][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.590036][ T24] usb 5-1: Product: syz [ 74.591826][ T24] usb 5-1: Manufacturer: syz [ 74.593746][ T24] usb 5-1: SerialNumber: syz [ 74.601229][ T24] usb 5-1: config 0 descriptor?? [ 74.635178][ T7126] FAT-fs (nullb0): bogus number of reserved sectors [ 74.638485][ T7126] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 74.813161][ T24] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 75.015283][ T24] usb 5-1: USB disconnect, device number 4 [ 75.408925][ T7137] bond3: option downdelay: invalid value (18446744073709551615) [ 75.411652][ T7137] bond3: option downdelay: allowed values 0 - 2147483647 [ 75.415178][ T7137] bond3 (unregistering): Released all slaves [ 75.465022][ T5731] Bluetooth: hci0: Malformed Event: 0x13 [ 75.547326][ T7152] netlink: 'syz.4.371': attribute type 1 has an invalid length. [ 75.565295][ T7155] netlink: 'syz.0.372': attribute type 1 has an invalid length. [ 75.584559][ T7152] bond1: entered promiscuous mode [ 75.590922][ T7152] bond1: entered allmulticast mode [ 75.592881][ T7152] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.622640][ T7155] bond2: entered promiscuous mode [ 75.626563][ T7155] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.679493][ T7160] input: syz0 as /devices/virtual/input/input9 [ 75.705235][ T7169] __nla_validate_parse: 4 callbacks suppressed [ 75.705247][ T7169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.378'. [ 75.733755][ T7168] netlink: 'syz.4.377': attribute type 101 has an invalid length. [ 75.738205][ T7168] netlink: 32 bytes leftover after parsing attributes in process `syz.4.377'. [ 75.743640][ T7168] netlink: 32 bytes leftover after parsing attributes in process `syz.4.377'. [ 75.757570][ T7169] tipc: Started in network mode [ 75.763099][ T7169] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 75.764475][ T7171] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 75.773355][ T7169] tipc: Enabled bearer , priority 10 [ 75.804979][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 75.807839][ T7180] netlink: 'syz.1.382': attribute type 5 has an invalid length. [ 75.812844][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.382'. [ 75.824012][ T7180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7180 comm=syz.1.382 [ 75.839839][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.847676][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.855954][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.860889][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.862272][ T7190] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 75.993710][ T7208] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 76.081440][ T7221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.393'. [ 76.164617][ T7228] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 76.212806][ T7241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.400'. [ 76.221133][ T7241] bond0: entered promiscuous mode [ 76.223824][ T7241] geneve1: entered promiscuous mode [ 76.226223][ T7241] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 76.232158][ T7241] hsr1: entered promiscuous mode [ 76.308069][ T7266] macsec1: entered promiscuous mode [ 76.311068][ T7266] macsec1: entered allmulticast mode [ 76.527552][ T7298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7298 comm=syz.3.411 [ 76.574866][ T7305] openvswitch: netlink: IPv4 tun info is not correct [ 76.667294][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'. [ 76.758678][ T40] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 76.901436][ T24] tipc: Node number set to 4269801492 [ 76.909371][ T40] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 76.913246][ T40] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.916462][ T40] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 76.919561][ T40] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.924876][ T40] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 76.927407][ T40] usb 9-1: Product: syz [ 76.928842][ T40] usb 9-1: Manufacturer: syz [ 76.932788][ T7296] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 76.936611][ T40] garmin_gps 9-1:1.0: Garmin GPS usb/tty converter detected [ 76.943782][ T40] usb 9-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 77.144382][ T24] usb 9-1: USB disconnect, device number 2 [ 77.151851][ T24] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 77.155236][ T24] garmin_gps 9-1:1.0: device disconnected [ 77.383824][ T7326] xt_bpf: check failed: parse error [ 77.397921][ T7326] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 77.507483][ T7333] binder: 7332:7333 ioctl c0306201 200000000640 returned -22 [ 77.542992][ T7335] program syz.0.423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.570932][ T7335] xt_NFQUEUE: number of total queues is 0 [ 77.702466][ T1128] ata1.00: exception Emask 0x0 SAct 0x2000 SErr 0x0 action 0x6 [ 77.704868][ T1128] ata1.00: waking up from sleep [ 77.706439][ T1128] ata1: hard resetting link [ 77.729480][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 77.792808][ T7354] trusted_key: syz.1.429 sent an empty control message without MSG_MORE. [ 78.029214][ T1128] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 78.058811][ T1128] ata1.00: configured for UDMA/100 [ 78.062933][ T1128] ata1: EH complete [ 78.134711][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 78.134725][ T42] audit: type=1400 audit(2000000281.433:594): avc: denied { write } for pid=7369 comm="syz.0.435" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 78.136725][ T7370] netlink: 'syz.0.435': attribute type 2 has an invalid length. [ 78.138558][ T5832] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 78.145304][ T7370] netlink: 'syz.0.435': attribute type 2 has an invalid length. [ 78.153532][ T7370] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.435'. [ 78.299915][ T5832] usb 6-1: unable to get BOS descriptor or descriptor too short [ 78.306501][ T5832] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 78.312072][ T5832] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.322807][ T5832] usb 6-1: string descriptor 0 read error: -22 [ 78.325487][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.740703][ T42] audit: type=1400 audit(2000000282.043:595): avc: denied { create } for pid=7384 comm="syz.4.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 78.781370][ T42] audit: type=1400 audit(2000000282.083:596): avc: denied { bind } for pid=7384 comm="syz.4.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.788644][ T5817] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 78.891053][ T7389] Line length is too long: Should be less than 4094 [ 78.939774][ T5817] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.944515][ T5817] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 78.948069][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.953446][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.960435][ T5817] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.965613][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.975268][ T5817] usb 5-1: config 0 descriptor?? [ 79.073695][ T7395] kvm: kvm [7394]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 79.263187][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.445'. [ 79.338624][ T7403] netlink: 'syz.4.445': attribute type 1 has an invalid length. [ 79.389478][ T42] audit: type=1400 audit(2000000282.693:597): avc: denied { shutdown } for pid=7405 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.392403][ T5817] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 79.401118][ T5817] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 79.404494][ T5817] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 79.407630][ T5817] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 79.413653][ T5817] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 79.416665][ T5817] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 79.420814][ T5817] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 79.420917][ T42] audit: type=1400 audit(2000000282.723:598): avc: denied { write } for pid=7404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.423094][ T5817] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 79.435004][ T5817] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 79.438700][ T5817] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 79.458711][ T5817] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 79.507638][ T42] audit: type=1400 audit(2000000282.803:599): avc: denied { write } for pid=7415 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.583034][ T42] audit: type=1400 audit(2000000282.883:600): avc: denied { lock } for pid=7382 comm="syz.0.440" path="socket:[18812]" dev="sockfs" ino=18812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 79.652323][ T5832] usb 5-1: USB disconnect, device number 5 [ 80.028528][ T5878] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 80.200238][ T5878] usb 9-1: Using ep0 maxpacket: 8 [ 80.204848][ T5878] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 80.212621][ T5878] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.214655][ T7431] program syz.0.453 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.216629][ T5878] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 80.224188][ T5878] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.228054][ T5878] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.239130][ T5878] hub 9-1:1.0: bad descriptor, ignoring hub [ 80.241595][ T5878] hub 9-1:1.0: probe with driver hub failed with error -5 [ 80.244899][ T5878] cdc_wdm 9-1:1.0: skipping garbage [ 80.246998][ T5878] cdc_wdm 9-1:1.0: skipping garbage [ 80.249562][ T5878] cdc_wdm 9-1:1.0: skipping garbage [ 80.251964][ T5878] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 80.458534][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.461353][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.464193][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.466982][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.483181][ T42] audit: type=1400 audit(2000000283.783:601): avc: denied { write } for pid=7436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.538281][ T42] audit: type=1400 audit(2000000283.833:602): avc: denied { write } for pid=7439 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.558656][ T5817] usb 9-1: USB disconnect, device number 3 [ 80.621039][ T42] audit: type=1400 audit(2000000283.923:603): avc: denied { write } for pid=7442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.571411][ T1037] cfg80211: failed to load regulatory.db [ 81.709530][ T7476] __nla_validate_parse: 5 callbacks suppressed [ 81.709548][ T7476] netlink: 484 bytes leftover after parsing attributes in process `syz.0.463'. [ 81.714553][ T7477] netlink: 484 bytes leftover after parsing attributes in process `syz.0.463'. [ 81.818156][ T7481] netlink: 'syz.0.465': attribute type 1 has an invalid length. [ 81.855248][ T7481] bond4: entered promiscuous mode [ 81.856924][ T7481] bond4: entered allmulticast mode [ 81.858998][ T7481] 8021q: adding VLAN 0 to HW filter on device bond4 [ 81.868205][ T7481] erspan2: entered allmulticast mode [ 81.875194][ T7481] bond4: (slave erspan2): making interface the new active one [ 81.881990][ T7481] erspan2: entered promiscuous mode [ 81.886539][ T7481] bond4: (slave erspan2): Enslaving as an active interface with an up link [ 82.041138][ T7494] binder: BINDER_SET_CONTEXT_MGR already set [ 82.043370][ T7494] binder: 7492:7494 ioctl 4018620d 200000000100 returned -16 [ 82.269520][ T5878] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 82.317610][ T7510] netlink: 48 bytes leftover after parsing attributes in process `syz.4.471'. [ 82.341960][ T7505] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 82.345617][ T7505] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 82.352630][ T7505] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 82.356364][ T7505] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 82.359658][ T7505] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 82.375071][ T7505] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 82.385404][ T7505] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 82.386442][ T7512] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 82.387745][ T7505] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 82.396004][ T7505] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 82.402797][ T7505] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 82.404875][ T7505] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 82.411664][ T7505] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 82.428484][ T5878] usb 5-1: Using ep0 maxpacket: 8 [ 82.431979][ T5878] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 82.436549][ T5878] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.441027][ T5878] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 82.443982][ T5878] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 82.448211][ T5878] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 82.450729][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.475'. [ 82.452283][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.457118][ T7515] netlink: 92 bytes leftover after parsing attributes in process `syz.4.475'. [ 82.466515][ T5878] hub 5-1:1.0: bad descriptor, ignoring hub [ 82.468892][ T5878] hub 5-1:1.0: probe with driver hub failed with error -5 [ 82.471733][ T5878] cdc_wdm 5-1:1.0: skipping garbage [ 82.473472][ T5878] cdc_wdm 5-1:1.0: skipping garbage [ 82.475212][ T5878] cdc_wdm 5-1:1.0: skipping garbage [ 82.478372][ T5878] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 82.480465][ T5878] cdc_wdm 5-1:1.0: Unknown control protocol [ 82.631108][ T7528] netlink: 88 bytes leftover after parsing attributes in process `syz.3.481'. [ 82.714530][ T7534] tap0: tun_chr_ioctl cmd 1074025675 [ 82.716270][ T7534] tap0: persist disabled [ 82.752273][ T7537] binder: 7535:7537 ioctl c0306201 200000000100 returned -22 [ 82.877261][ T7543] Bluetooth: MGMT ver 1.23 [ 82.882854][ T7543] SELinux: policydb magic number 0xf97cff77 does not match expected magic number 0xf97cff8c [ 82.886185][ T7543] SELinux: failed to load policy [ 82.889485][ T7543] SELinux: policydb version 533 does not match my version range 15-35 [ 82.893256][ T7543] SELinux: failed to load policy [ 82.900666][ T24] usb 5-1: USB disconnect, device number 6 [ 83.008225][ T7552] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 83.057706][ T7557] ubi0: attaching mtd0 [ 83.065999][ T7557] ubi0: scanning is finished [ 83.068023][ T7557] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 83.262634][ T7557] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 83.295031][ T7570] IPVS: persistence engine module ip_vs_pe_s not found [ 83.340206][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 83.352516][ T7579] Mount JFS Failure: -5 [ 83.354483][ T7579] jfs_mount failed w/return code = -5 [ 83.367992][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 83.368013][ T42] audit: type=1400 audit(2000000286.663:631): avc: denied { write } for pid=7576 comm="syz.4.498" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.391231][ T42] audit: type=1400 audit(2000000286.683:632): avc: denied { mounton } for pid=7580 comm="syz.3.499" path="/file0" dev="ramfs" ino=17373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 83.485156][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.500'. [ 83.565679][ T7588] netlink: 104 bytes leftover after parsing attributes in process `syz.0.501'. [ 83.714653][ T42] audit: type=1400 audit(2000000287.013:633): avc: denied { bind } for pid=7598 comm="syz.3.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.749778][ T42] audit: type=1400 audit(2000000287.053:634): avc: denied { ioctl } for pid=7603 comm="syz.0.506" path="socket:[19952]" dev="sockfs" ino=19952 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 83.825138][ T7609] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 83.883073][ T7613] binder: 7608:7613 ioctl 81009431 200000000440 returned -22 [ 84.022993][ T42] audit: type=1400 audit(2000000287.323:635): avc: denied { map } for pid=7625 comm="syz.0.512" path="pipe:[4777]" dev="pipefs" ino=4777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 84.154126][ T7626] block nbd0: shutting down sockets [ 84.186822][ T7628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.513'. [ 84.190665][ T7628] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 84.194409][ T7628] iwpm_hello_cb: Unable to parse nlmsg [ 84.200918][ T42] audit: type=1400 audit(2000000287.503:636): avc: denied { bind } for pid=7627 comm="syz.0.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.212517][ T42] audit: type=1400 audit(2000000287.513:637): avc: denied { read } for pid=7627 comm="syz.0.513" name="filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 84.220861][ T7362] usb 6-1: 1:1: usb_set_interface failed (-110) [ 84.233737][ T5832] usb 6-1: USB disconnect, device number 9 [ 84.379145][ T5731] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.379164][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.448581][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.449573][ T5731] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.635567][ T7656] veth1_macvtap: left promiscuous mode [ 84.733948][ T7663] xfrm0 speed is unknown, defaulting to 1000 [ 84.787371][ T42] audit: type=1400 audit(2000000288.083:638): avc: denied { write } for pid=7673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.830932][ T7681] netlink: 'syz.0.527': attribute type 12 has an invalid length. [ 84.831581][ T42] audit: type=1400 audit(2000000288.133:639): avc: denied { write } for pid=7679 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.853269][ T7681] netlink: 'syz.0.527': attribute type 12 has an invalid length. [ 84.865837][ T5440] veth1_macvtap: entered promiscuous mode [ 84.888659][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.892959][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.898645][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.901326][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.959540][ T7663] loop5: detected capacity change from 0 to 7 [ 84.963413][ T7663] Dev loop5: unable to read RDB block 7 [ 84.965179][ T7663] loop5: AHDI p1 [ 84.978455][ T7663] loop5: partition table partially beyond EOD, truncated [ 84.999181][ T42] audit: type=1400 audit(2000000288.293:640): avc: denied { view } for pid=7686 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 85.464992][ T7742] xt_TPROXY: Can be used only with -p tcp or -p udp [ 85.594549][ T7752] ip6gretap0: entered promiscuous mode [ 85.697883][ T7757] syzkaller0: entered promiscuous mode [ 85.700530][ T7757] syzkaller0: entered allmulticast mode [ 85.768586][ T5878] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 85.772110][ T7763] (syz.3.552,7763,3):ocfs2_get_sector:1713 ERROR: status = -5 [ 85.776223][ T7763] (syz.3.552,7763,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 85.795296][ T7763] (syz.3.552,7763,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 85.799163][ T7763] (syz.3.552,7763,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 85.937932][ T7772] null_blk: disk nullb1 created [ 85.942822][ T5878] usb 9-1: New USB device found, idVendor=19d2, idProduct=1154, bcdDevice=21.82 [ 85.956069][ T5878] usb 9-1: config 5 has an invalid interface number: 152 but max is 2 [ 85.958632][ T5878] usb 9-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 85.961474][ T5878] usb 9-1: config 5 has an invalid interface number: 193 but max is 2 [ 85.963984][ T5878] usb 9-1: config 5 has an invalid interface number: 159 but max is 2 [ 85.966596][ T5878] usb 9-1: config 5 has an invalid interface number: 3 but max is 2 [ 85.970240][ T5878] usb 9-1: config 5 has 4 interfaces, different from the descriptor's value: 3 [ 85.971950][ T7775] syzkaller0: entered promiscuous mode [ 85.973067][ T5878] usb 9-1: config 5 has no interface number 0 [ 85.974910][ T7775] syzkaller0: entered allmulticast mode [ 85.976518][ T5878] usb 9-1: config 5 has no interface number 1 [ 85.985942][ T5878] usb 9-1: config 5 has no interface number 2 [ 85.987883][ T5878] usb 9-1: config 5 interface 152 altsetting 16 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 85.991308][ T7775] tipc: Started in network mode [ 85.991324][ T7775] tipc: Node identity 2a7f02db26ca, cluster identity 4711 [ 85.991492][ T7775] tipc: Enabled bearer , priority 0 [ 85.997793][ T5878] usb 9-1: config 5 interface 152 altsetting 16 endpoint 0x1 has invalid maxpacket 32, setting to 8 [ 86.001227][ T5878] usb 9-1: config 5 interface 152 altsetting 16 endpoint 0x7 has invalid maxpacket 16, setting to 8 [ 86.005418][ T5878] usb 9-1: config 5 interface 152 altsetting 16 endpoint 0xC has invalid maxpacket 1024, setting to 8 [ 86.008974][ T5878] usb 9-1: config 5 interface 152 altsetting 16 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 86.012212][ T5878] usb 9-1: config 5 interface 152 altsetting 16 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 86.015635][ T5878] usb 9-1: config 5 interface 152 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 86.019215][ T5878] usb 9-1: config 5 interface 152 altsetting 16 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 86.022655][ T5878] usb 9-1: config 5 interface 152 altsetting 16 endpoint 0xF has invalid maxpacket 32, setting to 8 [ 86.025800][ T5878] usb 9-1: config 5 interface 152 altsetting 16 has a duplicate endpoint with address 0xA, skipping [ 86.029555][ T5878] usb 9-1: config 5 interface 152 altsetting 16 has a duplicate endpoint with address 0xC, skipping [ 86.032756][ T5878] usb 9-1: config 5 interface 152 altsetting 16 has a duplicate endpoint with address 0x3, skipping [ 86.036121][ T5878] usb 9-1: config 5 interface 193 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 86.039788][ T5878] usb 9-1: config 5 interface 193 altsetting 5 endpoint 0x5 has invalid maxpacket 1024, setting to 8 [ 86.043029][ T5878] usb 9-1: config 5 interface 193 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 86.046182][ T5878] usb 9-1: config 5 interface 193 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 86.051651][ T5878] usb 9-1: config 5 interface 193 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 86.054928][ T5878] usb 9-1: config 5 interface 193 altsetting 5 endpoint 0xE has invalid maxpacket 1023, setting to 8 [ 86.058331][ T5878] usb 9-1: config 5 interface 193 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 86.062147][ T5878] usb 9-1: config 5 interface 193 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 86.065833][ T5878] usb 9-1: config 5 interface 193 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 86.069370][ T5878] usb 9-1: config 5 interface 159 altsetting 7 endpoint 0x9 has invalid maxpacket 32, setting to 8 [ 86.072735][ T5878] usb 9-1: config 5 interface 159 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 86.075939][ T5878] usb 9-1: config 5 interface 159 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 86.079572][ T5878] usb 9-1: config 5 interface 159 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 86.082869][ T5878] usb 9-1: too many endpoints for config 5 interface 3 altsetting 72: 100, using maximum allowed: 30 [ 86.086151][ T5878] usb 9-1: config 5 interface 3 altsetting 72 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 86.090225][ T5878] usb 9-1: config 5 interface 152 has no altsetting 0 [ 86.092356][ T5878] usb 9-1: config 5 interface 193 has no altsetting 0 [ 86.094658][ T5878] usb 9-1: config 5 interface 159 has no altsetting 0 [ 86.096735][ T5878] usb 9-1: config 5 interface 3 has no altsetting 0 [ 86.104748][ T5878] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.107833][ T5878] usb 9-1: Product: 喼쨺෿痴熧张虑쬌م먊绥鼃ﱽ嬬Ẓ䳯嚺밺⽋点룃払괬㪏ﰿ椻蒤Ꝍ항풕ꊀ풜뫊㚙塠太䬮٪犫龿迫穒揄㩗ᩪ柤馇仑娐ⷃ蝮ᄛ꺈ණ꜌ﯳ离䈍둯ꥫ捙ᅍ䷲᲏㐩꧋죤䔧そۨ⩈鹍獀꒘쬎坠ꞑ魔槚ఄ靍抬⎺酖᝽ [ 86.118016][ T5878] usb 9-1: Manufacturer: 햞悧鳛篬適뀀輄ഗΆ蠹촷觪谣㥓ᝩ⛝㥊番㒣噍基Ũ買࢛횈댲池뉸鮍嚷ꈖ⏪黟Š戨멮ꓥ胚琉ᐬ럙蕴峚髧̝蓲林戱䥙ⓖ䇭㽆騼懷砛飊穆蔣Δ蓱냊⡫Ｑ〢修柫渜㗆겄捵 [ 86.126203][ T5878] usb 9-1: SerialNumber:  [ 86.239420][ T2322] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 86.272835][ T7798] misc userio: Can't change port extra on an already running userio instance [ 86.390321][ T2322] usb 5-1: not running at top speed; connect to a high speed hub [ 86.392915][ T2322] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.395964][ T7749] pim6reg: entered allmulticast mode [ 86.397181][ T2322] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.399276][ T7749] pim6reg: left allmulticast mode [ 86.404247][ T2322] usb 5-1: config 1 interface 0 has no altsetting 0 [ 86.409298][ T2322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.412092][ T2322] usb 5-1: Product: syz [ 86.413520][ T2322] usb 5-1: Manufacturer: syz [ 86.415019][ T2322] usb 5-1: SerialNumber: syz [ 86.457257][ T7806] xt_hashlimit: size too large, truncated to 1048576 [ 86.458507][ T5731] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.459422][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 86.538635][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.538702][ T5731] Bluetooth: hci2: command 0x0c1a tx timeout [ 86.542158][ T5878] option 9-1:5.152: GSM modem (1-port) converter detected [ 86.560007][ T5878] usb 9-1: USB disconnect, device number 4 [ 86.571624][ T5878] option 9-1:5.152: device disconnected [ 86.633622][ T2322] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 86.641996][ T2322] usb 5-1: USB disconnect, device number 7 [ 86.744528][ T7774] tipc: Resetting bearer [ 86.770027][ T7774] tipc: Disabling bearer [ 86.818588][ T7828] [U] [ 87.007561][ T7845] netlink: 'syz.3.569': attribute type 41 has an invalid length. [ 87.007582][ T7847] netlink: 'syz.3.569': attribute type 41 has an invalid length. [ 87.119271][ T5832] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 87.269018][ T5832] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.273347][ T5832] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.277748][ T5832] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 87.281875][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.288727][ T7837] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 87.298292][ T5832] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 87.579380][ T5878] usb 6-1: USB disconnect, device number 10 [ 88.528689][ T5731] Bluetooth: hci1: command 0x0c1a tx timeout [ 88.528717][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.608618][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 88.610522][ T5731] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.077427][ T7856] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 90.102900][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 90.102917][ T42] audit: type=1400 audit(2000000293.403:676): avc: denied { ioctl } for pid=7863 comm="syz.1.572" path="socket:[22546]" dev="sockfs" ino=22546 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 90.222561][ T42] audit: type=1400 audit(2000000293.523:677): avc: denied { getopt } for pid=7881 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.275861][ T7890] __nla_validate_parse: 8 callbacks suppressed [ 90.275880][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.581'. [ 90.341414][ T7902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7902 comm=syz.4.584 [ 90.346453][ T42] audit: type=1400 audit(2000000293.643:678): avc: denied { connect } for pid=7901 comm="syz.4.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 90.398917][ T7905] netlink: 'syz.3.585': attribute type 1 has an invalid length. [ 90.399239][ T5875] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 90.401360][ T7905] netlink: 76 bytes leftover after parsing attributes in process `syz.3.585'. [ 90.407823][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 90.460030][ T42] audit: type=1400 audit(2000000293.763:679): avc: denied { ioctl } for pid=7901 comm="syz.4.584" path="socket:[21597]" dev="sockfs" ino=21597 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.472766][ T7899] futex_wake_op: syz.0.583 tries to shift op by -1; fix this program [ 90.477050][ T7899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.583'. [ 90.478892][ T7907] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 90.546791][ T7912] pim6reg: entered allmulticast mode [ 90.548671][ T7912] pim6reg: left allmulticast mode [ 90.578572][ T5875] usb 6-1: Using ep0 maxpacket: 8 [ 90.584346][ T5875] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 90.593842][ T5875] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 90.596866][ T5875] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 90.600564][ T5875] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 90.603461][ T5875] usb 6-1: config 250 has no interface number 0 [ 90.605474][ T5875] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 90.609446][ T5875] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 90.612874][ T5875] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 90.616037][ T5875] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 90.619397][ T5875] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 90.623739][ T5875] usb 6-1: config 250 interface 228 has no altsetting 0 [ 90.628060][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 90.631884][ T5875] usb 6-1: Product: syz [ 90.633368][ T5875] usb 6-1: SerialNumber: syz [ 90.643014][ T5875] hub 6-1:250.228: bad descriptor, ignoring hub [ 90.645562][ T5875] hub 6-1:250.228: probe with driver hub failed with error -5 [ 90.676992][ T7924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.590'. [ 90.680876][ T7924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.590'. [ 90.849428][ T5875] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 90.852934][ T7875] usbip-vudc usbip-vudc.0: gadget not bound [ 90.863158][ T42] audit: type=1326 audit(2000000294.163:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7874 comm="syz.1.576" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb95b19e0d9 code=0x0 [ 90.967346][ T7935] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 90.971297][ T7936] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 91.307120][ T42] audit: type=1400 audit(2000000294.603:681): avc: denied { create } for pid=7943 comm="syz.3.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 91.315747][ T7944] scsi_nl_rcv_msg: discarding partial skb [ 91.317651][ T42] audit: type=1400 audit(2000000294.613:682): avc: denied { write } for pid=7943 comm="syz.3.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 91.412109][ T42] audit: type=1400 audit(2000000294.713:683): avc: denied { read } for pid=7949 comm="syz.3.599" dev="nsfs" ino=4026532882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 91.418717][ T42] audit: type=1400 audit(2000000294.713:684): avc: denied { open } for pid=7949 comm="syz.3.599" path="net:[4026532882]" dev="nsfs" ino=4026532882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 91.835393][ T7974] netlink: 'syz.0.606': attribute type 2 has an invalid length. [ 92.000161][ T7996] netlink: 'syz.3.612': attribute type 12 has an invalid length. [ 92.002602][ T7996] netlink: 132 bytes leftover after parsing attributes in process `syz.3.612'. [ 92.029332][ T7996] sl0: entered promiscuous mode [ 92.178151][ T8007] xfrm0 speed is unknown, defaulting to 1000 [ 92.195436][ T42] audit: type=1400 audit(2000000295.493:685): avc: denied { write } for pid=8005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.361365][ T8026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.619'. [ 93.023154][ T5737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.026929][ T5737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.030245][ T5737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.033390][ T5737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.036617][ T5737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.287122][ T8058] xfrm0 speed is unknown, defaulting to 1000 [ 93.546046][ T8058] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.549669][ T8058] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.553232][ T8058] bridge_slave_0: entered allmulticast mode [ 93.557305][ T8058] bridge_slave_0: entered promiscuous mode [ 93.563454][ T8058] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.566722][ T8058] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.570217][ T8058] bridge_slave_1: entered allmulticast mode [ 93.574434][ T8058] bridge_slave_1: entered promiscuous mode [ 93.625189][ T8058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.631990][ T8058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.657357][ T8058] team0: Port device team_slave_0 added [ 93.662298][ T8058] team0: Port device team_slave_1 added [ 93.685287][ T8058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.688233][ T8058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.701142][ T8058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.708187][ T8058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.711627][ T8058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.722736][ T8058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.793788][ T8058] hsr_slave_0: entered promiscuous mode [ 93.797018][ T8058] hsr_slave_1: entered promiscuous mode [ 93.803452][ T8058] debugfs: 'hsr0' already exists in 'hsr' [ 93.805903][ T8058] Cannot create hsr debugfs directory [ 93.819464][ T2322] usb 6-1: USB disconnect, device number 11 [ 93.830705][ T2322] usblp0: removed [ 93.935573][ T8099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8099 comm=syz.0.634 [ 93.964519][ T8101] netlink: 64 bytes leftover after parsing attributes in process `syz.1.635'. [ 93.971262][ T8104] netlink: 64 bytes leftover after parsing attributes in process `syz.1.635'. [ 94.030832][ T8058] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.042103][ T8058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.054758][ T8058] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.062086][ T8058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.064803][ T8058] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.071200][ T8058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.074024][ T8058] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.079150][ T8058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.166721][ T8058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.192658][ T8058] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.236534][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.239796][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.266793][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.269878][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.475437][ T8144] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 94.493478][ T8144] netlink: 'syz.4.642': attribute type 1 has an invalid length. [ 94.519559][ T8144] 8021q: adding VLAN 0 to HW filter on device bond3 [ 94.621339][ T8058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.691479][ T8129] cgroup: fork rejected by pids controller in /syz1 [ 94.702567][ T8179] nfs: Unknown parameter './file0' [ 94.868059][ T8058] veth0_vlan: entered promiscuous mode [ 94.878715][ T8058] veth1_vlan: entered promiscuous mode [ 94.929114][ T8058] veth0_macvtap: entered promiscuous mode [ 94.933338][ T8058] veth1_macvtap: entered promiscuous mode [ 94.949311][ T8058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.967920][ T8058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.988794][ T5776] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.992698][ T5776] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.039144][ T5776] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.049365][ T5776] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.081429][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.084197][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.099500][ T5737] Bluetooth: hci0: command tx timeout [ 95.114710][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.119591][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.172418][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 95.172436][ T42] audit: type=1400 audit(2000000298.473:708): avc: denied { mounton } for pid=8058 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 95.267246][ T42] audit: type=1400 audit(2000000298.563:709): avc: denied { getopt } for pid=8223 comm="syz.4.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.270261][ T8221] tmpfs: Bad value for 'mpol' [ 95.355824][ T8233] pimreg: entered allmulticast mode [ 95.394509][ T8235] autofs: Bad value for 'fd' [ 95.492048][ T42] audit: type=1400 audit(2000000298.793:710): avc: denied { setopt } for pid=8237 comm="syz.4.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.545033][ T42] audit: type=1400 audit(2000000298.843:711): avc: denied { append } for pid=8249 comm="syz.0.657" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 95.569924][ T8252] netlink: 80 bytes leftover after parsing attributes in process `syz.1.658'. [ 95.579570][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.608968][ T42] audit: type=1400 audit(2000000298.903:712): avc: denied { connect } for pid=8249 comm="syz.0.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.620558][ T8250] input: syz0 as /devices/virtual/input/input14 [ 95.781156][ T42] audit: type=1400 audit(2000000299.073:713): avc: denied { write } for pid=8262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.827539][ T42] audit: type=1400 audit(2000000299.123:714): avc: denied { write } for pid=8273 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.853530][ T42] audit: type=1400 audit(2000000299.153:715): avc: denied { write } for pid=8277 comm="syz.5.663" name="usb_gadget" dev="configfs" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.874921][ T42] audit: type=1400 audit(2000000299.163:716): avc: denied { write } for pid=8277 comm="syz.5.663" name="functions" dev="configfs" ino=22365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.882136][ T8276] netlink: 'syz.0.662': attribute type 13 has an invalid length. [ 95.889280][ T42] audit: type=1400 audit(2000000299.163:717): avc: denied { write } for pid=8277 comm="syz.5.663" name="configs" dev="configfs" ino=22366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.940859][ T8282] netlink: 666 bytes leftover after parsing attributes in process `syz.5.663'. [ 95.953045][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.664'. [ 95.971665][ T2322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.007262][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.209105][ T2322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.233701][ T8291] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8291 comm=syz.0.666 [ 96.311912][ T8295] veth0_macvtap: Caught tx_queue_len zero misconfig [ 96.356310][ T8296] cgroup: subsys name conflicts with all [ 96.457149][ T8294] xfrm0 speed is unknown, defaulting to 1000 [ 96.482208][ T8305] netlink: 'syz.1.672': attribute type 30 has an invalid length. [ 96.566076][ T8308] netlink: 'syz.1.672': attribute type 30 has an invalid length. [ 96.609261][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.617750][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.692030][ T8317] netlink: 72 bytes leftover after parsing attributes in process `syz.5.676'. [ 96.843030][ T8331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.680'. [ 96.859439][ T8334] mmap: syz.4.680 (8334) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.867746][ T8331] netlink: 'syz.4.680': attribute type 1 has an invalid length. [ 97.070191][ T8346] syzkaller0: entered promiscuous mode [ 97.072256][ T8346] syzkaller0: entered allmulticast mode [ 97.168538][ T5737] Bluetooth: hci0: command tx timeout [ 97.228915][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.250249][ T2322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.641829][ T8369] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 97.646979][ T8369] overlayfs: missing 'lowerdir' [ 98.024047][ T8383] CIFS: VFS: UNC: missing share name [ 98.026141][ T8383] CIFS: VFS: Malformed UNC in devname [ 98.078294][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.693'. [ 98.179875][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 98.183734][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.698'. [ 98.187618][ T8397] netlink: 'syz.1.698': attribute type 7 has an invalid length. [ 98.210572][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.291835][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.314011][ T8365] ima: policy update failed [ 98.585609][ T8413] netlink: 20 bytes leftover after parsing attributes in process `syz.0.705'. [ 98.624366][ T8417] null_blk: disk nullb1 created [ 98.632707][ T8417] netlink: 'syz.1.707': attribute type 25 has an invalid length. [ 98.710430][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 98.722576][ T8431] netlink: 'syz.1.710': attribute type 6 has an invalid length. [ 99.060684][ T5875] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 99.237733][ T8466] Cache volume key already in use (9p,syz,) [ 99.240878][ T5875] usb 10-1: unable to get BOS descriptor or descriptor too short [ 99.244374][ T5875] usb 10-1: not running at top speed; connect to a high speed hub [ 99.247435][ T5875] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 99.248571][ T5737] Bluetooth: hci0: command tx timeout [ 99.253261][ T5875] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 99.253282][ T5875] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 99.253298][ T5875] usb 10-1: config 14 has no interface number 0 [ 99.253313][ T5875] usb 10-1: config 14 has no interface number 1 [ 99.267956][ T5875] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 99.272338][ T5875] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 99.276913][ T5875] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 99.281846][ T5875] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 99.286100][ T5875] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 99.288959][ T8466] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 99.291128][ T5875] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 99.297393][ T5875] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.303053][ T5875] usb 10-1: config 14 interface 57 has no altsetting 0 [ 99.305220][ T5875] usb 10-1: config 14 interface 228 has no altsetting 0 [ 99.310341][ T5875] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.313462][ T5875] usb 10-1: Product: syz [ 99.314997][ T5875] usb 10-1: Manufacturer: syz [ 99.316414][ T5875] usb 10-1: SerialNumber: syz [ 99.438352][ T8472] netlink: 'syz.0.727': attribute type 9 has an invalid length. [ 99.480078][ T8477] process '/newroot/155/file0' started with executable stack [ 99.540122][ T8439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.546489][ T8439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.564241][ T5875] legousbtower 10-1:14.57: interrupt endpoints not found [ 99.587496][ T5875] legousbtower 10-1:14.228: get version request failed: -71 [ 99.590584][ T5875] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -71 [ 99.630677][ T5875] usb 10-1: USB disconnect, device number 2 [ 99.646465][ T8439] xfrm0 speed is unknown, defaulting to 1000 [ 99.664559][ T5817] hid-generic 0005:07C0:05DF.0005: item fetching failed at offset 0/1 [ 99.668742][ T5817] hid-generic 0005:07C0:05DF.0005: probe with driver hid-generic failed with error -22 [ 99.706387][ T8502] sctp: [Deprecated]: syz.1.733 (pid 8502) Use of int in max_burst socket option deprecated. [ 99.706387][ T8502] Use struct sctp_assoc_value instead [ 99.887789][ T8514] 9p: Could not find request transport: xen [ 100.495971][ T8558] x_tables: duplicate underflow at hook 1 [ 100.601412][ T8564] vlan2: entered allmulticast mode [ 100.774810][ C3] net_ratelimit: 7 callbacks suppressed [ 100.774828][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.867363][ T8574] __nla_validate_parse: 4 callbacks suppressed [ 100.867386][ T8574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.760'. [ 100.876888][ T8574] bond0: entered promiscuous mode [ 100.878690][ T8574] bond_slave_0: entered promiscuous mode [ 100.880683][ T8574] bond_slave_1: entered promiscuous mode [ 100.888223][ T8574] ipvlan0: entered promiscuous mode [ 100.890803][ T8574] ipvlan0: left promiscuous mode [ 100.893213][ T8574] bond0: left promiscuous mode [ 100.894812][ T8574] bond_slave_0: left promiscuous mode [ 100.896739][ T8574] bond_slave_1: left promiscuous mode [ 101.276310][ T8596] netlink: 'syz.1.767': attribute type 2 has an invalid length. [ 101.282162][ T8596] netlink: 46 bytes leftover after parsing attributes in process `syz.1.767'. [ 101.286199][ T8596] netlink: 'syz.1.767': attribute type 2 has an invalid length. [ 101.289645][ T8596] netlink: 46 bytes leftover after parsing attributes in process `syz.1.767'. [ 101.293704][ T8596] netlink: 'syz.1.767': attribute type 2 has an invalid length. [ 101.297522][ T8596] netlink: 46 bytes leftover after parsing attributes in process `syz.1.767'. [ 101.302104][ T8596] netlink: 'syz.1.767': attribute type 2 has an invalid length. [ 101.305529][ T8596] netlink: 46 bytes leftover after parsing attributes in process `syz.1.767'. [ 101.309526][ T8596] netlink: 'syz.1.767': attribute type 2 has an invalid length. [ 101.313212][ T8596] netlink: 46 bytes leftover after parsing attributes in process `syz.1.767'. [ 101.318608][ T8596] netlink: 'syz.1.767': attribute type 2 has an invalid length. [ 101.322903][ T8596] netlink: 46 bytes leftover after parsing attributes in process `syz.1.767'. [ 101.326928][ T8596] netlink: 'syz.1.767': attribute type 2 has an invalid length. [ 101.330243][ T8596] netlink: 46 bytes leftover after parsing attributes in process `syz.1.767'. [ 101.333689][ T8596] netlink: 'syz.1.767': attribute type 2 has an invalid length. [ 101.336409][ T8596] netlink: 46 bytes leftover after parsing attributes in process `syz.1.767'. [ 101.339935][ T8596] netlink: 'syz.1.767': attribute type 2 has an invalid length. [ 101.343001][ T8596] netlink: 46 bytes leftover after parsing attributes in process `syz.1.767'. [ 101.346445][ T8596] netlink: 'syz.1.767': attribute type 2 has an invalid length. [ 101.458574][ T5737] Bluetooth: hci0: command tx timeout [ 101.481223][ T8617] batman_adv: batadv0: Adding interface: veth0 [ 101.485941][ T8617] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.495461][ T8617] batman_adv: batadv0: Interface activated: veth0 [ 101.550025][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.820789][ T42] kauditd_printk_skb: 94 callbacks suppressed [ 101.820820][ T42] audit: type=1400 audit(2000000304.961:812): avc: denied { ioctl } for pid=8636 comm="syz.1.780" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 101.865282][ T5878] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 101.876651][ T8642] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 102.027135][ T5878] usb 10-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 102.031710][ T5878] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.036536][ T5878] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.040598][ T5878] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 102.044680][ T5878] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.052918][ T5878] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.056312][ T5878] usb 10-1: Product: syz [ 102.058673][ T5878] usb 10-1: Manufacturer: syz [ 102.060682][ T5878] usb 10-1: SerialNumber: syz [ 102.074027][ T42] audit: type=1400 audit(2000000305.204:813): avc: denied { read write } for pid=8648 comm="syz.0.783" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 102.083075][ T42] audit: type=1400 audit(2000000305.204:814): avc: denied { open } for pid=8648 comm="syz.0.783" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 102.143726][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.276558][ T42] audit: type=1400 audit(2000000305.391:815): avc: denied { setopt } for pid=8665 comm="syz.1.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 102.285275][ T5878] usb 10-1: usb_control_msg returned -71 [ 102.288134][ T5878] usbtmc 10-1:1.0: can't read capabilities [ 102.295612][ T42] audit: type=1400 audit(2000000305.410:816): avc: denied { listen } for pid=8665 comm="syz.1.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.302015][ T42] audit: type=1400 audit(2000000305.410:817): avc: denied { accept } for pid=8665 comm="syz.1.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.302269][ T5878] usb 10-1: USB disconnect, device number 3 [ 102.657896][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.762096][ T5817] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 102.910430][ T8674] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.933552][ T5817] usb 10-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 102.937511][ T5817] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.940892][ T5817] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.944613][ T5817] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 102.947651][ T5817] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.953279][ T5817] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.955980][ T5817] usb 10-1: Product: syz [ 102.957377][ T5817] usb 10-1: Manufacturer: syz [ 102.958933][ T5817] usb 10-1: SerialNumber: syz [ 103.172679][ T42] audit: type=1400 audit(2000000306.233:818): avc: denied { write } for pid=8693 comm="syz.0.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.172741][ T8694] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.181078][ T5817] usb 10-1: usb_control_msg returned -32 [ 103.184066][ T5817] usbtmc 10-1:1.0: can't read capabilities [ 103.347464][ T42] audit: type=1400 audit(2000000306.392:819): avc: denied { remount } for pid=8698 comm="syz.0.795" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 103.378090][ T42] audit: type=1400 audit(2000000306.420:820): avc: denied { map } for pid=8700 comm="syz.0.796" path="socket:[27779]" dev="sockfs" ino=27779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 103.387251][ T42] audit: type=1400 audit(2000000306.420:821): avc: denied { accept } for pid=8700 comm="syz.0.796" path="socket:[27779]" dev="sockfs" ino=27779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 103.522918][ T8712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.566998][ T8712] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 103.571184][ T8712] bond2: entered allmulticast mode [ 103.585571][ T8712] ip6erspan0: entered promiscuous mode [ 103.590848][ T8712] ip6erspan0: entered allmulticast mode [ 103.593538][ T8712] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 103.778357][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.007467][ T8717] usbtmc 10-1:1.0: usb_control_msg returned -32 [ 104.007674][ T8718] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 104.051173][ T8717] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2545747800 (162927859200 ns) > initial count (120605976512 ns). Using initial count to start timer. [ 104.315077][ T8721] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 104.352069][ T5875] usb 10-1: USB disconnect, device number 4 [ 104.500692][ T8732] overlayfs: failed to resolve './sys/bus/pci/devices/0000': -2 [ 104.879124][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.934792][ T8760] IPVS: lc: FWM 3 0x00000003 - no destination available [ 105.401786][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.661887][ T2322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.802419][ T8808] sg_write: data in/out 62940/14 bytes for SCSI command 0x0-- guessing data in; [ 105.802419][ T8808] program syz.5.830 not setting count and/or reply_len properly [ 105.947771][ T8773] syz.0.818 (8773) used greatest stack depth: 19120 bytes left [ 105.989361][ T2322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.991269][ T8818] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 106.107954][ T8833] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.135080][ T8832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.141259][ T8832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.144291][ T8832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.147339][ T8832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.150404][ T8832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.176540][ T8840] xt_CT: No such helper "snmp_trap" [ 106.214667][ T8849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.222176][ T8849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.227072][ T8849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.232174][ T8849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.239634][ T8849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.351971][ T8860] pim6reg1: entered promiscuous mode [ 106.355257][ T8860] pim6reg1: entered allmulticast mode [ 106.365719][ T8862] tmpfs: Invalid uid '0x00000000ffffffff' [ 106.368240][ T8860] dvmrp0: entered allmulticast mode [ 106.435482][ T8868] x_tables: duplicate underflow at hook 1 [ 106.525380][ T8880] xfrm0 speed is unknown, defaulting to 1000 [ 106.561348][ T8877] xfrm0 speed is unknown, defaulting to 1000 [ 107.075385][ T8903] tipc: Started in network mode [ 107.077580][ T8903] tipc: Node identity 1000001, cluster identity 4369 [ 107.089985][ T8903] tipc: Node number set to 16777217 [ 107.092196][ T8903] tipc: Cannot configure node identity twice [ 107.229495][ T8921] __nla_validate_parse: 30 callbacks suppressed [ 107.229515][ T8921] netlink: 80 bytes leftover after parsing attributes in process `syz.4.862'. [ 107.241042][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.862'. [ 107.259031][ T8927] erspan0: entered promiscuous mode [ 107.266290][ T8927] erspan0: left promiscuous mode [ 107.268865][ T8922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.865'. [ 107.326298][ T8930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.867'. [ 107.446682][ T8940] FAULT_INJECTION: forcing a failure. [ 107.446682][ T8940] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 107.452180][ T8940] CPU: 3 UID: 0 PID: 8940 Comm: syz.5.869 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.452208][ T8940] Tainted: [L]=SOFTLOCKUP [ 107.452213][ T8940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.452223][ T8940] Call Trace: [ 107.452243][ T8940] [ 107.452251][ T8940] dump_stack_lvl+0x100/0x190 [ 107.452297][ T8940] should_fail_ex.cold+0x5/0xa [ 107.452334][ T8940] _copy_from_user+0x2e/0xd0 [ 107.452369][ T8940] copy_msghdr_from_user+0x9f/0x4c0 [ 107.452397][ T8940] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 107.452425][ T8940] ___sys_sendmsg+0x106/0x1e0 [ 107.452442][ T8940] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.452456][ T8940] ? __lock_acquire+0x49f/0x1a40 [ 107.452484][ T8940] ? get_pid_task+0x106/0x250 [ 107.452531][ T8940] __sys_sendmsg+0x160/0x210 [ 107.452553][ T8940] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.452586][ T8940] do_syscall_64+0x115/0x870 [ 107.452617][ T8940] ? clear_bhb_loop+0x70/0xc0 [ 107.452637][ T8940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.452653][ T8940] RIP: 0033:0x7fbd80b9e0d9 [ 107.452667][ T8940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.452682][ T8940] RSP: 002b:00007fbd819a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.452708][ T8940] RAX: ffffffffffffffda RBX: 00007fbd80e25fa0 RCX: 00007fbd80b9e0d9 [ 107.452719][ T8940] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 107.452728][ T8940] RBP: 00007fbd819a5090 R08: 0000000000000000 R09: 0000000000000000 [ 107.452738][ T8940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.452748][ T8940] R13: 00007fbd80e26038 R14: 00007fbd80e25fa0 R15: 00007fff7b28a328 [ 107.452768][ T8940] [ 107.590928][ T8958] tmpfs: Bad value for 'mpol' [ 107.622318][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 107.622331][ T42] audit: type=1400 audit(2000000310.388:849): avc: denied { bind } for pid=8960 comm="syz.5.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.633082][ T42] audit: type=1400 audit(2000000310.397:850): avc: denied { name_bind } for pid=8960 comm="syz.5.875" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 107.633515][ T8962] validate_nla: 24 callbacks suppressed [ 107.633530][ T8962] netlink: 'syz.5.875': attribute type 4 has an invalid length. [ 107.639925][ T42] audit: type=1400 audit(2000000310.397:851): avc: denied { node_bind } for pid=8960 comm="syz.5.875" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 107.709379][ T8968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.877'. [ 107.737936][ T8968] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8968 comm=syz.0.877 [ 107.868271][ T8974] FAULT_INJECTION: forcing a failure. [ 107.868271][ T8974] name failslab, interval 1, probability 0, space 0, times 1 [ 107.874934][ T8974] CPU: 2 UID: 0 PID: 8974 Comm: syz.0.880 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.874962][ T8974] Tainted: [L]=SOFTLOCKUP [ 107.874967][ T8974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.874977][ T8974] Call Trace: [ 107.874982][ T8974] [ 107.874988][ T8974] dump_stack_lvl+0x100/0x190 [ 107.875015][ T8974] should_fail_ex.cold+0x5/0xa [ 107.875035][ T8974] should_failslab+0xc2/0x120 [ 107.875077][ T8974] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 107.875097][ T8974] ? __alloc_skb+0x5b7/0x710 [ 107.875123][ T8974] ? __alloc_skb+0x140/0x710 [ 107.875144][ T8974] __alloc_skb+0x140/0x710 [ 107.875160][ T8974] ? __alloc_skb+0x5b7/0x710 [ 107.875179][ T8974] ? __pfx___alloc_skb+0x10/0x10 [ 107.875196][ T8974] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 107.875229][ T8974] ? sock_has_perm+0x25a/0x2f0 [ 107.875250][ T8974] ? __pfx_sock_has_perm+0x10/0x10 [ 107.875271][ T8974] netlink_alloc_large_skb+0x69/0x150 [ 107.875299][ T8974] netlink_sendmsg+0x680/0xda0 [ 107.875320][ T8974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.875337][ T8974] ? selinux_socket_sendmsg+0x198/0x2f0 [ 107.875363][ T8974] ____sys_sendmsg+0xa4d/0xbe0 [ 107.875386][ T8974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.875404][ T8974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.875437][ T8974] ___sys_sendmsg+0x190/0x1e0 [ 107.875456][ T8974] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.875471][ T8974] ? __lock_acquire+0x49f/0x1a40 [ 107.875491][ T8974] ? get_pid_task+0x106/0x250 [ 107.875529][ T8974] __sys_sendmsg+0x160/0x210 [ 107.875550][ T8974] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.875582][ T8974] do_syscall_64+0x115/0x870 [ 107.875632][ T8974] ? clear_bhb_loop+0x70/0xc0 [ 107.875653][ T8974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.875670][ T8974] RIP: 0033:0x7fea0f19e0d9 [ 107.875686][ T8974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.875703][ T8974] RSP: 002b:00007fea10020028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.875721][ T8974] RAX: ffffffffffffffda RBX: 00007fea0f425fa0 RCX: 00007fea0f19e0d9 [ 107.875733][ T8974] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 107.875743][ T8974] RBP: 00007fea10020090 R08: 0000000000000000 R09: 0000000000000000 [ 107.875753][ T8974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.875763][ T8974] R13: 00007fea0f426038 R14: 00007fea0f425fa0 R15: 00007ffc0a4367a8 [ 107.875788][ T8974] [ 107.966172][ T5817] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 108.161386][ T42] audit: type=1400 audit(2000000310.903:852): avc: denied { read } for pid=8977 comm="syz.4.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.170697][ T5817] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.175151][ T5817] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 108.178567][ T5817] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 108.182050][ T5817] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 108.185303][ T5817] usb 10-1: config 1 interface 0 has no altsetting 0 [ 108.188388][ T5817] usb 10-1: string descriptor 0 read error: -22 [ 108.190458][ T5817] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.196053][ T8966] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 108.199231][ T8966] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 108.202431][ T8966] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 108.208390][ T5817] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 108.415098][ T2322] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 108.429667][ T10] usb 10-1: USB disconnect, device number 5 [ 108.473670][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'. [ 108.473691][ T8985] xfrm0 speed is unknown, defaulting to 1000 [ 108.562050][ T42] audit: type=1400 audit(2000000311.268:853): avc: granted { setsecparam } for pid=8993 comm="syz.5.886" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 108.576380][ T2322] usb 9-1: Using ep0 maxpacket: 16 [ 108.579114][ T2322] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.582904][ T2322] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64 [ 108.587457][ T5737] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 108.588910][ T2322] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.592674][ T2322] usb 9-1: Product: syz [ 108.594104][ T2322] usb 9-1: Manufacturer: syz [ 108.595624][ T2322] usb 9-1: SerialNumber: syz [ 108.609965][ T2322] usb 9-1: config 0 descriptor?? [ 108.613629][ T2322] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 108.616633][ T2322] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 108.708938][ T9009] hpfs: hpfs_map_sector(): read error [ 108.717569][ T9009] netlink: 'syz.5.892': attribute type 12 has an invalid length. [ 109.067881][ T50] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 109.261565][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 109.272270][ T2322] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 109.288585][ T50] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 109.302208][ T50] usb 6-1: config 0 has no interfaces? [ 109.304928][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.341230][ T50] usb 6-1: config 0 descriptor?? [ 109.639572][ T9041] XFS (nbd0): SB validate failed with error -5. [ 109.741018][ T9048] FAULT_INJECTION: forcing a failure. [ 109.741018][ T9048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.746738][ T9048] CPU: 0 UID: 0 PID: 9048 Comm: syz.0.900 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.746766][ T9048] Tainted: [L]=SOFTLOCKUP [ 109.746772][ T9048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.746792][ T9048] Call Trace: [ 109.746830][ T9048] [ 109.746839][ T9048] dump_stack_lvl+0x100/0x190 [ 109.746889][ T9048] should_fail_ex.cold+0x5/0xa [ 109.746940][ T9048] _copy_from_iter+0x1f4/0x1690 [ 109.746995][ T9048] ? __asan_memset+0x23/0x50 [ 109.747025][ T9048] ? __pfx__copy_from_iter+0x10/0x10 [ 109.747046][ T9048] ? __pfx___alloc_skb+0x10/0x10 [ 109.747075][ T9048] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 109.747161][ T9048] ? sock_has_perm+0x25a/0x2f0 [ 109.747182][ T9048] ? __pfx_sock_has_perm+0x10/0x10 [ 109.747207][ T9048] netlink_sendmsg+0x808/0xda0 [ 109.747238][ T9048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.747257][ T9048] ? selinux_socket_sendmsg+0x198/0x2f0 [ 109.747286][ T9048] ____sys_sendmsg+0xa4d/0xbe0 [ 109.747322][ T9048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.747341][ T9048] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.747376][ T9048] ___sys_sendmsg+0x190/0x1e0 [ 109.747393][ T9048] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.747412][ T9048] ? __lock_acquire+0x49f/0x1a40 [ 109.747444][ T9048] ? get_pid_task+0x106/0x250 [ 109.747495][ T9048] __sys_sendmsg+0x160/0x210 [ 109.747521][ T9048] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.747554][ T9048] do_syscall_64+0x115/0x870 [ 109.747608][ T9048] ? clear_bhb_loop+0x70/0xc0 [ 109.747634][ T9048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.747650][ T9048] RIP: 0033:0x7fea0f19e0d9 [ 109.747665][ T9048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.747680][ T9048] RSP: 002b:00007fea10020028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.747707][ T9048] RAX: ffffffffffffffda RBX: 00007fea0f425fa0 RCX: 00007fea0f19e0d9 [ 109.747720][ T9048] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 109.747730][ T9048] RBP: 00007fea10020090 R08: 0000000000000000 R09: 0000000000000000 [ 109.747740][ T9048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.747752][ T9048] R13: 00007fea0f426038 R14: 00007fea0f425fa0 R15: 00007ffc0a4367a8 [ 109.747777][ T9048] [ 109.777210][ T2322] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 109.855955][ T2322] em28xx 9-1:0.0: board has no eeprom [ 109.873594][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.902'. [ 110.660546][ T9067] udevd[9067]: failed to execute '/lib/udev/ata_id' 'ata_id --export /dev/sda': Exec format error [ 110.677777][ T5740] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1222: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 110.683964][ T5740] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #1222: comm udevd: checksumming directory block 0 [ 110.699038][ T9070] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1222: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 110.704664][ T9070] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #1222: comm udevd: checksumming directory block 0 [ 110.711154][ T9070] udevd[9070]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Bad message [ 110.722109][ T9071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.725667][ T9071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.762118][ T42] audit: type=1400 audit(2000000313.327:854): avc: denied { write } for pid=9072 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 110.962222][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'. [ 110.964499][ T8978] em28xx 9-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 110.966138][ T9075] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 110.966160][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.907'. [ 111.022529][ T2322] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 111.025029][ T2322] em28xx 9-1:0.0: dvb set to bulk mode. [ 111.027204][ T50] em28xx 9-1:0.0: Binding DVB extension [ 111.037830][ T2322] usb 9-1: USB disconnect, device number 5 [ 111.048064][ T2322] em28xx 9-1:0.0: Disconnecting em28xx [ 111.057117][ T9081] FAULT_INJECTION: forcing a failure. [ 111.057117][ T9081] name failslab, interval 1, probability 0, space 0, times 0 [ 111.062607][ T9081] CPU: 0 UID: 0 PID: 9081 Comm: syz.0.909 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.062635][ T9081] Tainted: [L]=SOFTLOCKUP [ 111.062642][ T9081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.062654][ T9081] Call Trace: [ 111.062660][ T9081] [ 111.062666][ T9081] dump_stack_lvl+0x100/0x190 [ 111.062695][ T9081] should_fail_ex.cold+0x5/0xa [ 111.062715][ T9081] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 111.062756][ T9081] should_failslab+0xc2/0x120 [ 111.062795][ T9081] kmem_cache_alloc_noprof+0x91/0x6a0 [ 111.062818][ T9081] ? skb_clone+0x190/0x400 [ 111.062842][ T9081] skb_clone+0x190/0x400 [ 111.062868][ T9081] netlink_deliver_tap+0xaed/0xcc0 [ 111.062893][ T9081] netlink_unicast+0x62b/0x850 [ 111.062918][ T9081] ? __pfx_netlink_unicast+0x10/0x10 [ 111.062938][ T9081] ? __pfx_sock_has_perm+0x10/0x10 [ 111.062966][ T9081] netlink_sendmsg+0x8b0/0xda0 [ 111.062991][ T9081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.063012][ T9081] ? selinux_socket_sendmsg+0x198/0x2f0 [ 111.063042][ T9081] ____sys_sendmsg+0xa4d/0xbe0 [ 111.063068][ T9081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.063090][ T9081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.063129][ T9081] ___sys_sendmsg+0x190/0x1e0 [ 111.063151][ T9081] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.063165][ T9081] ? __lock_acquire+0x49f/0x1a40 [ 111.063190][ T9081] ? get_pid_task+0x106/0x250 [ 111.063236][ T9081] __sys_sendmsg+0x160/0x210 [ 111.063261][ T9081] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.063298][ T9081] do_syscall_64+0x115/0x870 [ 111.063324][ T9081] ? clear_bhb_loop+0x70/0xc0 [ 111.063346][ T9081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.063365][ T9081] RIP: 0033:0x7fea0f19e0d9 [ 111.063386][ T9081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.063404][ T9081] RSP: 002b:00007fea10020028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.063420][ T9081] RAX: ffffffffffffffda RBX: 00007fea0f425fa0 RCX: 00007fea0f19e0d9 [ 111.063428][ T9081] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 111.063438][ T9081] RBP: 00007fea10020090 R08: 0000000000000000 R09: 0000000000000000 [ 111.063450][ T9081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.063460][ T9081] R13: 00007fea0f426038 R14: 00007fea0f425fa0 R15: 00007ffc0a4367a8 [ 111.063485][ T9081] [ 111.072902][ T50] em28xx 9-1:0.0: Registering input extension [ 111.109638][ T9083] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 111.112700][ T2322] em28xx 9-1:0.0: Closing input extension [ 111.182335][ T2322] em28xx 9-1:0.0: Freeing device [ 111.190188][ T9087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.912'. [ 111.203776][ T42] audit: type=1400 audit(2000000313.738:855): avc: denied { connect } for pid=9086 comm="syz.0.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.306265][ T42] audit: type=1400 audit(2000000313.841:856): avc: denied { setopt } for pid=9090 comm="syz.0.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 111.546613][ T2322] net_ratelimit: 12 callbacks suppressed [ 111.546630][ T2322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.696053][ T9101] SELinux: failed to load policy [ 111.791834][ T9107] FAULT_INJECTION: forcing a failure. [ 111.791834][ T9107] name failslab, interval 1, probability 0, space 0, times 0 [ 111.796978][ T9107] CPU: 0 UID: 0 PID: 9107 Comm: syz.4.919 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.796999][ T9107] Tainted: [L]=SOFTLOCKUP [ 111.797003][ T9107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.797010][ T9107] Call Trace: [ 111.797015][ T9107] [ 111.797021][ T9107] dump_stack_lvl+0x100/0x190 [ 111.797041][ T9107] should_fail_ex.cold+0x5/0xa [ 111.797055][ T9107] ? __skb_get_hash_net+0x153/0x560 [ 111.797068][ T9107] should_failslab+0xc2/0x120 [ 111.797085][ T9107] kmem_cache_alloc_noprof+0x91/0x6a0 [ 111.797100][ T9107] ? lock_acquire+0x1b9/0x370 [ 111.797115][ T9107] ? skb_clone+0x190/0x400 [ 111.797131][ T9107] skb_clone+0x190/0x400 [ 111.797147][ T9107] dev_queue_xmit_nit+0x255/0xa60 [ 111.797167][ T9107] dev_hard_start_xmit+0x2f5/0x760 [ 111.797182][ T9107] __dev_queue_xmit+0x1bbf/0x4970 [ 111.797199][ T9107] ? __pfx___dev_queue_xmit+0x10/0x10 [ 111.797218][ T9107] ? rcu_is_watching+0x12/0xc0 [ 111.797252][ T9107] ? __skb_clone+0x570/0x760 [ 111.797267][ T9107] netlink_deliver_tap+0xa4d/0xcc0 [ 111.797283][ T9107] netlink_unicast+0x62b/0x850 [ 111.797303][ T9107] ? __pfx_netlink_unicast+0x10/0x10 [ 111.797315][ T9107] ? __pfx_sock_has_perm+0x10/0x10 [ 111.797334][ T9107] netlink_sendmsg+0x8b0/0xda0 [ 111.797348][ T9107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.797362][ T9107] ? selinux_socket_sendmsg+0x198/0x2f0 [ 111.797381][ T9107] ____sys_sendmsg+0xa4d/0xbe0 [ 111.797398][ T9107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.797412][ T9107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.797436][ T9107] ___sys_sendmsg+0x190/0x1e0 [ 111.797448][ T9107] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.797458][ T9107] ? __lock_acquire+0x49f/0x1a40 [ 111.797473][ T9107] ? get_pid_task+0x106/0x250 [ 111.797498][ T9107] __sys_sendmsg+0x160/0x210 [ 111.797514][ T9107] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.797536][ T9107] do_syscall_64+0x115/0x870 [ 111.797551][ T9107] ? clear_bhb_loop+0x70/0xc0 [ 111.797565][ T9107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.797577][ T9107] RIP: 0033:0x7fd7e079e0d9 [ 111.797587][ T9107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.797598][ T9107] RSP: 002b:00007fd7e161f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.797610][ T9107] RAX: ffffffffffffffda RBX: 00007fd7e0a25fa0 RCX: 00007fd7e079e0d9 [ 111.797617][ T9107] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 111.797624][ T9107] RBP: 00007fd7e161f090 R08: 0000000000000000 R09: 0000000000000000 [ 111.797630][ T9107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.797637][ T9107] R13: 00007fd7e0a26038 R14: 00007fd7e0a25fa0 R15: 00007ffcf2c96f08 [ 111.797651][ T9107] [ 112.003879][ T5875] usb 6-1: USB disconnect, device number 12 [ 112.040785][ T42] audit: type=1326 audit(2000000314.534:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9114 comm="syz.4.923" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7e079e0d9 code=0x0 [ 112.100453][ T9120] netlink: 'syz.1.925': attribute type 20 has an invalid length. [ 112.150252][ T9120] netlink: 'syz.1.925': attribute type 20 has an invalid length. [ 112.225147][ T9124] ufs: You didn't specify the type of your ufs filesystem [ 112.225147][ T9124] [ 112.225147][ T9124] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 112.225147][ T9124] [ 112.225147][ T9124] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 112.561301][ T9135] Bluetooth: MGMT ver 1.23 [ 112.604000][ T5875] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 112.650768][ T42] audit: type=1400 audit(2000000315.105:858): avc: denied { connect } for pid=9138 comm="syz.5.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.668468][ T2322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.753679][ T5875] usb 6-1: device descriptor read/64, error -71 [ 112.875442][ T50] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 112.916703][ T9158] CPU: 2 UID: 0 PID: 9158 Comm: syz.0.935 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.916733][ T9158] Tainted: [L]=SOFTLOCKUP [ 112.916739][ T9158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.916752][ T9158] Call Trace: [ 112.916760][ T9158] [ 112.916768][ T9158] dump_stack_lvl+0x100/0x190 [ 112.916797][ T9158] hid_report_raw_event.cold+0xbd/0xf0 [ 112.916865][ T9158] ? mark_held_locks+0x40/0x70 [ 112.916893][ T9158] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 112.916930][ T9158] ? lockdep_hardirqs_on+0x78/0x100 [ 112.916961][ T9158] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 112.916989][ T9158] __hid_input_report.constprop.0+0x349/0x470 [ 112.917029][ T9158] uhid_char_write+0xb6b/0x10e0 [ 112.917053][ T9158] vfs_write+0x2aa/0x1050 [ 112.917081][ T9158] ? __pfx_uhid_char_write+0x10/0x10 [ 112.917103][ T9158] ? __pfx_vfs_write+0x10/0x10 [ 112.917118][ T9158] ? find_held_lock+0x2b/0x80 [ 112.917135][ T9158] ? __fget_files+0x215/0x3d0 [ 112.917157][ T9158] ? __fget_files+0x215/0x3d0 [ 112.917185][ T9158] ? __fget_files+0x21f/0x3d0 [ 112.917215][ T9158] ksys_write+0x1f8/0x250 [ 112.917241][ T9158] ? __pfx_ksys_write+0x10/0x10 [ 112.917258][ T9158] ? kcov_ioctl+0x17a/0x750 [ 112.917301][ T9158] do_syscall_64+0x115/0x870 [ 112.917326][ T9158] ? clear_bhb_loop+0x70/0xc0 [ 112.917352][ T9158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.917374][ T9158] RIP: 0033:0x7fea0f19e0d9 [ 112.917392][ T9158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.917410][ T9158] RSP: 002b:00007fea0ffff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 112.917430][ T9158] RAX: ffffffffffffffda RBX: 00007fea0f426090 RCX: 00007fea0f19e0d9 [ 112.917442][ T9158] RDX: 000000000000000b RSI: 0000200000000400 RDI: 0000000000000004 [ 112.917452][ T9158] RBP: 00007fea0f235024 R08: 0000000000000000 R09: 0000000000000000 [ 112.917462][ T9158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.917472][ T9158] R13: 00007fea0f426128 R14: 00007fea0f426090 R15: 00007ffc0a4367a8 [ 112.917498][ T9158] [ 112.919930][ T9159] futex_wake_op: syz.5.937 tries to shift op by -1; fix this program [ 112.934356][ T9158] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 113.016500][ T5875] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 113.125808][ T9176] netlink: 'syz.5.943': attribute type 1 has an invalid length. [ 113.128660][ T9175] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 113.157831][ T9176] gretap1: entered promiscuous mode [ 113.163458][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 113.163488][ T42] audit: type=1400 audit(2000000315.582:860): avc: denied { create } for pid=9174 comm="syz.5.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 113.168222][ T5875] usb 6-1: device descriptor read/64, error -71 [ 113.181988][ T42] audit: type=1400 audit(2000000315.582:861): avc: denied { write } for pid=9174 comm="syz.5.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 113.187703][ T9183] __nla_validate_parse: 3 callbacks suppressed [ 113.187715][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'. [ 113.216804][ T9176] bond1 (unregistering): Released all slaves [ 113.262390][ T9191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.948'. [ 113.265262][ T9191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.948'. [ 113.299961][ T5875] usb usb6-port1: attempt power cycle [ 113.422644][ T9195] vlan2: entered allmulticast mode [ 113.424330][ T9195] bond0: entered allmulticast mode [ 113.426004][ T9195] bond_slave_0: entered allmulticast mode [ 113.429101][ T9195] bond_slave_1: entered allmulticast mode [ 113.473831][ T9197] i2c i2c-1: DVB: adapter 0 frontend 0 symbol rate 0 out of range (1000000..45000000) [ 113.475389][ T9199] netlink: 36 bytes leftover after parsing attributes in process `syz.5.952'. [ 113.513150][ T42] audit: type=1400 audit(2000000315.909:862): avc: denied { setopt } for pid=9198 comm="syz.5.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 113.576457][ T5832] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 113.659415][ T9205] lo: entered allmulticast mode [ 113.662989][ T5875] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 113.670558][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.954'. [ 113.675984][ T9204] lo: left allmulticast mode [ 113.684401][ T5875] usb 6-1: device descriptor read/8, error -71 [ 113.690216][ T9207] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 113.711968][ T9211] 9pnet_virtio: no channels available for device syz [ 113.717717][ T9211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.736735][ T5832] usb 9-1: Using ep0 maxpacket: 32 [ 113.750893][ T5832] usb 9-1: unable to get BOS descriptor or descriptor too short [ 113.753186][ T8687] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 113.754375][ T5832] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 113.759455][ T5832] usb 9-1: string descriptor 0 read error: -22 [ 113.762634][ T8191] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 113.763835][ T5832] usb 9-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 113.774958][ T5832] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 113.777949][ T5832] dw2102: su3000_power_ctrl: 1, initialized 0 [ 113.778994][ T8687] (NULL device *): queue 0 connect admin queue failed (-6). [ 113.781095][ T5832] dvb-usb: bulk message failed: -22 (2/0) [ 113.784599][ T8687] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 113.784695][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.794832][ T5832] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.796709][ T8687] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 113.799843][ T5832] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 113.808954][ T5832] usb 9-1: media controller created [ 113.809715][ T9207] nvme nvme0: NVME-FC{0}: new ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery", hostnqn: nqn.2014-08.org.nvmexpress:uuid:63c38947-1180-4b56-ae03-8f3295e3b3e1 [ 113.810886][ T5832] dvb-usb: bulk message failed: -22 (6/0) [ 113.819616][ T5832] dw2102: i2c transfer failed. [ 113.821282][ T5832] dvb-usb: bulk message failed: -22 (6/0) [ 113.823138][ T5832] dw2102: i2c transfer failed. [ 113.824664][ T5832] dvb-usb: bulk message failed: -22 (6/0) [ 113.826474][ T5832] dw2102: i2c transfer failed. [ 113.827929][ T5832] dvb-usb: bulk message failed: -22 (6/0) [ 113.829907][ T5832] dw2102: i2c transfer failed. [ 113.831402][ T5832] dvb-usb: bulk message failed: -22 (6/0) [ 113.834547][ T5832] dw2102: i2c transfer failed. [ 113.838873][ T5832] dvb-usb: bulk message failed: -22 (6/0) [ 113.842339][ T5832] dw2102: i2c transfer failed. [ 113.844060][ T5832] dvb-usb: MAC address: 02:02:02:02:02:02 [ 113.856954][ T5832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.871423][ T5832] dvb-usb: bulk message failed: -22 (3/0) [ 113.877160][ T5832] dw2102: command 0x0e transfer failed. [ 113.882165][ T5832] dvb-usb: bulk message failed: -22 (3/0) [ 113.884651][ T5832] dw2102: command 0x0e transfer failed. [ 113.939762][ T5875] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 113.962547][ T5875] usb 6-1: device descriptor read/8, error -71 [ 114.082327][ T5875] usb usb6-port1: unable to enumerate USB device [ 114.137876][ T42] audit: type=1400 audit(2000000316.490:863): avc: denied { name_bind } for pid=9237 comm="syz.0.968" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 114.146580][ T9241] TCP: TCP_TX_DELAY enabled [ 114.168259][ T9241] netlink: 112 bytes leftover after parsing attributes in process `syz.0.968'. [ 114.191307][ T42] audit: type=1400 audit(2000000316.536:864): avc: denied { relabelfrom } for pid=9237 comm="syz.0.968" name="" dev="pipefs" ino=30178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 114.198895][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.217793][ T5832] dvb-usb: bulk message failed: -22 (3/0) [ 114.217808][ T5832] dw2102: command 0x0e transfer failed. [ 114.219096][ T5832] dvb-usb: bulk message failed: -22 (3/0) [ 114.219112][ T5832] dw2102: command 0x0e transfer failed. [ 114.219118][ T5832] dvb-usb: bulk message failed: -22 (1/0) [ 114.219128][ T5832] dw2102: command 0x51 transfer failed. [ 114.221756][ T9191] dvb-usb: bulk message failed: -22 (4/0) [ 114.221874][ T9191] dw2102: i2c transfer failed. [ 114.222487][ T9228] dvb-usb: bulk message failed: -22 (5/0) [ 114.222504][ T9228] dw2102: i2c transfer failed. [ 114.240342][ T5832] DVB: Unable to find symbol ds3000_attach() [ 114.253685][ T5832] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 114.315049][ T5832] rc_core: IR keymap rc-su3000 not found [ 114.319544][ T5832] Registered IR keymap rc-empty [ 114.330670][ T5832] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 114.331466][ T9251] uprobe: syz.5.972:9251 failed to unregister, leaking uprobe [ 114.337485][ T5832] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input22 [ 114.350726][ T5832] dvb-usb: schedule remote query interval to 150 msecs. [ 114.352997][ T5832] dw2102: su3000_power_ctrl: 0, initialized 1 [ 114.354896][ T5832] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 114.360950][ T5832] usb 9-1: USB disconnect, device number 6 [ 114.405490][ T5832] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 114.468512][ T9258] binder: 9257:9258 ioctl c0306201 200000000080 returned -14 [ 114.618636][ T42] audit: type=1326 audit(2000000316.939:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9263 comm="syz.5.977" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd80b9e0d9 code=0x0 [ 114.840218][ T9271] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 114.842769][ T9271] syzkaller1: linktype set to 776 [ 114.880474][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.891906][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 115.072658][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 115.075340][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 115.080533][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64 [ 115.087297][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.091712][ T24] usb 5-1: Product: syz [ 115.093119][ T24] usb 5-1: Manufacturer: syz [ 115.097384][ T24] usb 5-1: SerialNumber: syz [ 115.100546][ T24] usb 5-1: config 0 descriptor?? [ 115.107110][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 115.110872][ T24] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 115.522317][ T9126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.604493][ T42] audit: type=1400 audit(2000000317.856:866): avc: denied { read } for pid=9285 comm="syz.5.986" name="usbmon1" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 115.608787][ T9291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.987'. [ 115.611864][ T42] audit: type=1400 audit(2000000317.856:867): avc: denied { open } for pid=9285 comm="syz.5.986" path="/dev/usbmon1" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 115.611918][ T9290] kAFS: bad VL server IP address [ 115.627894][ T9291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.987'. [ 115.759429][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 115.863201][ T5875] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 115.991695][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.993431][ T7244] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 116.006029][ T8191] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 116.010404][ T7244] (NULL device *): queue 0 connect admin queue failed (-6). [ 116.014788][ T7244] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 116.017961][ T7244] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 116.044907][ T5875] usb 10-1: Using ep0 maxpacket: 8 [ 116.048333][ T5875] usb 10-1: New USB device found, idVendor=1b3d, idProduct=017a, bcdDevice=27.cc [ 116.052844][ T5875] usb 10-1: config 0 has an invalid interface number: 136 but max is 0 [ 116.056271][ T5875] usb 10-1: config 0 has no interface number 0 [ 116.058831][ T5875] usb 10-1: config 0 interface 136 altsetting 251 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 116.063234][ T5875] usb 10-1: config 0 interface 136 altsetting 251 bulk endpoint 0xB has invalid maxpacket 32 [ 116.067257][ T5875] usb 10-1: config 0 interface 136 altsetting 251 has a duplicate endpoint with address 0xA, skipping [ 116.071978][ T5875] usb 10-1: config 0 interface 136 altsetting 251 endpoint 0x3 has invalid wMaxPacketSize 0 [ 116.075920][ T5875] usb 10-1: config 0 interface 136 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 116.080629][ T5875] usb 10-1: config 0 interface 136 altsetting 251 endpoint 0x7 has invalid wMaxPacketSize 0 [ 116.084585][ T5875] usb 10-1: config 0 interface 136 has no altsetting 0 [ 116.089404][ T5875] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.092054][ T5875] usb 10-1: Product: ఄ [ 116.093404][ T5875] usb 10-1: Manufacturer:  [ 116.094919][ T5875] usb 10-1: SerialNumber: ࠏ鄱㮨ᤇ巉ॼ埅킃舢慤ʏ訪嵈㆐鍔ꖨb∈䳐쓘濅餖隼벐顱됺類瞣䲫룶룘ꋠ癅쩀㮺䠏䗿⽟㬊쩽䪘缆ᣤ⧖灎똄᣻火﷜ﺥ탮쨹 [ 116.102270][ T5875] usb 10-1: config 0 descriptor?? [ 116.104592][ T9290] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 116.203735][ T24] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 116.207508][ T24] em28xx 5-1:0.0: board has no eeprom [ 116.279973][ T9266] em28xx 5-1:0.0: write to i2c device at 0xe failed with unknown error (status=1) [ 116.327655][ T9294] 8021q: VLANs not supported on ip_vti0 [ 116.345923][ T9294] i2c i2c-0: new_device: Instantiated device isp1301 at 0x2c [ 116.352637][ T9294] i2c i2c-1: new_device: Instantiated device isp1301 at 0x2c [ 116.358692][ T9294] i2c i2c-2: new_device: Instantiated device isp1301 at 0x2c [ 116.446501][ T9300] netlink: 64 bytes leftover after parsing attributes in process `syz.4.991'. [ 116.450180][ T9300] netlink: 72 bytes leftover after parsing attributes in process `syz.4.991'. [ 116.547700][ T24] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 116.550391][ T24] em28xx 5-1:0.0: dvb set to bulk mode. [ 116.552566][ T5874] em28xx 5-1:0.0: Binding DVB extension [ 116.563634][ T24] usb 5-1: USB disconnect, device number 8 [ 116.566560][ T24] em28xx 5-1:0.0: Disconnecting em28xx [ 116.600224][ T5874] em28xx 5-1:0.0: Registering input extension [ 116.603198][ T24] em28xx 5-1:0.0: Closing input extension [ 116.620290][ T42] audit: type=1400 audit(2000000318.810:868): avc: denied { mounton } for pid=9309 comm="syz.4.995" path="/183/sec" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 116.652339][ T24] ------------[ cut here ]------------ [ 116.654723][ T24] Device '2-002c' does not have a release() function, it is broken and must be fixed. See Documentation/core-api/kobject.rst. [ 116.660016][ T24] WARNING: drivers/base/core.c:2638 at device_release+0x1da/0x270, CPU#2: kworker/2:0/24 [ 116.663231][ T24] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 116.665511][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.668371][ T42] audit: type=1400 audit(2000000318.857:869): avc: denied { write } for pid=5651 comm="syz-executor" path="pipe:[7742]" dev="pipefs" ino=7742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 116.669143][ T24] Tainted: [L]=SOFTLOCKUP [ 116.678171][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.681418][ T24] Workqueue: usb_hub_wq hub_event [ 116.683049][ T24] RIP: 0010:device_release+0x1dd/0x270 [ 116.684781][ T24] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 2d 8b af fb 48 8d 3d 26 05 d3 0a 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 14 8b af fb 48 89 da 48 b8 00 00 [ 116.691107][ T24] RSP: 0018:ffffc9000062f500 EFLAGS: 00010283 [ 116.693029][ T24] RAX: 0000000000011fda RBX: ffff88802d7cf020 RCX: ffffc9002ee25000 [ 116.696433][ T24] RDX: 0000000000100000 RSI: ffff888059b58d80 RDI: ffffffff912ded80 [ 116.699275][ T24] RBP: ffff888059b58d80 R08: 0000000000000001 R09: 0000000000000000 [ 116.701778][ T24] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888053cd3800 [ 116.704279][ T24] R13: dffffc0000000000 R14: ffff888059b58d80 R15: 0000000000000000 [ 116.706788][ T24] FS: 0000000000000000(0000) GS:ffff8880d5fec000(0000) knlGS:0000000000000000 [ 116.709803][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.712163][ T24] CR2: 0000560e831219a8 CR3: 000000005014a000 CR4: 0000000000352ef0 [ 116.714611][ T24] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 116.717057][ T24] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 116.719781][ T24] Call Trace: [ 116.720852][ T24] [ 116.721778][ T24] kobject_put+0x1f7/0x640 [ 116.723204][ T24] device_unregister+0x2f/0xe0 [ 116.724729][ T24] i2c_unregister_device+0xf5/0x270 [ 116.726713][ T24] i2c_deregister_clients+0x255/0x460 [ 116.728424][ T24] i2c_del_adapter+0x124/0x2d0 [ 116.730704][ T24] em28xx_i2c_unregister+0x47/0x70 [ 116.732459][ T24] em28xx_release_resources+0xe0/0x1b0 [ 116.734173][ T24] em28xx_usb_disconnect.cold+0x17d/0x253 [ 116.735958][ T24] usb_unbind_interface+0x1dd/0x9e0 [ 116.737552][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 116.739274][ T24] device_remove+0x12a/0x180 [ 116.740841][ T24] device_release_driver_internal+0x44e/0x620 [ 116.742752][ T24] bus_remove_device+0x2bc/0x560 [ 116.744308][ T24] ? __pfx_bus_remove_device+0x10/0x10 [ 116.746040][ T24] ? __pfx_device_remove_attrs+0x10/0x10 [ 116.747798][ T24] device_del+0x376/0x9b0 [ 116.749161][ T24] ? __pfx_device_del+0x10/0x10 [ 116.750816][ T24] ? kobject_put+0xb9/0x640 [ 116.752230][ T24] usb_disable_device+0x367/0x810 [ 116.753806][ T24] usb_disconnect+0x2e2/0x9a0 [ 116.755288][ T24] hub_event+0x1bb1/0x4420 [ 116.756725][ T24] ? __lock_acquire+0x49f/0x1a40 [ 116.758555][ T24] ? do_raw_spin_unlock+0x145/0x1e0 [ 116.760188][ T24] ? __pfx_hub_event+0x10/0x10 [ 116.761951][ T24] ? debug_object_deactivate+0x2e4/0x3b0 [ 116.763869][ T24] ? rcu_is_watching+0x12/0xc0 [ 116.765410][ T24] process_one_work+0xa23/0x1940 [ 116.766973][ T24] ? __pfx_process_one_work+0x10/0x10 [ 116.768621][ T24] ? __pfx_hub_event+0x10/0x10 [ 116.770261][ T24] worker_thread+0x5ef/0xe50 [ 116.771906][ T24] ? kthread+0x13a/0x450 [ 116.773356][ T24] ? __pfx_worker_thread+0x10/0x10 [ 116.774914][ T24] kthread+0x370/0x450 [ 116.776191][ T24] ? __pfx_kthread+0x10/0x10 [ 116.777619][ T24] ret_from_fork+0x72b/0xd50 [ 116.779067][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 116.780711][ T24] ? __switch_to+0x800/0x10f0 [ 116.782259][ T24] ? __pfx_kthread+0x10/0x10 [ 116.783722][ T24] ret_from_fork_asm+0x1a/0x30 [ 116.785223][ T24] [ 116.786214][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 116.788456][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.791788][ T24] Tainted: [L]=SOFTLOCKUP [ 116.793126][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.796155][ T24] Workqueue: usb_hub_wq hub_event [ 116.797747][ T24] Call Trace: [ 116.798787][ T24] [ 116.799743][ T24] dump_stack_lvl+0x100/0x190 [ 116.801209][ T24] vpanic+0x552/0x970 [ 116.802451][ T24] ? __pfx_vpanic+0x10/0x10 [ 116.803854][ T24] panic+0xd1/0xe0 [ 116.805007][ T24] ? __pfx_panic+0x10/0x10 [ 116.806589][ T24] check_panic_on_warn.cold+0x19/0x34 [ 116.808368][ T24] ? device_release+0x1da/0x270 [ 116.809934][ T24] __warn.cold+0x191/0x318 [ 116.811308][ T24] __report_bug+0x30f/0x440 [ 116.812740][ T24] ? device_release+0x1da/0x270 [ 116.814239][ T24] ? __pfx___report_bug+0x10/0x10 [ 116.815960][ T24] ? do_raw_spin_lock+0x128/0x260 [ 116.817843][ T24] ? find_held_lock+0x2b/0x80 [ 116.819356][ T24] ? kobj_kset_leave+0x160/0x210 [ 116.821000][ T24] report_bug_entry+0xe1/0x290 [ 116.822531][ T24] ? device_release+0x1dd/0x270 [ 116.824093][ T24] handle_bug+0x1cd/0x2a0 [ 116.825485][ T24] exc_invalid_op+0x17/0x50 [ 116.826939][ T24] asm_exc_invalid_op+0x1a/0x20 [ 116.828477][ T24] RIP: 0010:device_release+0x1dd/0x270 [ 116.830206][ T24] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 2d 8b af fb 48 8d 3d 26 05 d3 0a 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 14 8b af fb 48 89 da 48 b8 00 00 [ 116.836504][ T24] RSP: 0018:ffffc9000062f500 EFLAGS: 00010283 [ 116.838900][ T24] RAX: 0000000000011fda RBX: ffff88802d7cf020 RCX: ffffc9002ee25000 [ 116.841715][ T24] RDX: 0000000000100000 RSI: ffff888059b58d80 RDI: ffffffff912ded80 [ 116.844229][ T24] RBP: ffff888059b58d80 R08: 0000000000000001 R09: 0000000000000000 [ 116.846746][ T24] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888053cd3800 [ 116.849296][ T24] R13: dffffc0000000000 R14: ffff888059b58d80 R15: 0000000000000000 [ 116.851789][ T24] kobject_put+0x1f7/0x640 [ 116.853210][ T24] device_unregister+0x2f/0xe0 [ 116.854733][ T24] i2c_unregister_device+0xf5/0x270 [ 116.856397][ T24] i2c_deregister_clients+0x255/0x460 [ 116.858096][ T24] i2c_del_adapter+0x124/0x2d0 [ 116.859617][ T24] em28xx_i2c_unregister+0x47/0x70 [ 116.861242][ T24] em28xx_release_resources+0xe0/0x1b0 [ 116.862968][ T24] em28xx_usb_disconnect.cold+0x17d/0x253 [ 116.864908][ T24] usb_unbind_interface+0x1dd/0x9e0 [ 116.866605][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 116.868424][ T24] device_remove+0x12a/0x180 [ 116.870051][ T24] device_release_driver_internal+0x44e/0x620 [ 116.872453][ T24] bus_remove_device+0x2bc/0x560 [ 116.874020][ T24] ? __pfx_bus_remove_device+0x10/0x10 [ 116.875770][ T24] ? __pfx_device_remove_attrs+0x10/0x10 [ 116.877580][ T24] device_del+0x376/0x9b0 [ 116.878982][ T24] ? __pfx_device_del+0x10/0x10 [ 116.880798][ T24] ? kobject_put+0xb9/0x640 [ 116.882247][ T24] usb_disable_device+0x367/0x810 [ 116.883858][ T24] usb_disconnect+0x2e2/0x9a0 [ 116.885364][ T24] hub_event+0x1bb1/0x4420 [ 116.886820][ T24] ? __lock_acquire+0x49f/0x1a40 [ 116.888411][ T24] ? do_raw_spin_unlock+0x145/0x1e0 [ 116.890074][ T24] ? __pfx_hub_event+0x10/0x10 [ 116.891653][ T24] ? debug_object_deactivate+0x2e4/0x3b0 [ 116.893427][ T24] ? rcu_is_watching+0x12/0xc0 [ 116.895050][ T24] process_one_work+0xa23/0x1940 [ 116.896657][ T24] ? __pfx_process_one_work+0x10/0x10 [ 116.898354][ T24] ? __pfx_hub_event+0x10/0x10 [ 116.899982][ T24] worker_thread+0x5ef/0xe50 [ 116.901620][ T24] ? kthread+0x13a/0x450 [ 116.902999][ T24] ? __pfx_worker_thread+0x10/0x10 [ 116.904596][ T24] kthread+0x370/0x450 [ 116.905926][ T24] ? __pfx_kthread+0x10/0x10 [ 116.907356][ T24] ret_from_fork+0x72b/0xd50 [ 116.908798][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 116.910493][ T24] ? __switch_to+0x800/0x10f0 [ 116.911972][ T24] ? __pfx_kthread+0x10/0x10 [ 116.913507][ T24] ret_from_fork_asm+0x1a/0x30 [ 116.915186][ T24] [ 116.917046][ T24] Kernel Offset: disabled [ 116.918585][ T24] Rebooting in 86400 seconds..